Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9JYTzKeflZjciaAA7nNLzFHQYlA.roa
File: 9JYTzKeflZjciaAA7nNLzFHQYlA.roa (raw, json)
Hash identifier: rIWE6Mc5mCL34uluEswb+ZM8Y/fDbc7w+2jTIMaWbpE=
Subject key identifier: F4:96:13:CC:A7:9F:95:98:DC:89:A0:00:EE:73:4B:CC:51:D0:62:50
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01911365CF67C61F8D4C3FF8921E7E845811
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9JYTzKeflZjciaAA7nNLzFHQYlA.roa
Signing time: Fri 02 Aug 2024 14:02:04 +0000
ROA not before: Fri 02 Aug 2024 14:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 77.90.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 04:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:65:cf:67:c6:1f:8d:4c:3f:f8:92:1e:7e:84:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 14:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f49613cca79f9598dc89a000ee734bcc51d06250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:3d:d2:ef:a5:dd:b1:4e:9a:4c:af:50:5d:
b6:35:3e:94:eb:39:6c:f8:4f:b8:8a:c1:d7:8d:4b:
2a:ee:55:bb:8c:1a:ca:5c:88:f1:45:5b:0d:5a:a6:
98:01:d2:a1:37:50:ce:66:5e:fd:5e:ae:03:3e:b4:
0e:5e:75:1d:cc:2e:ea:7b:bb:cf:41:9e:64:cf:cc:
f7:78:95:eb:3d:23:95:bb:a3:b6:b4:db:00:10:51:
aa:cb:88:29:6e:b0:5b:3b:70:f0:db:37:a7:17:3d:
cc:29:8c:06:50:45:88:0d:95:99:d5:3f:0e:f3:3a:
96:91:16:8d:00:f8:8c:48:cc:02:ec:9b:c6:3c:98:
69:2a:26:dc:b1:d6:5f:ba:5e:f8:e4:1c:1a:92:ae:
68:cf:06:53:a5:6b:1b:d2:77:6f:e5:0c:10:b4:7d:
6f:65:dc:ec:30:d8:fb:bc:32:60:34:1b:5e:17:cd:
b9:ee:6b:49:e4:64:ee:93:98:ce:55:9a:49:8d:30:
da:86:a2:ad:59:90:4d:b7:01:96:fe:4e:ad:e5:99:
e3:7d:e8:58:4f:20:ce:6e:76:56:4b:07:ea:96:2e:
37:8a:00:d8:f9:f6:fb:03:20:15:bf:e2:42:0a:6a:
a2:7d:ce:3a:db:87:6d:1b:83:3c:31:36:e9:7a:39:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:13:CC:A7:9F:95:98:DC:89:A0:00:EE:73:4B:CC:51:D0:62:50
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9JYTzKeflZjciaAA7nNLzFHQYlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.47.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a3:cd:98:a2:b6:84:4c:72:95:21:eb:05:35:3f:45:a4:82:
de:6b:e7:c4:8e:9d:1c:43:fa:a4:3a:8d:7f:53:63:77:77:6b:
de:15:66:3c:71:28:33:64:47:73:cc:4e:c9:03:94:34:a4:7f:
b8:6a:45:2e:9c:d2:cb:eb:7b:ec:b1:b9:04:20:91:74:dc:05:
80:d3:62:37:64:3b:f0:76:34:34:0b:7f:83:e1:34:1e:32:1e:
ed:06:5f:b2:27:16:84:2c:cc:df:6c:08:1c:96:9d:2e:9e:a6:
18:2d:be:1f:0e:58:e0:70:a7:84:f8:65:75:bf:ca:41:d4:af:
b7:13:4b:e5:20:5b:c5:8f:f1:08:1c:f7:e0:ef:c5:d3:c8:32:
8b:c8:e2:99:e6:3f:14:93:2c:a9:b8:6f:7f:ec:76:2d:27:66:
50:33:07:06:74:e0:0e:2a:6e:92:75:9e:a7:a2:0d:94:34:04:
a6:31:7c:ae:85:21:86:47:a5:cd:c6:f5:74:fe:79:fb:92:bd:
08:b5:aa:e7:ea:74:d7:70:db:fd:22:5e:56:d7:a1:6f:03:98:
c5:c3:0a:e1:21:6a:0a:26:17:59:c3:f0:2f:db:13:a8:60:35:
e5:5b:45:a6:af:23:2c:cb:b6:36:de:ae:3f:fa:be:43:6f:5f:
9d:3c:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org