Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9ZviE02HoAGaBiKH02HynA9IMbI.roa
File: 9ZviE02HoAGaBiKH02HynA9IMbI.roa (raw, json)
Hash identifier: /TXgMVPoYmTLNAneDR9vlHBsX5YJLFVw4jna0yYgzXc=
Subject key identifier: F5:9B:E2:13:4D:87:A0:01:9A:06:22:87:D3:61:F2:9C:0F:48:31:B2
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422201BD335C25BA5B7F0492388AA5BA2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9ZviE02HoAGaBiKH02HynA9IMbI.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 05 Jan 2025 11:27:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1b:d3:35:c2:5b:a5:b7:f0:49:23:88:aa:5b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f59be2134d87a0019a062287d361f29c0f4831b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:15:c0:5d:29:12:2f:50:5d:b0:c9:cb:b6:
39:2d:a4:9b:95:fd:63:3c:01:3f:1b:f7:15:73:9c:
c6:31:06:0f:20:fe:83:c6:ea:b9:71:ad:94:01:38:
7d:0e:ea:81:62:55:b4:a4:f7:26:01:2f:22:6e:d6:
9b:bd:4c:7d:7f:e4:3f:0e:fe:e8:d0:ee:9a:82:df:
a9:5b:b8:b8:50:9a:8a:52:ec:4a:7a:90:56:1b:35:
8a:8f:6d:e5:2e:3d:ec:d2:fb:cf:18:7c:06:8c:84:
09:6d:b0:18:66:8c:1a:14:d3:e2:47:57:69:ed:c4:
34:df:5d:f9:7a:29:0c:72:b0:e9:68:a1:26:63:02:
d8:f8:89:ed:29:41:42:86:b3:26:31:52:59:2d:60:
9c:5e:fb:f1:2a:80:14:f9:04:90:d8:3d:9e:54:d8:
70:4b:8c:6e:aa:da:3a:36:65:68:a0:c3:1b:e8:23:
f9:04:a8:64:11:44:e2:73:50:75:48:de:cb:8d:a5:
41:77:1e:47:99:cd:04:0b:0e:65:0e:bd:57:7d:eb:
e6:39:7f:2e:c4:f3:54:16:98:5d:d1:3e:56:7e:16:
cd:06:be:b0:93:bb:4f:a3:fa:d1:83:da:99:32:6e:
ad:27:c9:d6:1f:07:73:c9:a4:61:4d:85:2a:53:05:
c3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:E2:13:4D:87:A0:01:9A:06:22:87:D3:61:F2:9C:0F:48:31:B2
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9ZviE02HoAGaBiKH02HynA9IMbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f4:74:33:bc:b8:60:0b:2f:e2:16:02:a4:9e:15:00:52:7e:
0b:00:10:e1:c9:e1:c4:90:f1:f8:cd:f5:7d:c6:cc:6e:20:93:
4d:cc:6a:71:c5:7e:ad:05:d7:46:12:3e:b2:a3:fb:15:aa:c0:
fe:7a:d3:d7:71:69:2c:97:96:89:ac:94:ac:5d:3c:b9:61:7d:
73:1f:6a:4d:14:a7:14:c5:9c:5c:f7:6f:e6:25:38:74:d1:fd:
b0:0c:86:1e:de:37:59:95:35:20:d3:10:69:45:68:3a:d2:ff:
2f:ca:37:22:5c:f5:b5:25:f7:a1:b0:f3:c7:d6:fe:de:1d:12:
f7:de:6a:8a:5d:bc:48:51:e4:aa:70:c0:ca:af:72:27:52:96:
4a:c4:d5:45:e7:73:2f:b4:e5:d2:65:08:dc:c5:e3:d5:04:8c:
bd:d3:ec:29:0b:36:84:70:da:a7:80:bb:4e:27:f6:09:c2:79:
6f:5e:a6:2f:9e:af:85:57:4f:0b:92:ac:0f:2e:b2:11:3a:94:
98:c7:56:d0:dc:98:cf:54:b2:26:83:c3:15:53:07:7d:2b:4c:
1e:b5:46:e6:ba:93:f2:67:69:6d:eb:b3:61:29:ab:cf:22:24:
ec:75:ee:ad:47:c4:02:41:0f:47:7d:e5:87:b9:1b:30:63:b0:
69:a8:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:08:02 2025 by rpki-client