Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9e4RsV-KS-jAS3pAUvZCP2hHcbU.roa
File: 9e4RsV-KS-jAS3pAUvZCP2hHcbU.roa (raw, json)
Hash identifier: zEsWtxG6ZGL5kcB7orn7RQjZCONyARrk/AaDkITLqxY=
Subject key identifier: F5:EE:11:B1:5F:8A:4B:E8:C0:4B:7A:40:52:F6:42:3F:68:47:71:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019003E716ED56550EE03EDAC5ADBF760834
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9e4RsV-KS-jAS3pAUvZCP2hHcbU.roa
Signing time: Mon 10 Jun 2024 20:46:34 +0000
ROA not before: Mon 10 Jun 2024 20:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 77.90.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 04:06:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:03:e7:16:ed:56:55:0e:e0:3e:da:c5:ad:bf:76:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 10 20:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5ee11b15f8a4be8c04b7a4052f6423f684771b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bf:26:1f:a3:c5:cb:59:ad:50:3f:d3:d1:2d:
07:ae:07:56:4b:f0:f4:b2:4e:0f:b8:15:bd:79:39:
54:17:11:86:59:1d:b5:0f:69:68:ee:28:39:49:ed:
6d:7f:28:e4:cd:67:0d:5f:e9:be:a3:00:7b:1d:fe:
6c:df:71:a1:ed:82:91:35:d3:18:2b:dc:bc:2a:51:
e8:75:69:41:4f:fc:e2:fb:1a:50:88:1a:31:ae:1e:
b4:84:48:1c:b8:87:02:d5:8f:a4:fa:63:80:18:e5:
0b:74:32:0d:cb:87:8b:21:d3:49:f7:05:07:90:d4:
f0:e2:ad:fe:69:88:10:23:56:53:e2:79:be:a7:e0:
53:4d:93:77:3a:39:82:8b:93:fe:29:4b:8b:ad:d7:
f1:6f:7f:b0:af:9e:71:58:6c:a2:60:1a:5a:0d:9b:
10:58:22:2a:c7:e3:53:51:4a:01:75:68:aa:ee:a6:
ad:f8:67:6a:13:db:a6:65:e2:5a:77:7d:38:4d:5e:
dd:29:66:50:55:30:c8:94:7d:5b:17:fa:59:7e:b1:
bc:5e:13:7a:e2:40:79:78:29:dd:e3:b7:6f:c5:aa:
9f:05:e8:86:cb:7d:c8:b3:3e:48:9b:30:57:14:14:
74:eb:3e:6f:4b:7a:73:2d:28:b8:a1:29:05:6d:70:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EE:11:B1:5F:8A:4B:E8:C0:4B:7A:40:52:F6:42:3F:68:47:71:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9e4RsV-KS-jAS3pAUvZCP2hHcbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
e9:d5:12:ab:c5:41:e8:f0:76:cd:e7:63:27:40:40:bd:c7:f2:
e4:c1:29:62:90:3e:2d:68:8b:af:57:13:ed:d6:a9:ed:20:1b:
f3:e0:b9:fc:7f:bd:de:55:6e:9c:5a:05:a7:ad:21:b6:97:76:
d3:07:c4:31:bd:5b:fd:22:aa:8d:22:38:98:13:43:48:f3:aa:
cf:ee:a6:be:f6:2d:f7:af:1a:24:25:47:3d:ea:00:49:74:fa:
7b:f6:89:b1:71:b8:7f:54:33:70:8f:1d:db:1d:d2:ab:45:5f:
21:f7:42:2e:6f:f4:e3:a9:cd:9b:9f:ee:0c:59:54:ea:14:8a:
53:9f:b1:2e:db:05:54:24:87:9a:ed:26:c0:8f:76:be:f3:cd:
91:74:0d:26:a7:92:8d:1b:fc:bd:bb:60:cc:17:88:3f:94:1b:
e8:84:7f:db:a6:e8:dc:fa:73:9e:f8:31:33:b0:f0:18:fa:cb:
8a:95:f7:38:81:1c:3b:86:ca:77:03:89:b8:1a:51:20:98:e4:
f2:b8:f1:ea:97:b7:f3:fb:d3:d0:3f:39:5a:f1:c0:9f:38:ac:
fe:28:f3:76:8e:15:1b:e5:8c:f3:0d:c0:d5:a9:11:7f:62:97:
39:d2:93:a4:d8:68:ba:67:ac:8d:48:5c:1e:50:b5:6c:44:80:
3f:21:3e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 05:15:56 2024 by rpki-client on console-fra.rpki-client.org