Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xccT5R3LinBKUu7SSZZPN6YNzQ.roa
File: 9xccT5R3LinBKUu7SSZZPN6YNzQ.roa (raw, json)
Hash identifier: pdCuBYR6xzz/MxFwxTxOF5b1/aQ9yK9iiyP73oafenk=
Subject key identifier: F7:17:1C:4F:94:77:2E:29:C1:29:4B:BB:49:26:59:3C:DE:98:37:34
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019368F819728AD8579842319B62E612E3A6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xccT5R3LinBKUu7SSZZPN6YNzQ.roa
Signing time: Tue 26 Nov 2024 14:55:10 +0000
ROA not before: Tue 26 Nov 2024 14:55:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 10:33:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:f8:19:72:8a:d8:57:98:42:31:9b:62:e6:12:e3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 14:55:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7171c4f94772e29c1294bbb4926593cde983734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:55:25:b7:a0:e5:04:b3:7e:51:e8:57:38:
ff:ec:0c:ff:03:8b:96:af:33:71:89:81:77:bf:74:
0a:cc:85:67:d5:47:bc:37:f2:a5:57:25:e4:7d:48:
34:57:56:12:de:13:5c:fb:1b:1a:bc:fa:6f:7d:91:
f2:08:3f:f1:a2:f8:38:f2:f1:7b:c2:c0:c1:ca:73:
ac:28:54:b6:c3:7e:70:0a:e5:78:f0:97:fa:6c:39:
bf:b0:c1:f0:71:37:90:7f:2a:88:69:c4:1f:25:2c:
04:3d:16:7a:8f:d9:21:c8:5d:41:69:65:13:1d:ff:
ba:b5:60:cd:b3:2a:80:9c:f5:a8:87:fc:56:70:47:
98:e9:15:51:ba:97:c8:bc:30:87:7a:57:52:8c:61:
9a:a1:24:da:43:5e:98:bd:23:5a:f2:c0:43:62:b2:
a3:40:4f:ce:b2:19:f4:e6:0f:9b:d1:23:d5:ef:38:
dd:69:fe:73:f3:06:9e:d5:73:4f:71:1a:ba:40:79:
54:70:9a:a3:47:42:60:dd:e6:30:f8:8b:be:5a:14:
31:dc:20:cd:da:f2:97:2f:c1:77:4f:a4:b5:9c:8a:
f4:e1:8d:fa:f1:5d:be:df:40:84:3f:f5:bf:27:e3:
71:7e:88:77:8d:e2:28:db:28:e7:69:10:60:b9:18:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:1C:4F:94:77:2E:29:C1:29:4B:BB:49:26:59:3C:DE:98:37:34
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9xccT5R3LinBKUu7SSZZPN6YNzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bc:5c:a2:51:0c:f6:81:b5:96:08:04:70:03:d8:a0:c8:9a:
39:51:63:1a:32:0c:7e:0c:c0:84:5f:12:50:1f:f4:8b:19:ff:
8f:78:7e:e8:43:97:5f:22:1b:60:59:39:00:6e:d5:a1:57:13:
0b:0b:32:f6:2f:fd:29:24:7b:06:73:12:ff:05:04:16:2f:0f:
86:6e:87:d3:4c:7b:f6:4e:1d:96:ec:91:4c:4d:fc:93:4a:9e:
ba:33:c9:49:00:55:2d:6f:54:ef:70:3a:ea:57:92:51:13:3a:
ca:76:d9:f1:05:fd:61:7a:4e:ee:97:a8:0e:f6:9d:0b:60:b3:
ab:28:46:be:74:08:bf:84:bf:d5:71:50:cf:df:94:28:7c:19:
f9:34:77:8f:12:b9:94:4e:c8:ec:09:e9:b6:1f:ab:d7:e9:2c:
39:36:5b:39:cb:93:a6:18:50:48:25:69:12:d7:1e:c6:b1:85:
a1:7a:54:b1:74:4d:2e:74:2e:25:5e:a6:1d:27:14:d8:57:f7:
a0:2a:84:80:36:6b:9e:a7:33:19:4d:20:a7:4d:2e:ea:bf:bf:
43:d3:92:54:b1:2c:8b:7a:55:ed:9e:e3:21:1c:7c:22:3e:03:
00:23:50:d0:8c:ac:88:42:e5:87:1c:1f:81:cb:e6:25:22:c4:
3c:ed:fc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:03 2025 by rpki-client