Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BXVnwDKv9KOedErfIL-n_xv3E_k.roa
File: BXVnwDKv9KOedErfIL-n_xv3E_k.roa (raw, json)
Hash identifier: 75qYjsOrKDG+nScaKRWUWRjZpcYIR6H+Vt8ujAO1WtA=
Subject key identifier: 05:75:67:C0:32:AF:F4:A3:9E:74:4A:DF:20:BF:A7:FF:1B:F7:13:F9
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192F12AB8429FE2BD29B2FC96BE358A4633
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BXVnwDKv9KOedErfIL-n_xv3E_k.roa
Signing time: Sun 03 Nov 2024 08:36:01 +0000
ROA not before: Sun 03 Nov 2024 08:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63473
IP address blocks: 77.90.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 12:17:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f1:2a:b8:42:9f:e2:bd:29:b2:fc:96:be:35:8a:46:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 3 08:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=057567c032aff4a39e744adf20bfa7ff1bf713f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:0b:77:7e:7b:cb:b5:17:48:d1:bd:7a:8b:
73:34:00:46:eb:f0:2b:26:c9:21:96:ef:35:e3:73:
fe:44:ad:fa:08:8b:ad:9f:6c:c5:0f:42:47:5d:6a:
d5:43:35:90:ec:f5:a9:b8:0d:d2:50:5d:ce:bf:39:
c0:b9:53:ea:2b:74:3b:08:85:bf:c2:13:c9:eb:02:
0c:9a:81:ea:f8:8b:6a:da:e5:1d:bd:4d:f6:9e:59:
43:ba:7f:4f:b6:12:39:71:68:73:8a:09:17:c2:07:
74:44:cb:4b:02:a8:7f:be:16:eb:11:72:aa:09:28:
49:cd:4e:3c:e6:95:ee:e6:a3:24:6f:11:77:f3:2b:
3e:fb:dd:0c:df:9d:e1:73:a9:bf:7a:4c:19:fc:ba:
47:7a:c0:96:78:f9:7a:34:f5:d1:dd:00:02:1c:67:
e9:95:59:3e:1f:25:bd:85:eb:b8:11:0e:c7:6b:b1:
6c:dc:d2:ba:7f:60:16:0d:74:20:89:85:42:b0:63:
1c:ea:8f:7d:47:12:7a:ac:0a:e4:af:5e:2f:44:58:
7d:ea:6e:4d:0e:27:1a:d7:54:13:fa:29:15:b1:71:
09:62:e9:27:7d:49:f8:00:cd:9a:fb:29:7d:97:b8:
bd:ec:75:fa:1b:3f:33:5e:6c:ee:4b:9f:39:d5:2a:
d1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:75:67:C0:32:AF:F4:A3:9E:74:4A:DF:20:BF:A7:FF:1B:F7:13:F9
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BXVnwDKv9KOedErfIL-n_xv3E_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.35.0/24
Signature Algorithm: sha256WithRSAEncryption
59:32:52:ea:f7:d3:7a:52:16:bb:0e:32:60:47:e7:27:da:1e:
e9:0e:96:89:1e:c2:ab:45:7c:fb:5e:23:05:ea:38:f2:f4:b3:
ff:ba:27:b3:29:5a:58:6e:d9:08:8f:2a:ca:da:1f:ec:96:62:
8f:9d:f2:94:93:b2:36:c4:99:24:44:58:8f:a6:2b:ca:7d:ab:
46:d3:00:4a:e5:15:d6:e2:4c:ad:ff:2b:cd:2f:2c:1a:7b:94:
8f:43:97:d7:40:cb:85:94:90:4b:c1:93:17:5a:72:16:b3:0f:
e6:c3:80:bd:b1:72:30:0e:fc:cc:86:af:bf:71:97:7b:0b:22:
87:40:ef:97:30:9e:3e:e0:35:cf:b2:88:35:20:66:cd:82:7e:
90:57:41:8d:74:b3:74:35:7e:94:93:b8:a1:4d:56:20:6a:35:
d5:78:27:14:d2:41:87:cf:52:bb:50:d0:91:65:33:60:85:79:
f1:aa:26:6d:6a:5c:56:61:01:0a:84:97:34:31:db:a1:5f:c9:
0c:cf:bd:5b:e9:ea:cc:13:3b:b2:f9:5f:98:f1:c2:5a:bf:5c:
0c:59:d6:2c:86:5a:95:7b:29:f7:1d:04:04:9e:36:85:f2:30:
0d:b7:1e:62:5b:2b:9e:34:f4:bb:ec:20:92:4a:10:09:6e:6d:
7b:d6:05:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLxKrhCn+K9KbL8lr41ikYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTAzMDgzNjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTc1NjdjMDMyYWZmNGEzOWU3NDRhZGYyMGJmYTdmZjFiZjcxM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa8Ld357y7UXSNG9eotzNABG6/Ar
Jskhlu8143P+RK36CIutn2zFD0JHXWrVQzWQ7PWpuA3SUF3OvznAuVPqK3Q7CIW/
whPJ6wIMmoHq+Itq2uUdvU32nllDun9PthI5cWhzigkXwgd0RMtLAqh/vhbrEXKq
CShJzU485pXu5qMkbxF38ys++90M353hc6m/ekwZ/LpHesCWePl6NPXR3QACHGfp
lVk+HyW9heu4EQ7Ha7Fs3NK6f2AWDXQgiYVCsGMc6o99RxJ6rArkr14vRFh96m5N
Dica11QT+ikVsXEJYuknfUn4AM2a+yl9l7i97HX6Gz8zXmzuS5851SrR4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAV1Z8Ayr/SjnnRK3yC/p/8b9xP5MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQlhWbndES3Y5S09lZEVyZklMLW5feHYzRV9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVojMA0G
CSqGSIb3DQEBCwUAA4IBAQBZMlLq99N6Uha7DjJgR+cn2h7pDpaJHsKrRXz7XiMF
6jjy9LP/uiezKVpYbtkIjyrK2h/slmKPnfKUk7I2xJkkRFiPpivKfatG0wBK5RXW
4kyt/yvNLywae5SPQ5fXQMuFlJBLwZMXWnIWsw/mw4C9sXIwDvzMhq+/cZd7CyKH
QO+XMJ4+4DXPsog1IGbNgn6QV0GNdLN0NX6Uk7ihTVYgajXVeCcU0kGHz1K7UNCR
ZTNghXnxqiZtalxWYQEKhJc0MduhX8kMz71b6erMEzuy+V+Y8cJav1wMWdYshlqV
eyn3HQQEnjaF8jANtx5iWyueNPS77CCSShAJbm171gXQ
-----END CERTIFICATE-----
Generated at Sun Nov 3 16:37:07 2024 by rpki-client on console-fra.rpki-client.org