Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DDtPN5ZXlTJM-fSr_KBqX1QNZmU.roa
File: DDtPN5ZXlTJM-fSr_KBqX1QNZmU.roa (raw, json)
Hash identifier: W3v+/1/zjt7fQX/eVA4kUPyaKvBhpGlTTgGCy5CBL4k=
Subject key identifier: 0C:3B:4F:37:96:57:95:32:4C:F9:F4:AB:FC:A0:6A:5F:54:0D:66:65
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01921D0E38E78329CC3F85769C4C8CE4BD50
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DDtPN5ZXlTJM-fSr_KBqX1QNZmU.roa
Signing time: Mon 23 Sep 2024 04:05:24 +0000
ROA not before: Mon 23 Sep 2024 04:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.139.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 15:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:0e:38:e7:83:29:cc:3f:85:76:9c:4c:8c:e4:bd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 23 04:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c3b4f37965795324cf9f4abfca06a5f540d6665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:de:11:98:74:d1:33:46:50:f1:87:c8:ba:96:
bb:96:a8:40:cc:e4:89:26:63:fd:0e:43:c1:c3:a0:
a4:34:f5:da:d5:c8:e9:46:7b:d2:2b:e9:81:b5:dc:
40:ed:e2:ef:49:3e:0a:e3:f4:95:ee:54:c4:6f:8b:
3a:ca:ed:2b:46:5e:c5:9e:48:a9:0d:55:1c:e8:9b:
46:4e:f1:8c:47:63:03:0a:32:be:49:d5:e7:6c:ec:
bb:53:de:80:d5:18:1d:bc:43:92:61:0a:19:fb:89:
90:2a:df:96:fb:a3:bf:9a:73:6c:18:50:96:e5:80:
af:43:3a:3b:ca:01:f4:a6:f2:8b:90:08:3c:48:45:
31:e6:72:71:2d:8f:fd:e6:f9:73:e0:3a:ea:89:74:
a2:d3:1a:8b:dd:72:fb:2e:46:f0:8a:d8:a3:3c:ce:
87:0f:8b:89:e7:20:16:2a:ad:f3:2e:d9:c7:91:8c:
32:7d:90:01:bf:0b:ac:18:56:4e:ca:21:15:90:82:
06:5d:17:39:43:8f:61:46:12:cb:89:68:64:cc:5c:
f1:63:f9:1d:b8:5f:bd:11:4e:51:50:74:59:87:bb:
c4:26:8a:30:ce:4f:3f:2c:e5:22:e4:11:66:3a:bd:
50:ea:9f:4d:2d:0b:90:ce:3b:86:e4:57:9e:7b:1f:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3B:4F:37:96:57:95:32:4C:F9:F4:AB:FC:A0:6A:5F:54:0D:66:65
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DDtPN5ZXlTJM-fSr_KBqX1QNZmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.139.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
df:de:c2:b3:f1:5b:f3:47:d7:7f:b7:84:c8:0f:97:a8:cf:b8:
31:f7:8e:ce:61:64:1d:09:c8:1e:95:99:4c:c3:6f:b9:ed:b1:
b0:9f:2c:45:c7:90:df:34:8a:b6:5e:38:a9:b2:ab:b2:04:6b:
d3:24:cb:f4:8c:0b:b2:53:42:0c:55:31:7b:9a:7c:f6:2d:d7:
94:25:bd:52:19:bb:e2:eb:c5:2c:34:84:46:4a:bb:ae:df:2b:
6d:f6:13:07:ee:b3:de:c0:7d:a4:3f:52:b9:08:98:a0:e9:68:
fd:2c:b7:6a:06:01:8f:c6:61:c6:7f:94:4a:f9:4f:0f:d2:22:
95:ff:ef:64:6c:b3:fd:e2:21:67:8a:dd:f9:08:04:49:99:b1:
ea:6c:cd:92:1a:18:76:46:f9:69:fb:ab:56:a3:a2:b3:0d:4a:
99:22:03:7b:c3:33:e4:0d:b5:ac:d8:06:5e:bb:e8:32:18:aa:
90:c7:cf:b9:8f:ef:be:15:c4:9f:d5:93:67:20:42:d5:78:84:
8e:58:64:b0:6c:b7:75:4e:55:8c:39:3f:6c:09:df:3c:dd:7f:
6b:5f:f0:d5:d2:0f:99:b8:96:c2:24:49:b0:2e:d2:20:cd:56:
52:04:51:58:e5:ed:ff:98:85:f0:2d:50:8f:72:3f:80:a6:99:
23:43:70:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 19:51:34 2024 by rpki-client on console-ams.rpki-client.org