Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DIFhVmkuReEErDRnsKgudFntPvg.roa
File: DIFhVmkuReEErDRnsKgudFntPvg.roa (raw, json)
Hash identifier: OloB3UjFffGSDTKucMWOtmUEUFFkLYmNhbKQmd24trs=
Subject key identifier: 0C:81:61:56:69:2E:45:E1:04:AC:34:67:B0:A8:2E:74:59:ED:3E:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191416774A3F8008D3FDA9F77BC10F46477
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DIFhVmkuReEErDRnsKgudFntPvg.roa
Signing time: Sun 11 Aug 2024 12:26:24 +0000
ROA not before: Sun 11 Aug 2024 12:26:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215039
IP address blocks: 77.90.5.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 12:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:67:74:a3:f8:00:8d:3f:da:9f:77:bc:10:f4:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 11 12:26:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c816156692e45e104ac3467b0a82e7459ed3ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:2a:5b:cb:1d:03:ae:e7:e5:12:ef:f0:01:
19:52:5e:97:16:45:bb:a3:c4:d7:92:97:11:8d:87:
0c:18:76:35:a9:b7:ed:2c:0d:da:8b:cb:33:92:b3:
9e:bd:16:48:3a:17:37:bd:48:8a:20:47:d9:34:0f:
87:01:24:af:9a:cc:df:d6:f6:43:b0:74:cf:26:bf:
cc:5e:7c:37:38:29:88:a3:25:38:5b:9f:8c:6d:1a:
31:14:15:57:70:ac:9a:4f:b3:fe:78:f4:c7:64:25:
aa:ec:d9:59:41:14:5c:44:65:26:81:c4:33:ef:12:
3b:93:ba:cc:8b:81:2a:96:51:b1:b9:8b:c0:a4:50:
eb:c7:fc:2c:e1:30:c0:98:96:0b:8a:02:82:63:0b:
5f:f8:0c:71:88:36:50:a2:ac:8d:9a:9c:49:0c:4f:
cb:12:c1:c9:4e:c7:38:81:76:39:f9:aa:a1:4e:3d:
59:21:af:fe:8d:9f:98:8b:33:c9:10:98:a1:4a:c1:
be:ac:ae:84:b8:a1:77:bf:fa:4e:89:b0:05:65:cb:
af:29:bf:0a:8d:f9:b1:e5:c6:7f:8a:f0:88:6a:9e:
70:34:a3:b3:74:a0:8b:6b:26:19:1f:5b:81:80:07:
9b:ed:c0:89:90:17:32:49:4c:eb:06:8b:86:3f:01:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:81:61:56:69:2E:45:E1:04:AC:34:67:B0:A8:2E:74:59:ED:3E:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DIFhVmkuReEErDRnsKgudFntPvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.5.0/24
77.90.14.0/24
77.90.53.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6b:84:e2:e4:c8:5f:af:c2:6b:8f:b9:de:c2:60:16:d0:67:
0c:9c:50:49:a7:3e:20:be:f7:d3:3f:c7:4d:76:c1:16:ab:a0:
21:ea:4c:1a:93:68:13:06:2e:6a:d9:c3:06:2c:49:0c:47:d9:
de:ae:f1:8e:60:6e:24:40:04:f2:56:c4:3d:a0:ab:8a:ae:cd:
30:07:b4:2d:ea:ac:53:24:74:d4:57:58:ee:4f:f2:07:96:9e:
1d:1f:35:58:ef:25:f1:7c:09:8b:ce:e5:8e:39:f6:1e:65:f4:
c8:8e:1b:b7:ca:d4:eb:69:67:aa:d2:57:ad:b2:07:de:84:23:
30:f5:35:93:0f:b2:f3:ab:11:a5:9d:3f:15:54:dc:d7:b9:c3:
fa:79:1d:9f:6c:e3:d6:77:5b:93:fb:2c:00:08:da:00:a3:3a:
bc:9c:86:b8:db:71:04:5c:5e:f2:89:02:fb:ae:45:89:3f:78:
91:db:94:c4:2e:3f:9e:ac:b8:31:53:1d:bf:23:96:1d:ca:10:
02:da:67:7b:99:23:fa:6e:1b:33:fb:80:79:3f:a1:c3:7a:1f:
8f:6c:b3:06:0a:43:41:d3:95:de:eb:bf:b2:1f:72:eb:bc:31:
4e:08:5d:65:9d:e4:48:82:fb:c0:14:34:dd:ad:6d:13:c0:58:
18:96:7d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 15:58:44 2024 by rpki-client on console-fra.rpki-client.org