Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DyNAjO5UmoJcnlJliO8Q3Ss4NtQ.roa
File: DyNAjO5UmoJcnlJliO8Q3Ss4NtQ.roa (raw, json)
Hash identifier: km3rZHStBryQXca9L6iDZKptxNdx3Xh5Bg9Y0mXGiJM=
Subject key identifier: 0F:23:40:8C:EE:54:9A:82:5C:9E:52:65:88:EF:10:DD:2B:38:36:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190F94FF2EB6F0D092777360771DF398946
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DyNAjO5UmoJcnlJliO8Q3Ss4NtQ.roa
Signing time: Sun 28 Jul 2024 12:28:04 +0000
ROA not before: Sun 28 Jul 2024 12:28:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215208
IP address blocks: 77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Aug 2024 04:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f9:4f:f2:eb:6f:0d:09:27:77:36:07:71:df:39:89:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 28 12:28:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f23408cee549a825c9e526588ef10dd2b3836d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:05:ad:73:b3:26:3d:d5:c9:26:92:7f:56:
7e:f5:8f:ad:09:63:ce:9c:63:08:67:60:29:19:b3:
51:9a:f2:6e:62:c1:15:10:05:e1:20:86:63:06:43:
5d:3e:97:82:e9:b1:ea:62:30:8b:07:1a:00:e5:a0:
46:d4:e3:3b:d2:da:f4:f8:36:e8:c6:76:f8:50:fe:
2d:e1:f4:4b:9e:02:48:f8:d1:69:b8:16:2c:e3:54:
96:ff:7e:e9:60:dd:9a:ca:2d:8a:b9:12:77:8a:80:
7a:cd:ee:ae:84:ef:62:67:78:b3:13:75:27:6f:ec:
be:3c:93:75:56:6c:84:65:c6:05:29:2b:12:e2:34:
03:02:fe:af:c8:4f:e3:bb:f1:14:88:15:5a:ee:5a:
70:a3:f6:6b:54:11:9e:ee:04:c4:c1:12:4a:5c:3d:
26:e8:ce:4f:2b:92:1b:0b:9c:7b:b9:86:ce:8e:b6:
51:07:54:18:70:24:9a:6c:a3:d6:05:fd:0a:53:59:
1a:77:3b:6f:25:6f:32:38:b3:f7:1a:3d:11:bc:d3:
c5:0e:16:2c:23:fa:53:a2:73:d6:c6:ec:63:26:06:
59:18:ed:6e:1b:63:eb:9d:9e:59:88:57:d1:64:65:
7a:fd:7b:7c:3d:e9:9f:35:17:bf:bc:a2:df:90:60:
f4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:40:8C:EE:54:9A:82:5C:9E:52:65:88:EF:10:DD:2B:38:36:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DyNAjO5UmoJcnlJliO8Q3Ss4NtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.45.0-77.90.46.255
Signature Algorithm: sha256WithRSAEncryption
72:72:3b:a1:12:0b:e7:b5:15:ee:e2:43:f8:9d:d6:8d:d4:60:
b2:26:10:e3:a0:54:59:5e:26:bd:77:1b:68:fa:87:a2:55:0c:
27:ee:ae:68:fc:49:a6:01:05:ee:1e:23:b2:fd:be:fd:4d:7e:
5a:8c:44:2d:5d:6a:6f:63:34:35:dc:bf:b9:8f:2d:22:44:d4:
d8:37:54:e5:6d:5a:8e:e5:ac:ff:93:cf:8e:24:c6:72:b4:97:
30:ce:cd:b2:2e:1e:e2:9f:df:b5:73:b6:5c:54:b6:36:f7:6c:
7d:e3:19:3a:bb:5b:24:03:82:28:38:07:31:4b:d4:0e:8f:63:
46:7a:96:8f:03:b1:35:51:a6:cf:39:c0:b6:57:b4:c1:41:77:
ec:61:3e:70:47:d3:d4:25:5d:03:e0:55:37:61:9f:cf:f5:41:
c5:2f:03:5c:40:95:41:da:ff:2a:f9:4d:74:65:70:fe:f9:d5:
1b:07:d6:6b:92:64:25:39:67:55:7d:f7:63:14:de:1a:6a:20:
f8:45:97:ea:58:6f:0e:67:51:be:54:19:34:3b:be:35:55:3f:
78:21:b4:d2:25:ca:55:9c:2d:ec:a2:5c:f2:a6:98:31:22:30:
b0:e2:68:fe:04:61:b6:ac:c6:29:f3:c7:40:c8:b1:14:f6:58:
2b:19:99:d9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZD5T/Lrbw0JJ3c2B3HfOYlGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNzI4MTIyODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjIzNDA4Y2VlNTQ5YTgyNWM5ZTUyNjU4OGVmMTBkZDJiMzgzNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLQFrXOzJj3VySaSf1Z+9Y+tCWPO
nGMIZ2ApGbNRmvJuYsEVEAXhIIZjBkNdPpeC6bHqYjCLBxoA5aBG1OM70tr0+Dbo
xnb4UP4t4fRLngJI+NFpuBYs41SW/37pYN2ayi2KuRJ3ioB6ze6uhO9iZ3izE3Un
b+y+PJN1VmyEZcYFKSsS4jQDAv6vyE/ju/EUiBVa7lpwo/ZrVBGe7gTEwRJKXD0m
6M5PK5IbC5x7uYbOjrZRB1QYcCSabKPWBf0KU1kadztvJW8yOLP3Gj0RvNPFDhYs
I/pTonPWxuxjJgZZGO1uG2PrnZ5ZiFfRZGV6/Xt8PemfNRe/vKLfkGD0mQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA8jQIzuVJqCXJ5SZYjvEN0rODbUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvRHlOQWpPNVVtb0pjbmxKbGlPOFEzU3M0TnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABNWi0D
BABNWi4wDQYJKoZIhvcNAQELBQADggEBAHJyO6ESC+e1Fe7iQ/id1o3UYLImEOOg
VFleJr13G2j6h6JVDCfurmj8SaYBBe4eI7L9vv1NflqMRC1dam9jNDXcv7mPLSJE
1Ng3VOVtWo7lrP+Tz44kxnK0lzDOzbIuHuKf37VztlxUtjb3bH3jGTq7WyQDgig4
BzFL1A6PY0Z6lo8DsTVRps85wLZXtMFBd+xhPnBH09QlXQPgVTdhn8/1QcUvA1xA
lUHa/yr5TXRlcP751RsH1muSZCU5Z1V992MU3hpqIPhFl+pYbw5nUb5UGTQ7vjVV
P3ghtNIlylWcLeyiXPKmmDEiMLDiaP4EYbasxinzx0DIsRT2WCsZmdk=
-----END CERTIFICATE-----
Generated at Thu Aug 29 05:24:56 2024 by rpki-client on console-fra.rpki-client.org