Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H6oLSpT8t8z3qqXKBiJYufxvxlM.roa
File: H6oLSpT8t8z3qqXKBiJYufxvxlM.roa (raw, json)
Hash identifier: 8c4VVcFTr/6KfiGqXIS9c54NzF+wTE7rXSv8rurjk/w=
Subject key identifier: 1F:AA:0B:4A:94:FC:B7:CC:F7:AA:A5:CA:06:22:58:B9:FC:6F:C6:53
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01924F5D52906CA6758FCBA4ED468CE7BED6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H6oLSpT8t8z3qqXKBiJYufxvxlM.roa
Signing time: Wed 02 Oct 2024 22:32:48 +0000
ROA not before: Wed 02 Oct 2024 22:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63473
IP address blocks: 77.90.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Oct 2024 01:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:5d:52:90:6c:a6:75:8f:cb:a4:ed:46:8c:e7:be:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 22:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1faa0b4a94fcb7ccf7aaa5ca062258b9fc6fc653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:6d:11:a6:bc:d3:a2:3f:3a:82:6e:62:1c:
bf:2b:24:ce:f2:a8:fa:79:38:b0:a1:de:73:ef:9d:
12:d8:79:37:6f:4c:3c:d2:77:1b:b4:94:d0:4c:fb:
35:57:6d:62:89:b9:a8:ac:a5:8e:fe:8c:1c:fa:54:
c0:d3:72:9f:51:46:09:d7:f4:c9:52:ac:e1:c1:12:
7d:8d:03:7f:a5:44:06:ae:a7:ca:10:05:b4:5f:b7:
af:e9:a0:2e:8f:b2:34:f4:77:14:e8:e2:a7:36:62:
30:87:f5:4e:22:9f:f8:f4:76:ac:3b:24:05:47:b1:
5b:1a:64:4d:1a:a6:4e:96:96:1f:15:68:17:57:39:
ef:76:3e:df:72:33:97:7d:1a:b5:2f:33:85:81:f0:
02:cf:96:bf:50:a6:d3:5a:8d:86:34:16:30:36:12:
07:26:df:c4:37:22:83:46:b7:c2:0a:15:55:25:c2:
c9:54:ca:f1:47:18:cd:22:97:55:6f:36:ed:ed:f8:
00:c1:41:b8:55:86:25:b4:e5:1f:df:db:85:d7:b5:
e0:3a:2b:62:ef:81:83:c2:c0:d0:ef:5d:51:82:bd:
80:d8:ab:02:18:60:b5:d5:3b:15:5f:89:c3:bd:2a:
50:68:d5:37:05:ba:03:8e:a7:21:50:98:25:95:aa:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AA:0B:4A:94:FC:B7:CC:F7:AA:A5:CA:06:22:58:B9:FC:6F:C6:53
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/H6oLSpT8t8z3qqXKBiJYufxvxlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.31.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d6:d8:e1:a3:6b:f9:3c:9a:22:93:47:44:e4:9e:a5:9a:cd:
6e:55:5b:78:16:d8:0e:59:61:3f:c1:e2:d3:ec:db:19:a8:63:
67:63:13:8d:db:7c:c6:f4:87:c1:0d:94:20:1e:ce:85:9b:f7:
19:2a:b8:21:f7:2b:2e:70:a8:6f:6e:3b:b8:22:ea:c3:9a:10:
45:9b:f6:74:a0:a3:6f:d1:e8:77:0d:39:12:79:35:ac:0b:3c:
22:03:c6:43:69:25:c9:02:fb:6a:ec:32:3c:db:0c:fb:6c:7b:
70:f9:f7:fd:1c:4f:5a:e2:e1:89:23:67:ad:60:68:10:d9:e2:
f9:64:7e:01:8c:cb:46:e1:ee:48:b9:1e:cf:a8:a8:26:ba:9b:
20:39:19:d1:0a:34:aa:3b:1b:ae:88:55:7f:4f:6a:e4:ac:37:
74:ee:16:a2:f6:fe:a9:e4:9b:de:69:4f:2f:4e:c0:19:10:d7:
37:37:ce:c5:e7:2a:85:01:a2:d3:53:99:db:ca:92:75:39:8a:
a9:10:25:ae:f0:17:e4:22:5d:56:96:07:e7:5b:fa:9f:b2:aa:
94:3e:b3:80:d3:53:5d:3c:6e:bf:fd:9a:82:d1:9f:71:e3:8d:
aa:80:2f:a4:d2:c4:9f:87:ce:fc:8b:e2:18:bf:e3:23:c3:e8:
20:13:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:25:25 2024 by rpki-client on console-fra.rpki-client.org