Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HEPYWbMOqbSxrJ0Rku8lnG0NmB4.roa
File: HEPYWbMOqbSxrJ0Rku8lnG0NmB4.roa (raw, json)
Hash identifier: I4+xzmn0kQDs75r22TTd3ONtv8r1JV30Aux+PicNNV4=
Subject key identifier: 1C:43:D8:59:B3:0E:A9:B4:B1:AC:9D:11:92:EF:25:9C:6D:0D:98:1E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019172AE79F21CEE78C45992E9E0C7BB8B4C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HEPYWbMOqbSxrJ0Rku8lnG0NmB4.roa
Signing time: Wed 21 Aug 2024 02:05:22 +0000
ROA not before: Wed 21 Aug 2024 02:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214915
IP address blocks: 77.90.16.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 11:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:72:ae:79:f2:1c:ee:78:c4:59:92:e9:e0:c7:bb:8b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 21 02:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c43d859b30ea9b4b1ac9d1192ef259c6d0d981e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:1b:44:8e:b8:c9:f1:93:dc:0e:3c:e6:c4:
f9:3c:c2:5d:05:cb:08:e4:69:10:e0:4d:54:56:69:
1a:14:0a:f1:86:42:8d:ef:b4:08:85:62:e5:d7:10:
1b:58:70:c5:c8:98:1c:81:92:94:43:be:9c:c1:f1:
9e:62:f3:0b:4d:54:75:47:6f:fe:20:e5:f1:ec:25:
10:7e:64:65:d4:e8:c6:52:6c:12:38:45:27:91:62:
07:4f:46:9c:f7:ca:10:88:8a:6a:5a:2a:bd:d1:82:
01:ad:5d:54:30:68:af:d7:48:3c:fd:79:76:17:0b:
de:b2:31:e6:9c:ee:f2:65:04:c7:37:73:48:29:4e:
0a:13:0c:93:21:f6:20:3e:6e:93:1d:b0:5d:45:2c:
83:e4:39:a4:0e:7c:89:03:16:6a:e1:ee:f4:60:85:
67:7c:58:92:e5:cd:16:3d:81:5d:c2:e7:d1:90:30:
bc:d6:ce:80:12:20:e1:6c:56:f8:36:8e:68:78:1b:
ed:ca:a7:34:65:3e:81:57:dd:a4:01:e6:7a:54:44:
11:52:2f:1a:25:b5:c5:32:29:7f:f8:30:1a:03:8f:
49:1d:55:dd:ef:2a:8c:5a:1e:67:95:1a:1d:9e:3e:
d2:6e:1e:d4:29:84:d1:f4:a0:d5:7c:d7:10:3d:04:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:D8:59:B3:0E:A9:B4:B1:AC:9D:11:92:EF:25:9C:6D:0D:98:1E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HEPYWbMOqbSxrJ0Rku8lnG0NmB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.16.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:61:00:f5:86:c2:d2:8f:ed:fe:10:01:8c:1d:4b:71:02:84:
97:fc:1d:aa:55:05:5c:49:88:8d:fe:80:12:b2:61:55:fb:f3:
64:e4:d2:34:f7:83:7e:00:85:80:fd:df:95:d6:3f:7e:fb:9d:
83:c6:ae:c7:5a:f4:dc:f7:e1:9a:10:41:9f:c0:c5:f5:8b:ff:
df:89:fb:47:a8:05:90:dd:55:c0:04:c6:e5:8f:05:84:af:72:
80:4d:94:a3:3a:35:5f:6f:d9:02:86:5d:02:d4:52:52:a7:7e:
3d:93:1b:87:ea:29:f5:de:28:f5:93:93:b6:ea:8e:29:3a:d3:
f8:ca:fe:48:97:c0:f1:3c:4f:44:ca:0d:5b:c6:cf:f7:e6:42:
9e:f2:87:ca:6e:20:29:a8:f6:4f:5f:81:64:15:df:41:52:0f:
fd:d4:bb:7b:4b:d6:c8:40:6f:0b:7a:74:a4:4a:9a:cf:db:a6:
e5:59:a5:fe:ba:2a:f0:29:68:0d:64:b5:db:ab:80:75:0a:3f:
9e:17:a2:8e:95:b4:ae:b6:d9:d3:c7:f3:78:f2:e2:f4:8e:3d:
89:73:65:d3:3e:c1:da:00:c0:f1:e9:fe:4e:16:13:a1:27:20:
13:9f:27:65:a6:46:6a:b8:75:1c:bd:3e:c4:d5:95:ce:24:77:
bc:68:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:52 2024 by rpki-client on console-fra.rpki-client.org