Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I4GTsq-f4SJ2Bb2ELsC2nqdCxKY.roa
File: I4GTsq-f4SJ2Bb2ELsC2nqdCxKY.roa (raw, json)
Hash identifier: hHfl8D2+m6osSlI8jBLQ1T5HB7IqDl3tNWhTnBRTgt8=
Subject key identifier: 23:81:93:B2:AF:9F:E1:22:76:05:BD:84:2E:C0:B6:9E:A7:42:C4:A6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190F43CD0FD27B78EEB82AD6A989C0213D0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I4GTsq-f4SJ2Bb2ELsC2nqdCxKY.roa
Signing time: Sat 27 Jul 2024 12:49:04 +0000
ROA not before: Sat 27 Jul 2024 12:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 77.90.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 12:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:3c:d0:fd:27:b7:8e:eb:82:ad:6a:98:9c:02:13:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 27 12:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=238193b2af9fe1227605bd842ec0b69ea742c4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:dc:e8:5e:3e:ec:2c:9c:df:45:20:39:ee:
9e:35:6b:48:12:92:b7:98:8f:52:c5:09:97:90:9a:
23:9e:03:21:a8:e0:f7:11:29:69:00:db:e8:55:24:
60:17:f9:e2:d3:65:7f:37:36:b2:3d:c8:11:97:2b:
88:10:e1:ff:0e:9f:b3:f1:c4:dd:89:61:8c:b6:53:
1e:19:59:04:f3:ef:da:de:1f:43:ff:36:a5:5e:6a:
b0:fa:d0:b0:f3:fc:df:2c:cd:13:27:0c:c7:bf:87:
98:03:a2:fb:5b:82:2d:cf:6b:66:4e:ea:12:ad:db:
e5:3d:49:3c:96:03:a2:4b:f6:dd:08:b4:29:b2:a7:
27:8f:77:2d:61:dc:1c:11:24:ed:82:ad:16:f8:77:
bf:49:81:c1:6b:41:13:37:cb:3d:55:d4:44:db:10:
14:9d:ca:14:a4:76:58:b3:67:cd:8e:42:13:15:00:
9c:e6:d6:f1:12:4e:e9:a0:c9:57:35:5e:26:c2:70:
33:f6:4b:da:72:a5:a5:05:7c:92:0f:1e:d5:94:d1:
5b:ea:99:ee:ce:04:2b:3f:63:e7:d4:ff:85:22:5e:
1c:12:22:9b:c7:b6:b4:ef:85:4d:d8:38:23:d3:0f:
1b:6c:68:5b:44:9e:70:11:0e:18:31:0d:b2:20:37:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:81:93:B2:AF:9F:E1:22:76:05:BD:84:2E:C0:B6:9E:A7:42:C4:A6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/I4GTsq-f4SJ2Bb2ELsC2nqdCxKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:87:f4:77:bc:e6:1e:75:8c:fa:14:e5:41:a2:e6:be:5e:77:
06:87:47:4d:01:a5:d3:61:81:7e:ab:91:53:dd:a4:f9:46:0b:
dd:f5:e1:29:1b:c2:e7:b8:85:d9:0e:9b:69:e9:5a:d1:39:dc:
c9:de:76:f1:94:0a:4c:6a:d5:36:2a:86:d9:82:a1:16:8c:ad:
9a:95:75:5d:5b:65:9b:50:62:27:e8:0f:a1:a8:6f:91:0f:b9:
4e:4a:30:a7:36:a3:56:e7:70:60:6d:2a:58:c2:77:62:0a:b7:
a4:5c:84:b5:91:5e:c2:bf:64:8b:42:b3:bd:24:47:97:2d:bd:
b1:ec:c0:1e:8e:12:f9:a6:95:1c:30:19:8d:eb:e3:9a:d2:b2:
8f:38:2e:66:68:2b:d1:17:62:d4:b3:41:25:1f:62:21:d7:f7:
e7:28:4f:af:1c:1d:f6:76:55:d1:ab:4f:27:58:c8:9c:2c:05:
bd:85:af:90:58:85:d2:3a:07:97:31:df:38:f5:4d:5b:34:48:
95:70:24:1c:40:f8:63:12:39:cf:a5:48:52:65:43:b2:54:17:
ea:17:f3:85:15:eb:2a:59:2b:3f:4e:9d:9c:80:98:16:88:59:
33:1f:f7:bf:f5:54:1e:b0:b1:8c:7a:5d:41:a1:7a:dd:39:e5:
8b:4b:99:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 14:05:03 2024 by rpki-client on console-fra.rpki-client.org