Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IQfw6LRsFjDCtgTIMr5rVn-vUdo.roa
File: IQfw6LRsFjDCtgTIMr5rVn-vUdo.roa (raw, json)
Hash identifier: rh7Eu2mMsTED3ldSEdiGy+x81aZrua5BtbyJx/8DjfA=
Subject key identifier: 21:07:F0:E8:B4:6C:16:30:C2:B6:04:C8:32:BE:6B:56:7F:AF:51:DA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191134B4271C1A3A5952C963415BC7EE320
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IQfw6LRsFjDCtgTIMr5rVn-vUdo.roa
Signing time: Fri 02 Aug 2024 13:33:04 +0000
ROA not before: Fri 02 Aug 2024 13:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215240
IP address blocks: 77.90.35.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 18:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:4b:42:71:c1:a3:a5:95:2c:96:34:15:bc:7e:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 13:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2107f0e8b46c1630c2b604c832be6b567faf51da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:20:fe:62:5a:24:fc:84:33:79:4a:e0:bf:
ef:d0:4e:95:a7:09:17:9b:f8:f2:8a:2e:90:4b:b3:
3f:1e:fe:03:f9:76:46:20:dd:c4:d9:24:54:6c:c0:
05:18:75:1a:44:1d:f6:1b:2e:39:d2:7e:69:b9:b2:
8a:f9:f0:68:23:ad:e7:1e:6c:02:f8:42:27:26:e3:
ac:c4:26:60:5d:e8:fa:b7:47:61:79:c5:05:b4:ee:
57:f7:94:80:e4:23:91:2b:21:dc:5c:d4:6c:23:26:
ac:13:c2:eb:53:c6:10:c9:00:6d:73:8d:e7:7f:4f:
5c:a2:66:f5:47:0d:28:1f:9f:02:01:bd:9f:c0:35:
ca:c4:b8:ec:68:78:03:20:50:13:97:9e:e7:c4:6f:
85:22:4c:89:71:6d:84:e4:4d:4b:f6:c1:98:1f:b2:
b0:fa:72:2a:ad:fc:77:c8:5b:d1:6c:99:6f:88:b0:
7b:1f:87:ee:c7:47:13:07:4d:ad:6e:76:01:af:58:
54:c3:7f:22:5c:5a:8a:f0:03:55:22:f5:c1:df:53:
f6:8a:c5:9a:2c:97:ea:05:f1:bb:98:cd:c3:e9:95:
c1:43:21:87:4e:33:1e:18:53:e4:a3:bb:8c:d9:ef:
ca:19:61:b7:7e:63:69:15:5e:a6:8d:36:d2:1a:c2:
b0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:07:F0:E8:B4:6C:16:30:C2:B6:04:C8:32:BE:6B:56:7F:AF:51:DA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/IQfw6LRsFjDCtgTIMr5rVn-vUdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.35.0/24
77.90.37.0/24
77.90.39.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e0:fc:dd:d2:33:8b:a5:c5:97:59:1f:bc:96:31:14:65:0a:
ec:e1:d2:86:de:78:e9:6b:61:06:a1:80:0f:fc:5e:43:ae:3d:
50:78:5b:9d:7c:76:30:7a:89:5e:14:cc:ea:be:c5:40:64:45:
99:c2:7e:fe:f6:27:b2:97:bb:7c:df:95:d5:ba:fc:34:a4:98:
68:37:a0:40:be:9c:7b:c4:ba:d5:d9:34:1a:1b:cb:ac:33:0a:
b9:b6:4c:3e:df:fb:3e:a2:e4:81:f5:ad:6c:88:2c:3c:09:9a:
ed:d8:31:0e:99:64:e3:78:97:30:9d:70:54:56:db:f9:79:cf:
57:34:b2:2d:5d:1c:c4:4e:36:da:f7:4d:ac:aa:ac:de:c4:9b:
0c:d9:11:c3:b6:c3:ec:ec:c1:d2:8f:a9:cf:0f:8c:b8:60:2f:
19:8c:5a:9b:e0:ca:3a:7e:ad:a2:78:70:86:37:d7:4e:d9:cc:
1b:65:8a:f6:f2:86:4d:8a:c3:ff:0d:dc:c4:3d:fd:91:11:81:
1b:5d:fd:93:18:2f:e2:1f:18:ec:81:66:b0:02:11:3a:1b:2a:
d4:bc:85:43:3d:d8:60:9c:a1:1d:d3:9c:fe:94:3e:d2:1a:dd:
34:69:d2:7c:e7:f8:cd:8d:93:9e:cf:57:25:16:b1:57:f9:62:
ba:11:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 20:10:21 2024 by rpki-client on console-ams.rpki-client.org