Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ih3LYIKyGFv8nR0dppx5On_MeCM.roa
File: Ih3LYIKyGFv8nR0dppx5On_MeCM.roa (raw, json)
Hash identifier: eDkzJ7yUnPzlP3V9WgdQXMrh8UR75+CPYAj6h72E8UQ=
Subject key identifier: 22:1D:CB:60:82:B2:18:5B:FC:9D:1D:1D:A6:9C:79:3A:7F:CC:78:23
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019437656445D1D4A73292C6B6E6E9540AD4
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ih3LYIKyGFv8nR0dppx5On_MeCM.roa
Signing time: Sun 05 Jan 2025 16:56:19 +0000
ROA not before: Sun 05 Jan 2025 16:56:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 05:10:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:37:65:64:45:d1:d4:a7:32:92:c6:b6:e6:e9:54:0a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 5 16:56:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=221dcb6082b2185bfc9d1d1da69c793a7fcc7823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:7d:81:ad:50:b6:48:f5:17:00:d5:7f:1a:
ed:c2:df:5e:f7:86:c3:2e:60:5f:78:61:aa:52:42:
a4:6c:ec:a3:b9:d8:e5:eb:76:00:04:66:e2:c1:07:
67:22:f8:54:f2:2c:b4:c6:dd:3b:0c:03:f5:07:f6:
44:9d:5b:18:d0:35:49:79:4e:89:c4:e8:71:8c:03:
ca:63:1d:2f:ca:6a:93:48:9a:88:8c:ac:e6:cc:2d:
83:81:e1:25:51:f4:8d:15:59:94:a9:fe:83:c6:ce:
1d:67:fd:75:92:71:16:2e:0e:4f:d0:9e:cc:2e:7b:
26:ac:6e:cb:1b:62:35:b9:18:01:ee:39:2a:22:40:
df:97:a6:1e:2d:39:91:80:06:ca:b9:32:75:cd:42:
c8:8e:8e:5a:b9:91:5d:fe:28:c6:f5:eb:7c:3b:91:
aa:42:ab:9f:5c:c0:ad:0a:d1:35:c8:b1:e2:14:b5:
12:32:6b:e2:59:73:99:e6:cf:1a:09:48:00:a8:03:
b8:30:1f:c6:f1:ab:0b:b1:6f:72:4d:da:d0:6d:8b:
ed:3c:b2:3c:75:57:92:8c:96:58:4b:7f:5e:7d:1e:
6b:18:05:e7:0f:42:70:d2:47:94:18:db:61:3a:50:
da:2a:44:93:ac:c8:75:5e:66:a4:12:e8:10:7f:e7:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1D:CB:60:82:B2:18:5B:FC:9D:1D:1D:A6:9C:79:3A:7F:CC:78:23
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Ih3LYIKyGFv8nR0dppx5On_MeCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
77.90.58.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ee:0e:f1:fa:3b:59:17:be:76:4d:c7:0e:d9:22:97:7c:be:
94:04:9f:58:b2:e9:4e:20:6c:74:e8:85:1e:ab:25:fb:06:5a:
c8:04:f8:32:9c:72:68:5e:a8:ad:9f:7e:d2:70:89:f6:db:35:
7c:cb:bc:09:57:3a:0b:ff:0d:9a:d3:10:19:e5:87:35:5b:81:
ef:66:4e:21:16:71:77:8e:0d:39:5d:33:c9:6d:fe:9a:2e:79:
d4:31:78:6a:4b:83:63:65:56:0b:c9:a0:6f:93:b6:e9:5f:5a:
88:0e:ba:70:33:46:81:de:1b:37:d5:8f:7b:0e:07:20:2e:21:
74:f8:6c:21:10:5c:d2:ef:d7:ea:b1:0b:a2:65:58:9b:3c:d8:
c6:82:28:b4:c8:22:8e:8a:64:fc:e9:78:0d:23:62:c4:67:7a:
25:30:56:00:55:f7:1d:39:8d:20:12:15:28:fc:b1:79:94:15:
0c:e8:24:f5:1b:e0:9b:69:93:0e:53:84:9b:9f:e2:94:e4:34:
4a:40:a2:08:a4:83:11:c4:ea:54:15:66:61:eb:26:e9:61:28:
cc:4b:8f:68:a4:4b:7c:20:f6:b0:03:1e:24:d5:8b:d6:2a:8e:
87:6d:28:5f:44:3e:92:bf:14:59:0f:f0:c0:d8:d5:ff:2e:8f:
a8:59:22:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:59 2025 by rpki-client