Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mv45rrHZCCtzHsFvHfH9FNwWnAs.roa
File: Mv45rrHZCCtzHsFvHfH9FNwWnAs.roa (raw, json)
Hash identifier: +TvbY1yeyPsGnp1PYn92JZN6hk9ZUDa2nYJooQK+hu8=
Subject key identifier: 32:FE:39:AE:B1:D9:08:2B:73:1E:C1:6F:1D:F1:FD:14:DC:16:9C:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01934D1FCD60BDD2531BB4434A774AC8B0A6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mv45rrHZCCtzHsFvHfH9FNwWnAs.roa
Signing time: Thu 21 Nov 2024 05:09:10 +0000
ROA not before: Thu 21 Nov 2024 05:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:1f:cd:60:bd:d2:53:1b:b4:43:4a:77:4a:c8:b0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 21 05:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=32fe39aeb1d9082b731ec16f1df1fd14dc169c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c2:44:71:35:09:5c:68:c1:62:42:d5:77:5b:
80:3d:56:e3:f1:d2:7c:98:0a:32:87:66:2b:95:88:
dd:0b:4d:f5:8d:26:02:5f:56:96:13:d0:5b:08:6a:
3a:9f:f8:ec:bb:db:ac:0c:95:46:30:45:d6:f0:a0:
eb:91:87:5d:31:ca:51:6f:6f:a6:12:18:55:06:17:
ae:71:11:52:bf:5b:0c:cf:7b:bc:bb:ba:6d:00:9f:
a3:4d:99:6c:fb:5c:58:91:31:4a:bc:de:52:ce:23:
47:6e:08:a2:5d:0a:0a:cd:05:92:59:7b:25:e7:72:
cb:ea:70:0d:d2:5a:88:be:2d:d9:0c:be:79:be:24:
40:5c:30:4a:b6:a1:b5:f5:68:b7:db:a1:5f:ac:01:
bd:29:b2:98:bd:ed:87:0c:cf:b1:49:34:be:2d:2f:
63:4a:2d:7c:cf:1f:eb:df:ad:b5:0f:df:1a:a6:cf:
12:dd:91:d8:0d:a6:f9:85:f0:cd:ae:0d:d5:f3:7b:
79:43:54:60:4f:e1:9f:92:5f:a2:40:fc:52:aa:9b:
a6:e5:5d:01:ee:52:aa:bf:0e:cc:72:6f:a6:4e:65:
00:a4:01:51:6d:68:a8:d8:5d:ff:d2:79:5c:cb:0b:
35:22:d5:94:f6:2f:1d:dd:76:c0:5d:87:14:20:88:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:39:AE:B1:D9:08:2B:73:1E:C1:6F:1D:F1:FD:14:DC:16:9C:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Mv45rrHZCCtzHsFvHfH9FNwWnAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ce:3e:76:3c:c0:a1:ef:2b:33:ae:b6:3f:93:40:d5:25:f6:
3a:0a:f6:ab:2a:23:fd:4b:7d:32:f0:7f:d3:3f:df:72:b8:a8:
d3:1a:2b:ee:0b:74:ab:d1:ec:fb:ad:9c:3c:0a:73:00:6b:db:
ac:18:da:d7:98:58:4b:ed:9b:59:61:0c:ef:93:b1:1d:04:9e:
b6:cf:7c:6a:87:56:ba:7e:8d:36:76:f9:45:2a:56:07:80:b2:
fa:30:cb:c7:e4:ba:ee:db:91:12:a0:b0:29:9e:12:a1:24:65:
fb:ef:b3:4a:ec:51:b4:dc:5e:68:30:23:ea:74:b3:7e:b8:d7:
bd:8a:52:87:7d:ee:0d:1d:b8:cd:30:a4:b6:a4:97:b2:d9:5b:
84:2f:b7:01:02:46:0b:d5:d2:bc:aa:1b:fa:e1:65:9f:35:9f:
d5:f7:6f:f2:73:de:30:a9:33:ad:48:d8:63:fa:11:df:e2:99:
43:f0:61:01:4b:64:73:7e:98:03:1a:6a:9b:7d:6a:5b:21:76:
0c:60:16:37:60:2b:39:bd:4e:79:79:57:9f:e4:0c:0c:3b:e9:
f4:2a:d2:ec:be:4d:16:3b:a6:7c:df:f0:66:7e:ff:5a:1d:2c:
72:98:c2:7e:3e:0c:2e:a4:af:99:a3:f4:b8:8a:86:76:99:a7:
81:ec:61:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:47:20 2024 by rpki-client on console-ams.rpki-client.org