Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Peb36ygn3npeHmaKwSLTx30YQAk.roa
File: Peb36ygn3npeHmaKwSLTx30YQAk.roa (raw, json)
Hash identifier: T9koulE1kdRS53wPtufMwRo8/t4dzdJjQX9k4S56crc=
Subject key identifier: 3D:E6:F7:EB:28:27:DE:7A:5E:1E:66:8A:C1:22:D3:C7:7D:18:40:09
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019422200D9279341821F44366DA32D5948F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Peb36ygn3npeHmaKwSLTx30YQAk.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208208
IP address blocks: 77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Jan 2025 05:04:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0d:92:79:34:18:21:f4:43:66:da:32:d5:94:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de6f7eb2827de7a5e1e668ac122d3c77d184009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:51:12:67:17:65:04:59:a8:3a:32:d7:d1:
5b:b1:c7:88:d8:67:12:71:c3:0a:7c:f2:44:5e:b3:
01:11:8b:a6:bc:94:9b:f0:53:c6:04:2b:ad:62:ed:
78:27:02:e7:13:0c:45:6f:b9:3f:53:e9:ed:7d:4b:
d5:b4:01:c7:88:87:81:45:9f:36:53:74:0c:1a:6f:
3c:ff:7e:be:30:48:8a:2b:8a:c3:8e:c6:6e:bd:d7:
51:f5:d4:e3:33:31:fe:68:36:8c:c9:d3:1a:b9:26:
84:82:3c:8f:53:14:80:6d:ba:19:db:93:5d:d6:28:
0b:91:bd:cd:8d:97:51:32:ab:e9:8d:07:2f:23:b3:
89:71:1f:03:8b:36:0c:41:e8:c2:c3:ce:05:31:14:
ed:6f:39:c7:fa:11:f3:63:06:af:17:83:c0:a8:32:
f9:53:59:16:2c:1e:ba:cb:0b:b6:dd:57:8a:0c:3f:
6a:3f:f2:88:ae:37:ff:73:40:38:f1:0d:75:57:38:
29:27:8c:ec:7b:3d:36:4a:c6:d7:27:5f:7c:a0:40:
23:53:ca:f5:ca:f2:d0:d2:39:d7:c7:f7:bf:1a:b5:
8a:01:cb:47:34:71:7f:0c:3c:28:05:af:f6:60:e1:
93:cf:db:aa:53:6b:c9:ce:bd:66:ef:d0:6e:f7:cb:
fc:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E6:F7:EB:28:27:DE:7A:5E:1E:66:8A:C1:22:D3:C7:7D:18:40:09
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Peb36ygn3npeHmaKwSLTx30YQAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.46.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:e3:e2:dc:2d:68:14:cc:1f:2e:72:b8:b6:84:c0:e6:29:ed:
a9:35:c4:58:4c:0e:17:5d:5c:72:35:c6:8d:7e:e2:22:09:29:
0e:f9:87:dd:15:8f:3b:10:dc:c2:3c:0f:df:85:a4:59:a1:a4:
c9:fd:27:01:f1:e2:99:7f:57:76:76:e2:17:37:40:5a:b9:f1:
0d:33:39:0a:86:98:7c:b6:fe:92:bc:e4:78:64:c0:f9:b4:f9:
a1:f1:5d:7a:24:e0:97:07:95:d7:75:83:31:36:6c:76:54:70:
46:27:54:f7:a5:99:75:ec:ec:f1:47:ea:e8:a7:64:7d:3b:38:
ea:fd:28:9d:a3:7b:05:c8:5e:8f:cb:0e:ec:79:95:53:b6:a6:
5e:d0:49:84:44:d9:c6:ac:f9:c5:9c:44:81:21:ea:e3:78:89:
40:9f:5c:e2:91:6d:22:ce:2f:12:cb:c3:5a:8c:31:85:02:24:
87:ff:c3:97:40:24:bf:1b:1c:af:c3:2a:ac:7e:e8:69:57:4b:
e8:f3:17:38:3f:39:e5:9e:c9:46:3c:25:4a:0d:80:ae:aa:a1:
c9:7c:ce:cd:30:59:99:b3:c9:cc:8f:eb:f8:44:eb:14:26:e5:
c2:c7:65:0d:41:6b:ac:90:da:19:61:04:dd:85:ff:60:82:4f:
b0:88:c4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:29 2025 by rpki-client