Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAUj56HLuQc_eJR4y8Sf1UuUHjk.roa
File: SAUj56HLuQc_eJR4y8Sf1UuUHjk.roa (raw, json)
Hash identifier: NcxZj+JVKBiROcgU79dyU7d5WnQXlyeF25cbfdpzUis=
Subject key identifier: 48:05:23:E7:A1:CB:B9:07:3F:78:94:78:CB:C4:9F:D5:4B:94:1E:39
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019361BBFD12E443348D062784CA2D170ED9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAUj56HLuQc_eJR4y8Sf1UuUHjk.roa
Signing time: Mon 25 Nov 2024 05:12:10 +0000
ROA not before: Mon 25 Nov 2024 05:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Nov 2024 07:18:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:61:bb:fd:12:e4:43:34:8d:06:27:84:ca:2d:17:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 25 05:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=480523e7a1cbb9073f789478cbc49fd54b941e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ac:06:c7:c6:1e:1b:7b:ee:40:08:cd:c8:91:
98:fb:b0:bc:12:45:f9:d5:18:92:ba:f8:3c:19:27:
41:f4:55:f5:e2:b8:32:81:02:5e:2e:ea:a7:d4:c5:
37:4d:cd:55:33:69:db:c9:8f:c6:82:16:a2:fb:a3:
9c:4d:1c:bd:42:13:6d:36:dd:31:6c:af:f5:14:cb:
b3:52:b1:40:f6:5c:4d:83:fb:88:93:07:ff:63:f4:
d2:9c:2c:37:81:c4:0d:28:1a:73:53:ff:c3:c1:e1:
e1:4f:d9:5c:e1:b7:d3:41:0d:fa:08:e6:8a:42:16:
f1:8f:a3:9f:c2:9f:d2:24:9d:f2:a9:52:f0:76:d5:
38:f0:eb:d9:76:8e:ef:f8:b8:c6:c9:5e:bf:1f:3a:
2a:9e:0a:e0:26:6e:84:2a:40:c3:5a:4d:95:5a:db:
4c:4b:73:6a:3c:a5:ff:64:64:24:c5:05:20:f6:c8:
8d:84:8c:9e:57:db:bc:3d:f1:55:8b:84:8f:3e:f3:
1c:dd:d2:98:7b:1d:69:1c:76:80:b7:7f:f8:31:cd:
d1:39:e5:be:81:88:81:54:1d:91:49:73:37:01:b8:
64:33:75:7f:25:ab:69:35:2f:cb:bc:b9:ce:ef:c5:
99:5d:1c:48:31:c5:7f:81:e8:77:c2:d2:a7:ac:d6:
2b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:05:23:E7:A1:CB:B9:07:3F:78:94:78:CB:C4:9F:D5:4B:94:1E:39
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/SAUj56HLuQc_eJR4y8Sf1UuUHjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
95:9e:9e:ff:0f:de:2e:06:f7:09:a8:4a:7f:da:b9:5c:39:34:
a0:b8:c4:85:ee:9a:10:3a:5f:4f:a9:8b:3e:ce:05:7c:60:63:
2c:1d:bf:82:0f:95:5f:ad:3d:12:9e:f4:c5:37:d4:47:35:5f:
43:19:62:2f:a3:bc:d5:29:61:81:71:4f:7f:d7:bc:e2:83:0e:
85:29:6e:98:10:8c:2c:a2:16:4c:15:a7:63:63:e6:cd:70:e8:
6b:09:3e:05:10:da:ab:7d:9b:91:52:40:c9:63:d8:bf:fb:22:
a3:e9:a8:cf:29:25:52:24:98:b3:61:5b:14:d1:ab:63:ce:15:
e6:58:af:ba:ab:16:d5:aa:5a:11:a3:20:9a:f7:40:f0:97:31:
c6:df:61:8f:59:4c:20:0a:0f:ce:50:c2:02:ee:3b:e1:2a:5f:
27:7c:8f:2f:f8:bf:04:41:1f:39:c8:13:0a:f6:0a:72:fc:25:
39:21:d8:20:fe:fc:83:bc:a0:2e:c3:3d:42:ce:99:cc:c6:b4:
bf:6c:e4:cd:e6:8c:98:f3:73:4a:1c:13:e1:3a:e1:ef:8c:46:
ff:5f:0e:d4:86:08:b0:40:1b:b9:28:b4:9a:67:18:86:dc:9c:
f8:16:7e:da:40:aa:66:6f:66:52:c6:bf:1d:b0:95:42:bc:ff:
5d:e6:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:15:51 2025 by rpki-client