Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9YZ0tD-n7YtK8FBO1nUhl1dv0k.roa
File: X9YZ0tD-n7YtK8FBO1nUhl1dv0k.roa (raw, json)
Hash identifier: BjfNQ7xyoll9kfbGRV49AYoL8aSc7+HV958zZ9iO8Bo=
Subject key identifier: 5F:D6:19:D2:D0:FE:9F:B6:2D:2B:C1:41:3B:59:D4:86:5D:5D:BF:49
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01927EEB721D9DDA13E6B24DA5A4992BA54C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9YZ0tD-n7YtK8FBO1nUhl1dv0k.roa
Signing time: Sat 12 Oct 2024 04:10:12 +0000
ROA not before: Sat 12 Oct 2024 04:10:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 07:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7e:eb:72:1d:9d:da:13:e6:b2:4d:a5:a4:99:2b:a5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 12 04:10:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fd619d2d0fe9fb62d2bc1413b59d4865d5dbf49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:00:f0:cd:1a:ba:f5:17:14:78:b8:07:01:
a0:b8:f9:62:01:82:99:46:19:28:1a:5f:aa:f4:8b:
af:ca:34:92:b4:6b:74:bc:f3:93:2c:ca:52:1b:9e:
5d:28:de:91:eb:20:d7:cf:3a:f5:2f:8a:fd:89:fe:
ff:e4:12:9f:27:b4:56:39:c1:10:86:26:4d:02:3f:
65:6c:cb:c0:ad:06:ab:9b:b7:22:96:02:3f:2c:35:
27:a5:62:5a:a7:2b:ce:95:ac:48:bd:b5:81:71:6f:
94:28:f4:a6:5b:f9:78:a4:38:7f:8a:a5:5c:3f:37:
ec:42:11:88:31:90:7d:b5:e8:5e:1e:c9:1a:0c:4c:
d3:7d:35:7f:6b:8c:ad:b4:79:d9:ad:4d:57:9b:0c:
af:a6:bb:1b:41:84:f5:19:34:e7:55:df:b1:05:30:
19:6e:9a:64:d3:23:26:d9:0f:ab:fb:ab:65:8a:1b:
c7:c3:e0:d1:c7:bb:42:74:4a:f0:74:a4:c0:d3:de:
5d:4b:a3:dd:67:17:1f:20:5a:4a:4a:81:02:62:b4:
87:f2:9f:46:23:89:88:24:46:ba:23:8b:ce:8a:b9:
e7:9c:4f:cf:72:de:70:12:c1:9b:75:2a:e8:cc:71:
21:90:23:f6:7a:8a:0f:b5:99:55:cc:7d:7e:f6:c9:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D6:19:D2:D0:FE:9F:B6:2D:2B:C1:41:3B:59:D4:86:5D:5D:BF:49
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9YZ0tD-n7YtK8FBO1nUhl1dv0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.39.0/24
77.90.41.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b1:1f:e0:e7:dd:93:0e:30:98:bc:c7:d8:3b:39:19:41:4f:
ae:39:e4:f4:36:b5:71:86:b3:3b:be:f2:a3:04:69:84:8f:ee:
40:f7:a1:96:54:99:02:bb:75:04:21:03:0d:bc:5f:d0:6f:0e:
91:a8:9f:07:25:4d:a2:0a:54:41:4e:ee:2c:14:10:aa:66:a7:
05:08:b7:3b:03:6b:1a:14:64:89:56:a4:24:ce:8f:d6:e8:cd:
0c:7d:bc:01:c7:30:ac:e9:2e:1e:6d:51:f3:ef:7f:64:e2:82:
16:c8:8d:1c:b3:70:42:6b:f0:f7:78:17:a5:38:23:8d:b6:f2:
b0:34:b6:03:3d:50:84:93:ac:cf:ff:38:24:ba:07:ac:f9:65:
f4:eb:83:dc:3c:e6:93:d0:d2:37:9f:10:39:e9:22:d1:29:b9:
a6:86:c7:a7:a3:d3:8b:83:64:af:9d:d5:b6:d7:e0:0a:99:9e:
dc:8c:8a:79:bf:fe:2b:bb:6e:10:83:58:79:03:09:97:06:9c:
c6:d7:23:e7:70:8d:08:42:3a:6b:49:2f:53:c2:68:2d:69:85:
33:5b:a0:38:a9:9d:89:7b:26:6f:66:c5:64:d8:b6:17:08:86:
72:67:a4:d8:f5:07:eb:22:3d:a0:fd:6b:32:2a:4b:1a:79:1d:
89:83:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 08:56:40 2024 by rpki-client on console-fra.rpki-client.org