Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9xsKqXJw6_jS3Q6-5H-TQsiyKo.roa
File: X9xsKqXJw6_jS3Q6-5H-TQsiyKo.roa (raw, json)
Hash identifier: ZV0ooBHk+YU9FBF90yEopmoly5CA6+8d/KsTu0wNHMo=
Subject key identifier: 5F:DC:6C:2A:A5:C9:C3:AF:E3:4B:74:3A:FB:91:FE:4D:0B:22:C8:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E2E25FDA1D976670029C34C2B449975D8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9xsKqXJw6_jS3Q6-5H-TQsiyKo.roa
Signing time: Mon 11 Mar 2024 15:33:45 +0000
ROA not before: Mon 11 Mar 2024 15:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 20:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:25:fd:a1:d9:76:67:00:29:c3:4c:2b:44:99:75:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 11 15:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fdc6c2aa5c9c3afe34b743afb91fe4d0b22c8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:dd:02:9b:e3:a5:77:ad:64:c6:26:74:b5:
64:93:e3:4f:9a:e6:21:1b:18:1e:5c:02:1f:f4:75:
9b:0e:69:bf:1d:33:a0:99:5a:91:a3:75:3b:9b:eb:
95:b8:30:f8:ea:db:fe:d2:a0:30:fb:5e:9b:18:27:
67:6b:23:78:8c:0a:73:c2:58:03:55:d6:2b:be:88:
50:96:0d:5d:45:ce:0c:b9:1d:26:75:4a:aa:39:7e:
7c:3d:67:10:c7:d2:11:e0:23:9b:fe:20:5d:94:e3:
d6:67:9e:53:69:f3:d7:d1:a3:54:be:14:84:44:d1:
79:57:68:4a:ec:8c:71:a2:11:bc:62:1d:40:1c:b5:
62:9e:a4:91:02:91:04:24:7a:b4:4d:fa:a1:1c:49:
c3:58:b4:6a:2c:81:1d:8a:ae:ee:40:de:5c:f1:40:
3d:24:10:11:8b:1a:ea:0a:80:01:07:3b:87:43:5c:
2f:56:21:cd:8a:aa:60:6e:73:98:4a:3f:87:54:36:
c9:9f:e7:f4:8f:9f:2b:f2:7c:ff:30:c9:26:9b:04:
50:f8:2e:d0:52:74:b5:0c:9c:60:1b:e1:bc:26:27:
a9:62:63:e3:ca:ba:4e:ee:9a:d3:49:98:d7:11:70:
97:de:ec:40:16:6f:7e:20:55:0c:d8:52:b6:6b:c7:
22:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:6C:2A:A5:C9:C3:AF:E3:4B:74:3A:FB:91:FE:4D:0B:22:C8:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/X9xsKqXJw6_jS3Q6-5H-TQsiyKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.8.0/24
77.90.13.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:41:25:22:a0:14:d7:d2:05:65:ed:37:b0:68:58:55:a7:6b:
41:9f:5b:83:8d:4a:e7:58:dd:5a:64:38:4b:40:0a:4d:bd:cb:
d2:41:4f:68:ae:1b:44:54:93:79:fa:1d:d9:0b:cf:16:d5:ad:
ea:63:85:ef:16:22:fc:e9:25:19:8a:c9:02:c5:90:0c:d5:7a:
e7:aa:a2:9a:3c:82:cc:3a:de:d2:c2:14:3e:4c:e9:18:6e:de:
8a:df:56:30:16:b7:33:3c:1b:bb:3d:7c:49:94:e0:c6:cf:e7:
ef:bc:77:70:ad:8c:39:7e:a2:e9:43:0e:f4:06:e3:b7:21:f5:
c5:0e:8f:bd:47:80:8c:e3:d9:54:fc:e7:e8:e0:48:13:2f:78:
d6:1b:dc:a5:28:93:b9:0a:e2:f9:73:05:e8:a0:e3:db:ca:40:
6f:ad:0c:84:63:f2:bc:65:9d:38:95:98:90:8c:14:a9:a4:9f:
70:2e:87:82:e2:d5:de:1f:1a:b4:74:b9:d4:62:4b:26:98:8c:
95:53:76:34:af:1b:af:d0:97:ee:4f:72:a5:99:cb:5c:74:06:
9c:1c:75:92:94:49:40:e4:7e:cf:6e:64:6a:65:97:03:cd:f7:
0c:56:26:a0:13:dc:70:48:2d:52:c2:84:cc:86:c6:b0:59:ed:
34:5a:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org