Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmObbnMm2S1cre5mXLag9Fv7nQs.roa
File: XmObbnMm2S1cre5mXLag9Fv7nQs.roa (raw, json)
Hash identifier: hMvf/WegdccPgQ0l+elxNnqpTtr1PA8k1e0KopxbGuI=
Subject key identifier: 5E:63:9B:6E:73:26:D9:2D:5C:AD:EE:66:5C:B6:A0:F4:5B:FB:9D:0B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01915BC945172A9DC1BC8237D4F68585FA5C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmObbnMm2S1cre5mXLag9Fv7nQs.roa
Signing time: Fri 16 Aug 2024 15:23:22 +0000
ROA not before: Fri 16 Aug 2024 15:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 04:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:c9:45:17:2a:9d:c1:bc:82:37:d4:f6:85:85:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 16 15:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e639b6e7326d92d5cadee665cb6a0f45bfb9d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f3:c2:12:24:2c:71:87:f8:ce:a6:c7:77:ea:
c6:9c:08:13:4f:0f:c3:d9:9c:c7:02:45:15:a8:38:
a8:85:09:54:a4:6a:7e:7d:d8:e4:ea:ef:73:ce:f6:
e7:f5:6d:6b:78:9a:a8:37:a6:7d:40:32:1a:45:84:
bd:d7:6d:7c:0f:86:72:89:f1:c3:8e:ef:a7:37:c0:
56:6e:43:62:c5:04:9a:5a:c5:49:b3:62:8d:ab:20:
7c:9c:ef:34:09:bd:40:0e:7b:19:89:98:f5:68:cd:
96:3a:d5:23:bd:54:55:08:32:b4:26:67:50:77:35:
18:20:f7:18:38:38:a1:6c:52:11:d1:77:21:39:99:
46:85:3e:e9:87:02:51:26:f1:f3:03:6c:98:19:a7:
42:bc:06:17:ce:16:69:4b:2d:70:77:38:c1:68:ac:
b0:81:a4:10:44:76:2d:1a:f4:d1:79:f7:6c:9e:b3:
5f:62:95:c0:09:2f:2c:47:28:f3:6b:d0:90:4c:c4:
4e:57:4f:8d:8f:d6:ec:42:fc:f5:2f:06:82:e8:9e:
82:2d:b0:9e:94:2e:7c:7e:fa:83:44:53:ad:de:93:
72:f8:05:58:23:62:d8:2f:03:c3:2e:1a:78:3e:d2:
55:19:3a:c4:dc:c6:93:5e:ee:df:b5:c7:d9:67:dc:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:63:9B:6E:73:26:D9:2D:5C:AD:EE:66:5C:B6:A0:F4:5B:FB:9D:0B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XmObbnMm2S1cre5mXLag9Fv7nQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ba:8a:24:33:04:8f:fe:1e:13:88:f6:d0:f8:7d:f9:e3:bb:
6d:e2:51:18:ae:f9:c2:23:56:19:76:e9:96:f3:6f:da:3d:34:
f6:0a:2d:68:30:38:bf:58:ae:58:b9:14:ef:be:c9:e6:61:66:
c8:24:3e:ad:a3:8b:11:1b:f6:02:96:6e:a0:75:f0:af:36:bb:
89:25:a4:cd:5c:36:1b:63:32:94:ba:af:00:b6:53:a8:0a:26:
4f:3b:09:65:f8:3c:ac:da:52:6f:2a:fb:09:05:ff:4c:96:d6:
f1:22:02:39:39:c2:7c:d3:20:9f:31:af:f3:39:03:f5:ad:d7:
2d:68:1a:3d:fe:f6:e0:5c:45:77:b5:61:8b:23:75:74:37:a4:
fb:14:f3:ba:d1:73:07:ff:00:8e:d0:90:54:f7:3c:95:c4:d0:
cc:75:46:74:7c:b6:1e:c3:a4:2e:a0:46:cb:81:e8:16:6e:5d:
e4:c6:be:94:fc:a7:36:08:87:58:d3:c6:f1:19:aa:11:78:ec:
ca:0c:9d:3a:21:57:78:a0:5f:57:90:1a:aa:a9:77:b1:52:61:
c8:49:86:7e:4e:4f:ab:30:e2:eb:17:99:ae:c7:53:50:77:0b:
d5:0f:79:7a:7c:b9:c3:1a:58:15:c9:27:63:16:40:72:63:ca:
cd:64:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 05:27:56 2024 by rpki-client on console-ams.rpki-client.org