Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y1ty3p4xFbmS33me6m7cBmsVpvE.roa
File: Y1ty3p4xFbmS33me6m7cBmsVpvE.roa (raw, json)
Hash identifier: BnU9SK0Te3LxG+n5N4QPxTs6xwASJD+0Kp128VG1tUU=
Subject key identifier: 63:5B:72:DE:9E:31:15:B9:92:DF:79:9E:EA:6E:DC:06:6B:15:A6:F1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01931FBA1A7ABC81EF14EC58E809ADED92F0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y1ty3p4xFbmS33me6m7cBmsVpvE.roa
Signing time: Tue 12 Nov 2024 09:35:10 +0000
ROA not before: Tue 12 Nov 2024 09:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 14:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1f:ba:1a:7a:bc:81:ef:14:ec:58:e8:09:ad:ed:92:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 09:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=635b72de9e3115b992df799eea6edc066b15a6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:73:67:d0:6e:82:51:30:4e:90:35:8c:ce:d2:
f2:29:30:66:89:cd:38:6c:06:3d:b4:cd:f6:de:72:
55:66:e4:1d:b1:6c:5f:0a:cd:fd:22:20:ac:56:e2:
bc:40:fd:ca:75:23:6f:55:c7:3f:04:65:bb:52:59:
32:c5:9c:c0:bc:ad:00:16:c0:cd:29:8a:ad:89:c2:
bd:c3:ed:db:79:51:ba:88:57:79:07:fe:42:cd:03:
07:c5:1f:c4:c6:35:b9:09:72:e9:8b:22:ba:34:41:
74:53:2f:d8:ed:2f:e1:0c:e8:39:00:cd:d9:c8:00:
db:8d:5c:53:63:25:80:8f:5f:ac:bd:f0:df:28:4c:
9e:53:ca:55:ae:61:b2:fa:32:46:fe:9d:d9:a2:ff:
bb:46:d1:c9:ee:b5:94:96:8d:fc:95:fd:c0:bf:63:
0b:be:70:47:fb:bf:10:02:91:39:ef:2a:eb:9f:cb:
23:27:f3:4a:5b:74:59:5a:32:86:02:55:1d:12:2c:
17:42:d1:35:5b:d8:be:da:c6:ac:dc:67:b2:31:42:
b5:60:7c:34:cc:b1:cd:f8:6c:d6:60:73:37:26:9a:
cd:d9:cb:5b:41:90:df:da:b3:79:c5:20:01:c7:b7:
14:b8:b8:1d:a4:b4:47:1c:a9:ec:bb:63:4c:c8:2f:
9b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:5B:72:DE:9E:31:15:B9:92:DF:79:9E:EA:6E:DC:06:6B:15:A6:F1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Y1ty3p4xFbmS33me6m7cBmsVpvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:03:dd:65:c1:df:17:cc:d4:af:33:7f:4c:63:3c:5c:5a:93:
44:ae:8e:07:da:a8:52:2e:14:20:a3:a7:6d:67:79:6c:70:14:
ef:08:fe:70:04:c4:48:49:ca:b1:69:6e:6d:28:c8:bb:4a:02:
3e:c6:25:33:71:8b:36:57:a3:8f:7b:83:49:70:1d:84:da:c4:
ae:97:3c:14:7c:95:76:78:fd:f2:e7:9e:44:49:af:56:7d:2a:
6d:8b:4d:93:ad:f2:67:71:b2:bd:17:5d:36:13:81:6f:8e:57:
c7:02:f9:89:fb:33:13:e9:66:6b:0c:16:9b:40:ec:be:74:89:
be:f0:64:16:60:1d:f1:cb:a5:66:63:f8:14:63:94:b4:b2:1b:
92:c7:e6:e3:6e:cd:9e:ab:50:53:af:cf:93:09:ae:93:87:23:
a9:7a:1b:c1:73:38:57:7e:17:2a:40:46:81:72:5a:1f:d0:6e:
54:0d:c9:1d:54:3e:2c:a9:18:a7:13:77:45:95:cd:75:c9:8f:
3a:21:35:1e:48:13:a2:03:28:87:1e:c3:6f:2e:17:bf:4a:46:
c1:53:d7:22:90:15:36:85:ed:c1:2a:48:b5:f5:75:04:31:81:
45:f2:68:df:d5:ae:a0:f1:03:5e:c8:6e:b3:d7:da:ef:6c:96:
b5:77:f0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:33 2024 by rpki-client on console-ams.rpki-client.org