Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b4aZV57pk0ixjVn5I7tf7DoFR7M.roa
File: b4aZV57pk0ixjVn5I7tf7DoFR7M.roa (raw, json)
Hash identifier: svGxtulkjB6UlS6Gi7/M3EDNAlQdD9AcsJ211cHegjs=
Subject key identifier: 6F:86:99:57:9E:E9:93:48:B1:8D:59:F9:23:BB:5F:EC:3A:05:47:B3
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018ED07BEFB91244286FECFD3E423368F87B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b4aZV57pk0ixjVn5I7tf7DoFR7M.roa
Signing time: Fri 12 Apr 2024 04:06:06 +0000
ROA not before: Fri 12 Apr 2024 04:06:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 77.90.0.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 08:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:7b:ef:b9:12:44:28:6f:ec:fd:3e:42:33:68:f8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 12 04:06:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f8699579ee99348b18d59f923bb5fec3a0547b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:37:73:5d:d9:bb:19:76:ca:45:47:f2:3a:
29:7d:ac:0c:d0:a9:81:a9:14:27:6d:67:76:3c:13:
bb:10:96:85:6d:da:28:da:db:4f:a5:44:89:b2:cb:
fb:71:1b:49:0e:51:15:bd:aa:0c:80:f7:5e:fe:9f:
fe:31:65:48:8f:74:7e:46:ac:11:97:14:bc:d0:aa:
f2:2f:9d:39:0f:55:cc:5a:74:97:ee:d3:a4:29:a1:
c9:d9:e5:53:55:22:6c:23:f1:87:6e:62:21:af:55:
85:1a:1a:0b:98:0f:72:f9:cf:6e:a8:a3:2b:42:68:
dc:c4:53:52:b9:2e:09:d8:17:eb:c8:c2:60:6b:f6:
1f:26:10:ff:48:9b:82:2a:7a:56:e3:83:e7:db:7f:
b4:4e:52:dc:70:52:30:e9:0a:1d:24:b8:91:1c:81:
84:9f:7a:94:5b:60:16:f8:d4:25:90:83:25:c7:a3:
1f:62:ae:58:65:53:83:f9:f5:2e:c2:d3:dc:93:29:
0f:c1:d3:0c:2e:6c:0a:8a:3f:f0:71:86:64:ce:b7:
5c:1a:7d:bb:fd:d6:7f:6c:22:c8:2c:39:df:45:e0:
f2:fb:d7:88:86:b3:97:6f:24:4d:1a:ee:1b:2e:3a:
56:9f:16:03:6e:a7:76:be:78:9d:1e:97:cb:fe:2f:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:86:99:57:9E:E9:93:48:B1:8D:59:F9:23:BB:5F:EC:3A:05:47:B3
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b4aZV57pk0ixjVn5I7tf7DoFR7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.0.0/24
77.90.8.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6a:b0:a6:a4:cb:bd:b1:7e:a5:37:00:ab:5b:44:cb:52:02:
5a:8f:66:fa:0f:7b:24:ba:3b:bf:85:db:57:79:12:79:05:0d:
e9:8b:27:4a:19:5c:25:1a:d2:b1:54:16:8d:b0:85:ce:3e:2f:
d0:39:cf:3b:7d:44:87:7b:ac:f1:15:e6:e4:ef:ee:29:f9:a7:
5c:4b:c3:3e:16:3b:2e:6f:09:5e:b2:34:38:e5:30:6b:00:4f:
43:b1:d8:42:76:83:0b:41:95:56:90:74:88:2a:f6:84:68:4d:
b5:da:61:24:57:28:f7:00:fc:bd:87:25:db:dc:7a:db:f8:df:
ff:8b:9e:d6:84:43:60:32:a6:d3:5c:e6:7e:48:14:2a:a0:12:
34:be:4f:b8:ec:68:ee:8a:f9:8f:33:7e:6e:ae:69:1d:a6:9a:
d8:7e:6c:80:37:64:e9:41:cc:8f:38:c4:16:af:dc:ad:37:27:
12:80:7a:a1:c9:a9:d5:2a:ba:8e:8b:f7:63:34:5a:92:e5:10:
0f:a6:97:63:ea:6d:90:ab:e9:aa:0b:4c:69:46:ad:09:46:a0:
f6:ea:ad:42:fe:52:fe:dd:e1:fc:09:51:a0:ad:c1:23:f8:54:
4a:3b:b1:4d:59:fe:18:40:ad:de:34:c4:8f:27:4a:f8:f2:8d:
66:2d:85:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org