Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dT9kcN37_ct6wb5Wx7xcFgXIvGw.roa
File: dT9kcN37_ct6wb5Wx7xcFgXIvGw.roa (raw, json)
Hash identifier: DyACB13VHKnVyRwPsSt1IHD+yd80nLXh1UCxUkXhxQ8=
Subject key identifier: 75:3F:64:70:DD:FB:FD:CB:7A:C1:BE:56:C7:BC:5C:16:05:C8:BC:6C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B280106C7D6763BE456461CF7B95C2F0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dT9kcN37_ct6wb5Wx7xcFgXIvGw.roa
Signing time: Mon 02 Sep 2024 11:30:22 +0000
ROA not before: Mon 02 Sep 2024 11:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 04:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:80:10:6c:7d:67:63:be:45:64:61:cf:7b:95:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 11:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753f6470ddfbfdcb7ac1be56c7bc5c1605c8bc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:22:8d:f1:e4:51:d1:86:3e:53:12:97:f6:
71:05:31:a5:58:5a:b1:aa:cc:4d:0a:08:fb:fa:07:
95:56:bb:49:6e:16:6f:42:b5:69:08:ee:d5:4d:de:
a3:cd:a6:50:fb:65:c9:a8:04:7e:8f:f8:8e:24:23:
d0:48:07:64:ae:81:f3:ee:dc:99:fc:09:8e:a7:ae:
f1:40:a8:93:02:e7:c1:31:c8:b0:7e:a5:db:46:fe:
96:41:6d:02:8f:db:60:0b:41:3a:aa:d0:24:a0:63:
36:a3:b4:b5:3d:3a:80:43:63:61:77:88:d5:0e:dc:
38:85:4b:1c:ac:f0:9d:63:15:2c:bb:4e:ca:3d:b6:
6a:88:4c:9f:10:9f:c4:59:fc:bd:4b:58:7e:32:4e:
ce:01:ce:74:45:23:73:bf:f8:b5:d7:30:25:7c:38:
a9:f5:87:50:37:39:b4:fb:ad:fa:fd:db:cd:c3:15:
02:56:d8:95:e3:4a:24:4c:73:89:f6:4f:ea:17:5a:
74:34:a7:24:b7:87:12:8d:bc:6b:0e:e1:3e:93:72:
94:d1:7e:bc:49:85:6c:56:a9:36:ca:fb:26:fb:8e:
0f:b7:8c:9f:63:90:c7:38:62:88:6a:c2:fa:c0:a4:
ae:2a:b5:4a:ed:b6:9c:39:ad:a8:67:56:a6:81:ae:
9c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3F:64:70:DD:FB:FD:CB:7A:C1:BE:56:C7:BC:5C:16:05:C8:BC:6C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dT9kcN37_ct6wb5Wx7xcFgXIvGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:42:be:6a:54:77:0d:e6:0a:d6:b9:16:d6:06:0c:a9:10:a7:
d4:b6:b5:82:3d:7d:b2:b5:d1:19:b7:39:bf:e0:15:8f:8d:9f:
78:3a:45:af:1d:71:f1:a1:ac:ee:66:60:81:2c:5f:a4:2e:96:
d4:10:f0:a0:1f:63:21:ac:8a:2f:a5:b4:d6:99:c6:95:c9:90:
e2:cc:dd:1b:80:a5:25:de:37:88:00:7d:c3:14:c0:83:de:a4:
f8:88:1b:cc:02:dd:cb:f4:57:8f:c5:bb:86:a5:09:07:5e:b9:
b6:2e:89:60:5a:96:f0:05:61:25:bb:53:fc:54:08:e2:d5:84:
8b:c0:36:0d:9d:8d:96:ab:6f:37:6f:39:83:71:55:4f:a3:e4:
1c:7b:8b:7d:b5:82:4d:c8:ea:12:96:da:a7:c6:d5:b5:21:c7:
7a:ac:66:c9:95:d9:11:bc:9b:72:d7:5d:01:57:b3:8c:a0:01:
81:39:2a:8b:2a:82:a1:a7:c2:01:c5:bc:7f:ba:e7:a5:2a:c0:
da:fe:f2:4b:75:e4:a6:eb:d5:f2:d6:62:3a:53:38:6c:e3:b3:
a9:26:e3:cf:84:a2:1b:fc:55:db:4b:c9:18:41:75:9e:a0:ae:
5f:9c:06:49:3a:2b:10:bf:ca:b7:82:38:23:bd:a4:84:6c:b0:
05:7d:e8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 05:07:13 2024 by rpki-client on console-ams.rpki-client.org