Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa
File: dTEj764p9JZgbptBHPNAzt24voE.roa (raw, json)
Hash identifier: JKG+9Ml5U6lLaQbClB5Hai8cmo+2KrRKkk+0P1f8oxU=
Subject key identifier: 75:31:23:EF:AE:29:F4:96:60:6E:9B:41:1C:F3:40:CE:DD:B8:BE:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E5D9F9EB71CA6CF2819FC1556F737D384
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa
Signing time: Wed 20 Mar 2024 20:48:45 +0000
ROA not before: Wed 20 Mar 2024 20:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 77.90.0.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 04:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:9f:9e:b7:1c:a6:cf:28:19:fc:15:56:f7:37:d3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 20 20:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753123efae29f496606e9b411cf340ceddb8be81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:de:80:df:85:2a:45:b5:f0:61:9d:f5:6c:
0e:99:66:d0:0e:1f:e4:e1:4b:43:05:d0:ec:6c:bb:
de:79:67:45:ca:68:b5:34:c2:8b:67:a9:89:4a:5a:
bf:31:f8:ee:cb:13:55:11:99:52:2e:70:99:fe:20:
fe:60:9b:de:e4:31:2b:bf:63:f9:ba:8c:b1:1a:e4:
81:ff:d2:33:97:e9:00:19:60:e6:fd:70:a1:f6:26:
6f:0b:b8:60:7a:3c:3a:9c:15:0f:de:9b:b9:e3:41:
46:17:78:6f:d2:23:77:15:f7:c2:96:17:ae:4d:54:
31:e7:c0:80:9c:74:ce:e5:a9:66:09:6e:6f:99:41:
89:21:77:65:62:2e:30:85:19:b3:3b:a6:76:4e:5f:
11:93:94:f6:05:05:e2:f7:b4:e3:ef:ec:1d:36:4c:
9d:56:51:0a:a9:99:b1:0e:68:3f:55:23:34:cb:f0:
54:bc:df:8f:41:cd:1f:f3:51:ab:ab:cb:55:a5:96:
72:07:cb:a6:47:12:4d:3c:05:cb:46:21:1b:31:19:
1a:32:83:2e:f7:b9:36:40:55:95:e2:c2:fa:37:50:
a5:9f:e1:2f:b6:5e:06:f6:d1:5c:a4:98:e5:a0:63:
ce:d2:84:89:7f:52:ab:15:f4:22:ad:d3:e1:5e:56:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:31:23:EF:AE:29:F4:96:60:6E:9B:41:1C:F3:40:CE:DD:B8:BE:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/dTEj764p9JZgbptBHPNAzt24voE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.0.0/24
77.90.8.0/24
77.90.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:41:e8:af:c6:ac:98:f3:5f:15:e0:ed:20:0a:15:19:13:3d:
f9:ed:d5:13:7b:6a:0b:8f:8c:ff:07:1d:51:c1:67:20:f9:0d:
ee:79:82:84:7e:97:9a:37:be:86:b4:74:21:3d:e2:e1:65:37:
c5:df:3f:97:3d:07:0a:21:0b:42:95:32:af:ba:4a:40:d9:e1:
27:ce:e6:d1:82:cf:97:c5:af:81:4f:78:03:89:3a:42:81:22:
05:a1:4e:32:82:3e:96:cf:cd:7b:98:b0:3f:3c:38:ed:78:8d:
98:b7:bb:c0:b7:d7:a8:26:a1:b3:ca:63:a0:ce:3f:30:28:50:
86:9c:fc:c0:24:f8:28:0b:52:93:34:f0:4f:d4:ed:5f:8e:4d:
0e:16:27:ae:df:72:11:dc:80:b9:e3:b3:63:fe:f9:e1:8f:ed:
79:ae:3a:d3:a8:5d:b3:96:fb:4a:8d:c9:06:d6:ab:bf:5f:10:
24:88:fe:3f:08:7d:86:dd:8a:d4:56:93:64:5a:f8:dc:6d:1c:
23:a3:15:26:71:8f:7b:aa:58:34:94:19:67:cf:dd:eb:e5:bf:
b2:84:d1:c5:9d:d0:2c:bf:df:5a:ef:cf:d1:49:e1:7e:06:cd:
3d:34:5f:71:e7:f3:51:cf:a2:2e:da:85:32:16:f7:23:6c:93:
dc:ea:05:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org