Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVZYlmw4K9NmE2yNx-SJMoLhkzo.roa
File: eVZYlmw4K9NmE2yNx-SJMoLhkzo.roa (raw, json)
Hash identifier: yi2uJIKW7D5N1cdkUKLfIIPkbCga/NP9sy5hMWz78KA=
Subject key identifier: 79:56:58:96:6C:38:2B:D3:66:13:6C:8D:C7:E4:89:32:82:E1:93:3A
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019130EC66BD356920EA72DB66EA0BE736DF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVZYlmw4K9NmE2yNx-SJMoLhkzo.roa
Signing time: Thu 08 Aug 2024 07:38:04 +0000
ROA not before: Thu 08 Aug 2024 07:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44486
IP address blocks: 77.90.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 17:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:ec:66:bd:35:69:20:ea:72:db:66:ea:0b:e7:36:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 8 07:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=795658966c382bd366136c8dc7e4893282e1933a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:36:62:48:e5:ac:47:65:4f:1d:49:3c:89:
26:b1:9c:fc:e1:45:10:97:17:4f:1d:2c:4d:79:d0:
21:59:af:99:74:b5:8e:c9:28:f1:4e:65:8d:93:88:
26:cd:aa:88:71:c9:dc:c6:17:35:75:90:33:e9:84:
b8:b6:40:32:61:88:f4:16:0f:47:cf:2c:90:41:cd:
23:22:54:d7:44:67:6f:90:fc:4f:8b:a1:58:2c:36:
45:f2:f7:55:fb:bd:27:27:37:cd:b5:30:2a:ac:8b:
ce:36:a8:0a:c4:b0:64:9e:a1:29:c1:fe:cf:8c:f8:
68:1d:cd:12:57:0e:46:3f:2b:00:3c:02:3a:79:ec:
16:16:b1:e3:18:29:38:d5:58:ea:45:24:36:62:da:
a4:6c:fa:6a:46:70:64:33:2b:43:57:08:9d:aa:40:
a8:17:c7:ef:2d:79:8b:ae:13:df:c4:7d:db:0a:68:
a0:b1:6e:ba:46:38:9d:9c:59:dc:d0:5d:68:18:58:
8f:d1:6c:f7:80:ad:d5:61:46:f2:c1:1c:ea:c1:05:
b6:35:51:09:16:c3:32:65:e8:3e:12:43:93:63:ee:
60:a9:f1:cb:45:7b:39:f9:9e:64:c9:f5:1e:36:d5:
62:01:9c:42:e8:af:26:a6:b0:bf:c1:37:c5:a1:1c:
9e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:56:58:96:6C:38:2B:D3:66:13:6C:8D:C7:E4:89:32:82:E1:93:3A
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eVZYlmw4K9NmE2yNx-SJMoLhkzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:0c:3b:86:ac:b5:77:b8:a0:b0:26:95:42:26:a9:14:5b:60:
5a:d3:4e:66:80:de:f5:1e:32:d3:02:d3:92:cd:b4:24:4a:de:
ee:11:86:b3:70:2a:02:fb:5c:e9:11:6b:f6:ab:6c:d3:f7:92:
e6:19:59:0f:70:08:b3:f3:e1:16:8b:99:87:10:19:d1:fe:f4:
da:17:11:00:d3:bc:18:07:57:7a:59:a3:9e:1b:05:b6:dd:45:
04:55:9b:08:e5:a4:f6:82:03:12:28:98:c5:c9:3a:51:ac:4a:
51:92:7b:3a:78:d4:2d:18:41:a7:d9:38:e9:c9:38:a1:e3:24:
fc:ad:22:ab:3a:7e:95:63:d4:b3:18:66:97:32:43:e2:ae:ba:
89:03:8e:29:96:5a:ff:35:1a:9e:d8:5a:d2:07:a3:6b:81:10:
39:57:9f:fc:ac:59:19:5f:e8:1d:f3:af:3d:b5:20:4f:c1:a0:
57:5a:49:e6:a2:48:e1:dc:45:65:b9:e1:fc:3a:14:f7:38:c0:
9d:27:5a:95:70:86:2d:c1:26:a2:ad:c8:2b:cb:9f:3b:e7:f0:
d8:50:4a:bf:5a:f7:20:76:fd:16:66:ff:8e:e1:f5:a3:fd:94:
34:6f:3b:45:3f:de:2c:97:2f:92:33:2f:ea:5e:69:de:89:1d:
1b:d0:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 21:05:44 2024 by rpki-client on console-ams.rpki-client.org