Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fGc9VN3sjogboOQbC_0mgDYhIN8.roa
File: fGc9VN3sjogboOQbC_0mgDYhIN8.roa (raw, json)
Hash identifier: tBXUrWQtmBET/wyA2Rdm4tZfAGCtnl4pPeFcggF2FcQ=
Subject key identifier: 7C:67:3D:54:DD:EC:8E:88:1B:A0:E4:1B:0B:FD:26:80:36:21:20:DF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019301E2CF4A5C2B787D80C940EE7EDDEAC8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fGc9VN3sjogboOQbC_0mgDYhIN8.roa
Signing time: Wed 06 Nov 2024 14:31:01 +0000
ROA not before: Wed 06 Nov 2024 14:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 05:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:e2:cf:4a:5c:2b:78:7d:80:c9:40:ee:7e:dd:ea:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 6 14:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c673d54ddec8e881ba0e41b0bfd2680362120df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d9:cc:f4:3d:85:3f:de:d5:40:14:9f:e0:76:
18:ba:29:d1:28:1c:97:1d:99:c5:d1:5b:fd:4b:fb:
e3:49:5a:7c:27:14:79:06:d0:ed:18:86:5d:39:b6:
41:65:39:2d:a1:25:52:6f:8c:5d:f7:a2:be:7d:34:
4a:30:85:b6:6a:58:c8:7f:f1:10:34:9f:4c:97:80:
e2:2f:cf:40:15:69:30:13:de:e3:3a:3f:0a:80:f8:
7a:a5:7e:ec:a7:a6:e1:08:e1:57:88:95:44:f9:e4:
a5:64:59:29:98:d8:6e:35:91:5e:55:b0:3f:ab:d9:
fc:5e:41:37:8c:49:b0:ea:2d:d6:68:61:d1:58:f3:
7c:a5:66:30:e2:a3:1f:00:ea:0e:7c:d6:52:41:0d:
94:e9:4d:f2:7e:b8:f8:ac:2a:66:25:71:a8:a9:5d:
f0:23:4d:38:e0:cd:72:15:00:bd:48:b0:17:3c:a4:
31:7f:62:52:b6:33:9c:f9:d6:9b:c9:00:a9:d3:f9:
8d:01:78:8d:cf:07:c4:4f:a8:ec:f3:9b:7c:91:5d:
47:41:5d:ee:67:6d:fb:10:f5:4d:4a:f5:f4:b8:49:
86:dc:93:70:b7:d5:25:d8:2a:5f:c4:c2:f8:7a:dc:
fc:d5:b9:1c:86:2a:af:f2:ed:00:b9:03:8f:e3:91:
e4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:67:3D:54:DD:EC:8E:88:1B:A0:E4:1B:0B:FD:26:80:36:21:20:DF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/fGc9VN3sjogboOQbC_0mgDYhIN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:23:c2:83:03:4b:af:7b:12:2a:31:1d:6c:0a:8c:52:5c:7f:
c8:a8:14:03:cc:ad:54:16:2e:32:d8:8d:19:62:58:17:f4:bd:
db:a9:04:47:8e:bb:1c:ca:da:98:86:4f:c0:b2:93:e1:8f:3e:
75:8e:ec:39:6b:fc:3f:5e:aa:71:3b:ad:d1:f8:87:8f:a7:1f:
43:2f:83:3c:0b:69:a4:9d:b7:dc:5f:5f:43:29:1b:c1:60:e9:
6f:b7:c9:9b:a4:37:09:93:2b:c7:2d:93:24:7b:52:56:c4:bd:
e8:80:b3:61:42:43:51:72:60:96:ad:43:c6:b2:e0:4d:ce:82:
e7:54:1f:14:08:14:6d:ec:4f:1a:35:2f:f4:ad:c0:47:3c:e0:
7b:2b:d0:ae:9d:f2:51:e1:63:96:c6:c9:d0:8e:fb:e5:2a:10:
36:25:66:72:73:bf:a5:e5:42:f1:92:fa:b7:fa:22:bc:5a:5b:
4f:c2:dc:dc:07:aa:58:a6:45:ca:c8:3f:ca:b7:a6:21:3a:06:
8c:86:35:4f:61:eb:0e:4e:e2:63:9f:aa:c7:70:3e:88:7e:4d:
74:84:0e:8a:c8:b6:f6:82:1a:e0:6e:1d:70:b9:9d:b0:5f:aa:
cc:45:40:ab:f3:fb:df:b7:0b:ef:1c:ab:db:af:34:d8:3e:0e:
ee:82:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 08:27:09 2024 by rpki-client on console-ams.rpki-client.org