Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Lg8ualTshpyVtnTmv5DGwtKU0.roa
File: f_Lg8ualTshpyVtnTmv5DGwtKU0.roa (raw, json)
Hash identifier: kBRamFDtxsjojuDE0c6jLUo5/nL554wHV0fgih+1QIc=
Subject key identifier: 7F:F2:E0:F2:E6:A5:4E:C8:69:C9:5B:67:4E:6B:F9:0C:6C:2D:29:4D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01916B458183F6A89FF4EA4C1C5F3A7F9E19
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Lg8ualTshpyVtnTmv5DGwtKU0.roa
Signing time: Mon 19 Aug 2024 15:33:22 +0000
ROA not before: Mon 19 Aug 2024 15:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 77.90.24.0/24 maxlen: 32
77.90.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 19:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:45:81:83:f6:a8:9f:f4:ea:4c:1c:5f:3a:7f:9e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 19 15:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ff2e0f2e6a54ec869c95b674e6bf90c6c2d294d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:44:28:a0:f4:1e:86:3f:72:71:8b:94:95:
10:11:be:9c:d6:fb:be:2b:2c:40:c3:8b:dd:19:1e:
a8:2e:70:71:24:72:74:3c:81:96:cf:64:a7:61:32:
23:5a:b7:4b:63:29:f8:e5:f0:41:9b:d7:b3:54:23:
f6:09:5f:bd:0d:11:a2:19:fd:35:92:a3:bb:d6:14:
f3:6e:ec:38:e6:55:9d:1f:f3:1f:22:79:0e:19:12:
8c:9e:c5:4f:e4:42:62:d3:3b:20:1b:a9:88:b7:14:
7f:ac:e0:82:76:52:98:fa:ef:99:94:e0:c1:c3:80:
75:3e:0b:41:de:8e:08:d1:7c:65:88:c2:4b:3f:13:
d2:51:ea:6c:1a:b9:6c:2c:80:86:2b:be:4f:1e:7a:
9a:fb:7b:c5:40:45:80:6b:62:8e:23:86:c1:82:9e:
2e:d9:5a:58:d3:8a:2f:65:66:8c:01:c9:12:86:86:
c5:a6:31:c1:bf:ff:d7:c8:60:00:fe:af:58:82:7f:
ab:48:77:f3:dc:69:2c:0d:a4:0c:c6:a0:93:72:1c:
e2:5c:1d:31:b7:cf:44:b2:46:10:5d:10:f0:c4:1f:
ad:e9:7b:7f:c2:2e:d7:be:35:0c:70:ec:89:4a:d4:
67:21:00:c8:8d:d0:f2:a0:78:1a:ab:d0:1b:bc:a6:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:E0:F2:E6:A5:4E:C8:69:C9:5B:67:4E:6B:F9:0C:6C:2D:29:4D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/f_Lg8ualTshpyVtnTmv5DGwtKU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.24.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:2d:99:33:f4:f1:df:61:91:4d:f0:e3:8c:f8:71:8d:c6:7a:
41:0b:ae:65:0d:5e:b2:c4:21:f7:61:9e:74:ea:4b:ef:03:ca:
1b:ee:b2:26:f4:a6:4a:41:1a:01:c9:19:97:bb:c1:84:3e:f3:
30:be:68:d8:db:64:c6:8d:65:4e:74:ab:b3:02:29:26:05:88:
6e:67:bd:19:b2:c8:47:ef:4a:38:66:8f:1e:f7:c2:22:fe:38:
d8:0f:6b:de:64:bc:65:01:cf:48:bc:f2:aa:50:87:7c:a7:f7:
0b:4c:99:be:78:43:70:78:49:90:9d:e4:2a:82:ca:84:79:a7:
1a:3a:e6:9c:44:bd:c2:a7:8c:f4:f9:69:53:38:42:66:bf:66:
8d:d6:ad:84:0e:d9:43:fd:6d:e1:9c:a1:92:84:a1:e1:86:bb:
ee:99:11:92:bd:e8:84:b2:99:74:ab:7b:9b:71:9c:46:a2:f7:
a2:66:8c:8d:71:e9:fc:dc:56:da:2b:0e:31:aa:96:e1:f5:e9:
6d:21:98:bd:f3:fd:60:27:01:75:69:65:c8:ab:d4:dd:61:dd:
ad:f4:42:a9:49:96:0a:ea:df:3d:29:79:a4:5d:21:0d:29:51:
1f:7d:27:9a:e4:1c:3b:cc:5f:74:62:c5:71:ff:64:6f:fe:91:
3a:b4:3d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 8 20:56:57 2024 by rpki-client on console-ams.rpki-client.org