Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gMtdR9AVp8xbXkbp9TKH1K3IpwQ.roa
File: gMtdR9AVp8xbXkbp9TKH1K3IpwQ.roa (raw, json)
Hash identifier: nsrMI3saxNTJZ7nJWJ19Rnj5/ME3ZvS0WkzPRGpHZvQ=
Subject key identifier: 80:CB:5D:47:D0:15:A7:CC:5B:5E:46:E9:F5:32:87:D4:AD:C8:A7:04
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190FC3BEFBDDCAD455AD41C8AF8C9A35B97
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gMtdR9AVp8xbXkbp9TKH1K3IpwQ.roa
Signing time: Mon 29 Jul 2024 02:05:04 +0000
ROA not before: Mon 29 Jul 2024 02:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214902
IP address blocks: 77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 20:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fc:3b:ef:bd:dc:ad:45:5a:d4:1c:8a:f8:c9:a3:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 29 02:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80cb5d47d015a7cc5b5e46e9f53287d4adc8a704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:67:80:32:a8:c9:e0:71:f5:7a:73:9c:33:
94:ea:76:2a:f5:e7:33:9d:0e:23:8c:bc:41:05:14:
96:7d:b2:57:2e:82:d9:f3:1c:13:ea:6b:db:4e:3b:
4c:a0:fe:ba:08:2b:ae:72:89:64:04:bd:3b:72:3a:
d9:58:25:4a:38:c3:21:71:4e:0f:d8:d5:c6:59:4a:
77:3d:de:de:e2:f8:cd:53:54:b8:83:47:ca:47:8a:
2a:b0:b4:bc:46:2d:b7:d6:57:39:a8:6a:e3:5c:08:
d9:ce:d6:05:7a:d9:97:53:ed:64:95:48:b5:fa:77:
84:c1:b8:02:07:53:75:ae:39:b8:7b:57:78:87:40:
68:cb:ca:e9:33:3e:54:f5:1c:3f:12:ab:b7:a8:d9:
85:1d:db:6c:97:92:16:1a:88:7a:8a:ae:cf:c8:b1:
de:de:d7:e1:6e:75:9c:39:f9:5c:d9:6e:c0:75:cb:
8b:65:dc:f9:7c:ce:31:53:0d:ef:97:2d:fc:2a:da:
ca:e9:53:53:13:19:07:bf:8f:25:79:08:a6:87:56:
11:9e:17:a8:fa:03:70:89:58:a4:1e:03:39:7d:51:
79:40:3b:08:5b:a8:83:be:80:19:20:c4:ea:33:0e:
63:bb:7d:e9:4a:76:9a:b7:37:6d:59:5c:00:0c:a1:
0a:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CB:5D:47:D0:15:A7:CC:5B:5E:46:E9:F5:32:87:D4:AD:C8:A7:04
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gMtdR9AVp8xbXkbp9TKH1K3IpwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:a9:59:23:78:00:d2:70:70:5d:1f:e3:8c:6e:da:35:5d:91:
c2:37:bb:13:cb:d8:4a:ff:58:02:98:30:c3:c7:95:ee:28:29:
b8:6a:a9:0d:03:6b:ab:ea:dc:49:53:da:d1:50:1b:52:0a:d2:
3f:4c:28:83:fc:a3:0f:a5:60:cd:6f:c2:a8:61:c6:76:01:67:
ce:f3:de:b3:4d:43:02:88:87:ad:e0:58:0f:42:25:9d:d8:88:
68:e0:fb:c4:63:8b:c7:ba:81:ce:16:55:d4:a7:56:2b:cd:64:
fc:d6:a1:2b:34:12:8f:cf:0c:05:36:f4:38:fc:23:2e:28:82:
c7:32:94:8d:49:64:a0:96:99:07:14:04:01:79:3c:c1:57:24:
4f:ea:4d:a4:47:33:77:21:04:d8:21:91:35:62:3b:a2:18:fa:
f3:07:21:2c:3a:98:18:dd:bc:57:e1:60:2a:e0:75:83:4a:79:
bc:87:cf:f8:d8:35:6e:6f:3b:8e:06:b8:a8:99:b9:8a:98:c4:
cd:33:b6:82:be:ad:71:1a:f8:ce:59:d7:89:10:6d:2b:84:3b:
74:b9:f1:16:4a:d7:4c:3b:8f:48:83:70:0d:98:5f:27:82:cf:
7b:04:fb:b6:40:82:3d:d6:22:2d:92:7b:9c:49:9b:d4:08:f2:
1f:17:9d:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZD8O++93K1FWtQcivjJo1uXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwNzI5MDIwNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGNiNWQ0N2QwMTVhN2NjNWI1ZTQ2ZTlmNTMyODdkNGFkYzhhNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz91ngDKoyeBx9XpznDOU6nYq9ecz
nQ4jjLxBBRSWfbJXLoLZ8xwT6mvbTjtMoP66CCuucolkBL07cjrZWCVKOMMhcU4P
2NXGWUp3Pd7e4vjNU1S4g0fKR4oqsLS8Ri231lc5qGrjXAjZztYFetmXU+1klUi1
+neEwbgCB1N1rjm4e1d4h0Boy8rpMz5U9Rw/Equ3qNmFHdtsl5IWGoh6iq7PyLHe
3tfhbnWcOflc2W7AdcuLZdz5fM4xUw3vly38KtrK6VNTExkHv48leQimh1YRnheo
+gNwiVikHgM5fVF5QDsIW6iDvoAZIMTqMw5ju33pSnaatzdtWVwADKEKZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIDLXUfQFafMW15G6fUyh9StyKcEMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvZ010ZFI5QVZwOHhiWGticDlUS0gxSzNJcHdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVoGAwQA
TVoTAwQATVorMA0GCSqGSIb3DQEBCwUAA4IBAQDKqVkjeADScHBdH+OMbto1XZHC
N7sTy9hK/1gCmDDDx5XuKCm4aqkNA2ur6txJU9rRUBtSCtI/TCiD/KMPpWDNb8Ko
YcZ2AWfO896zTUMCiIet4FgPQiWd2Iho4PvEY4vHuoHOFlXUp1YrzWT81qErNBKP
zwwFNvQ4/CMuKILHMpSNSWSglpkHFAQBeTzBVyRP6k2kRzN3IQTYIZE1YjuiGPrz
ByEsOpgY3bxX4WAq4HWDSnm8h8/42DVubzuOBriombmKmMTNM7aCvq1xGvjOWdeJ
EG0rhDt0ufEWStdMO49Ig3ANmF8ngs97BPu2QII91iItknucSZvUCPIfF53x
-----END CERTIFICATE-----
Generated at Tue Sep 3 23:40:54 2024 by rpki-client on console-ams.rpki-client.org