Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hRDJnl3aMPP_kO8OLt3_YSOdRLo.roa
File: hRDJnl3aMPP_kO8OLt3_YSOdRLo.roa (raw, json)
Hash identifier: +MkcaKhtFDTyDPxik23b++3+5gMLYClyYFS3YI5rbDU=
Subject key identifier: 85:10:C9:9E:5D:DA:30:F3:FF:90:EF:0E:2E:DD:FF:61:23:9D:44:BA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192500309130B9DAAB0B5DB417389411688
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hRDJnl3aMPP_kO8OLt3_YSOdRLo.roa
Signing time: Thu 03 Oct 2024 01:33:49 +0000
ROA not before: Thu 03 Oct 2024 01:33:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63473
IP address blocks: 77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Nov 2024 08:36:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:50:03:09:13:0b:9d:aa:b0:b5:db:41:73:89:41:16:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 01:33:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8510c99e5dda30f3ff90ef0e2eddff61239d44ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d0:62:82:42:cf:57:b1:47:fd:aa:2c:45:82:
ec:ab:da:f5:6e:01:fb:b5:3b:6b:92:28:0c:0e:2c:
30:b2:cd:38:37:a4:3a:66:35:87:48:7e:63:1f:23:
36:fb:9f:f2:02:f0:7e:b7:2d:98:3d:55:34:31:bf:
76:da:19:80:b0:00:d5:04:fc:09:f4:2b:0f:57:fa:
ec:fe:9d:aa:31:0e:9f:a0:d1:c2:20:4b:71:e5:f6:
90:5f:bf:9d:0c:37:b4:5b:4b:ad:2d:56:ae:e6:e9:
b7:81:dd:a0:ee:2e:de:4c:78:a7:bf:d3:78:a4:50:
a9:01:2a:fb:39:c2:98:7c:6d:a8:bb:37:54:e1:95:
a8:52:26:5e:6d:f1:96:2e:05:13:9c:b8:ba:68:76:
b2:8f:50:53:37:32:17:9c:47:71:dc:e5:af:9f:0a:
70:b5:91:cf:64:ef:8a:b5:6b:4b:03:74:e5:0e:24:
28:6b:c3:e0:9c:8d:8f:de:2f:a0:cd:f7:59:3f:3f:
f0:4a:e4:7a:da:91:42:33:ae:c5:17:b2:c3:c1:51:
e3:0f:7e:d5:fe:06:52:02:18:66:6a:da:8f:92:72:
45:78:45:f3:17:cd:a6:96:19:a6:e1:3f:51:4b:a5:
f5:0b:b2:b7:a2:10:0e:cd:a8:b6:e2:99:66:d3:b5:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:10:C9:9E:5D:DA:30:F3:FF:90:EF:0E:2E:DD:FF:61:23:9D:44:BA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hRDJnl3aMPP_kO8OLt3_YSOdRLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.31.0/24
77.90.35.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e4:fa:1e:f1:e9:6c:ac:94:bf:77:0b:f1:b7:7e:e2:87:97:
1f:8f:79:4e:5b:7e:58:4f:97:39:82:f1:fe:69:78:a2:ed:e6:
34:7a:e9:dc:fb:81:51:2e:45:a9:99:23:5d:b7:2a:a9:da:92:
8b:9a:ef:55:37:0c:7d:7e:95:de:22:d5:05:70:69:7b:fe:c5:
15:c0:dd:57:36:53:33:23:6a:a6:13:d3:a9:16:88:fb:95:11:
e3:c8:ed:a2:86:a8:a4:a4:91:f6:94:22:30:ec:09:d9:1f:60:
50:4d:5e:3a:0c:6e:a3:48:d4:a5:5a:62:98:83:3c:e2:54:0c:
64:db:a3:03:27:e4:48:29:fc:43:d3:ed:b0:23:db:a1:a3:31:
e7:75:f7:99:dd:30:fa:f9:11:e3:5c:ae:94:ab:27:ef:b9:c6:
42:0d:11:91:c9:28:cb:41:db:6c:71:86:38:73:a4:a9:e5:72:
37:27:39:fc:08:0d:e0:64:cd:30:76:62:49:2a:20:2f:f2:45:
b9:05:0b:d0:a9:14:bb:d8:56:f4:aa:95:04:6e:a5:a7:6b:8c:
e3:c4:62:ea:1b:dd:60:ee:f3:f5:24:ed:eb:e4:05:e0:c1:3a:
fc:24:e4:2f:46:16:a8:19:f0:6a:9d:5a:15:97:79:74:2b:75:
bc:10:de:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJQAwkTC52qsLXbQXOJQRaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDAzMDEzMzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTEwYzk5ZTVkZGEzMGYzZmY5MGVmMGUyZWRkZmY2MTIzOWQ0NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49BigkLPV7FH/aosRYLsq9r1bgH7
tTtrkigMDiwwss04N6Q6ZjWHSH5jHyM2+5/yAvB+ty2YPVU0Mb922hmAsADVBPwJ
9CsPV/rs/p2qMQ6foNHCIEtx5faQX7+dDDe0W0utLVau5um3gd2g7i7eTHinv9N4
pFCpASr7OcKYfG2ouzdU4ZWoUiZebfGWLgUTnLi6aHayj1BTNzIXnEdx3OWvnwpw
tZHPZO+KtWtLA3TlDiQoa8PgnI2P3i+gzfdZPz/wSuR62pFCM67FF7LDwVHjD37V
/gZSAhhmatqPknJFeEXzF82mlhmm4T9RS6X1C7K3ohAOzai24plm07V/rwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIUQyZ5d2jDz/5DvDi7d/2EjnUS6MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaFJESm5sM2FNUFBfa084T0x0M19ZU09kUkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVofAwQA
TVojMA0GCSqGSIb3DQEBCwUAA4IBAQA/5Poe8elsrJS/dwvxt37ih5cfj3lOW35Y
T5c5gvH+aXii7eY0eunc+4FRLkWpmSNdtyqp2pKLmu9VNwx9fpXeItUFcGl7/sUV
wN1XNlMzI2qmE9OpFoj7lRHjyO2ihqikpJH2lCIw7AnZH2BQTV46DG6jSNSlWmKY
gzziVAxk26MDJ+RIKfxD0+2wI9uhozHndfeZ3TD6+RHjXK6UqyfvucZCDRGRySjL
QdtscYY4c6Sp5XI3Jzn8CA3gZM0wdmJJKiAv8kW5BQvQqRS72Fb0qpUEbqWna4zj
xGLqG91g7vP1JO3r5AXgwTr8JOQvRhaoGfBqnVoVl3l0K3W8EN71
-----END CERTIFICATE-----
Generated at Sun Nov 3 10:47:12 2024 by rpki-client on console-fra.rpki-client.org