Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hmIia5o5M1-wkI3AfdYKb3FbiIs.roa
File: hmIia5o5M1-wkI3AfdYKb3FbiIs.roa (raw, json)
Hash identifier: p6f0LCLoPMqjC4K7oud0M+3TYBMO8QvwgAshgmbwnm0=
Subject key identifier: 86:62:22:6B:9A:39:33:5F:B0:90:8D:C0:7D:D6:0A:6F:71:5B:88:8B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01931EC77C0E32BCFCC1E3E0E719EB33EB5F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hmIia5o5M1-wkI3AfdYKb3FbiIs.roa
Signing time: Tue 12 Nov 2024 05:10:10 +0000
ROA not before: Tue 12 Nov 2024 05:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 09:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1e:c7:7c:0e:32:bc:fc:c1:e3:e0:e7:19:eb:33:eb:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 05:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8662226b9a39335fb0908dc07dd60a6f715b888b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:58:2f:a6:2d:02:aa:85:45:9a:c4:76:15:d1:
c5:3c:63:1a:3e:7c:4c:54:eb:36:a2:a6:18:ba:4b:
12:60:63:51:3a:ca:24:1e:1a:e3:fb:75:76:46:af:
ac:b1:56:2e:2e:e2:96:56:1d:a5:31:c4:95:69:54:
fa:e4:25:7c:45:1c:c2:bd:35:ed:b1:d6:bc:1a:9e:
43:50:75:b8:72:89:9b:83:43:b3:5f:33:ef:de:73:
c3:1a:ae:2c:31:eb:d4:c5:77:29:bb:00:61:8e:64:
c3:7e:30:76:79:68:ed:62:a9:20:57:1c:65:5e:9b:
70:c8:99:c1:b7:6f:db:59:2a:fa:a7:16:8b:f3:84:
31:3f:22:62:16:b3:bd:fb:af:a7:df:66:a6:0d:45:
b2:eb:29:2b:39:7d:2a:e8:10:3f:99:c1:65:e6:25:
55:c1:8f:72:39:64:f2:83:0c:3a:cb:da:95:bb:7a:
54:44:c7:34:6c:0b:1a:6d:1b:db:95:9d:ec:34:36:
dd:d9:80:ba:1e:24:d4:ed:35:3b:62:5a:e3:a4:69:
aa:0f:e9:54:db:d4:c0:ae:de:ff:21:ec:0d:25:c7:
13:7f:6f:81:57:3f:9a:ad:27:17:4e:2f:56:2c:be:
32:73:ba:6c:97:cb:eb:8c:34:be:d3:d4:6e:48:da:
ea:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:62:22:6B:9A:39:33:5F:B0:90:8D:C0:7D:D6:0A:6F:71:5B:88:8B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hmIia5o5M1-wkI3AfdYKb3FbiIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.39.0/24
77.90.41.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
46:c5:c7:70:5e:aa:0b:c3:f7:fc:af:f9:ad:c0:69:0f:fd:f5:
8f:9c:32:00:ea:d6:77:f5:15:a9:a8:6d:31:c1:95:60:6f:69:
aa:ff:39:e2:3e:41:2c:42:c8:82:b0:c5:7d:ca:17:52:90:ad:
7f:cd:c5:70:66:cc:bc:0b:16:ad:c0:8f:43:f1:03:04:1c:0d:
dd:af:e6:da:f6:e0:b4:16:05:4f:f0:3d:18:52:5d:40:ad:16:
61:10:6f:d0:9d:02:23:5a:b9:e5:a2:ca:a5:6f:9a:9b:76:3f:
b9:27:2e:24:9a:d2:b7:42:e7:f6:cc:c2:ed:b3:8d:85:f5:27:
2c:47:6d:bf:54:12:ff:0e:a6:71:40:8f:ff:02:ea:34:fe:50:
3e:6c:2c:32:4a:a6:69:71:85:04:a2:43:bf:9f:dd:59:87:cd:
f2:e7:10:0d:27:fc:a7:22:7b:e0:ee:ce:2e:54:45:0c:4d:bb:
ba:b1:2e:a2:8b:63:fe:86:1a:89:47:36:43:e8:45:8b:de:36:
6b:ac:d2:e6:57:80:a9:ed:86:44:d6:7f:fa:e1:fd:8e:1e:f5:
a0:8a:dc:da:b7:0b:3a:43:41:b7:85:eb:ca:d5:65:4f:8f:00:
40:75:da:c9:b6:59:67:f2:29:11:e7:e1:89:a9:cd:29:e9:e6:
e0:75:30:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 13:08:38 2024 by rpki-client on console-fra.rpki-client.org