Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kL9VMOxt9WdSv5uX1Ecmy13Le40.roa
File: kL9VMOxt9WdSv5uX1Ecmy13Le40.roa (raw, json)
Hash identifier: 26ZH1Ux0F/i1JT6uJlqZHRicr0i9pxqjfly4dX2uBCY=
Subject key identifier: 90:BF:55:30:EC:6D:F5:67:52:BF:9B:97:D4:47:26:CB:5D:CB:7B:8D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191907353AE59758A72086CE51EDFD816A2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kL9VMOxt9WdSv5uX1Ecmy13Le40.roa
Signing time: Mon 26 Aug 2024 20:49:22 +0000
ROA not before: Mon 26 Aug 2024 20:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.83.134.0/24 maxlen: 24
5.83.139.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 04:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:73:53:ae:59:75:8a:72:08:6c:e5:1e:df:d8:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 26 20:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90bf5530ec6df56752bf9b97d44726cb5dcb7b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ba:e4:03:c9:3c:e2:10:f4:99:a5:7f:6d:1b:
ea:16:a6:f1:0b:d2:58:aa:6f:c7:85:65:31:00:6e:
20:85:ba:5f:0b:cf:e0:e5:30:a2:1c:eb:7b:cf:04:
84:e7:7e:83:6e:dc:86:70:bb:54:7c:c4:1c:1f:71:
f0:2b:9b:d8:95:d6:8c:65:35:ed:f9:43:f1:0b:a1:
4b:fa:58:4d:8e:60:82:fa:19:cd:de:9e:2c:96:ff:
64:a4:41:e9:83:4a:f5:00:08:e8:8c:54:b3:16:e1:
a5:cb:89:7d:70:0d:f2:fe:d5:2b:0f:e5:76:66:b3:
53:34:7a:84:62:1f:17:b8:12:ea:ae:6d:3b:69:da:
53:73:56:e3:4c:c0:e7:c8:5d:41:73:09:6f:28:c1:
5d:d8:f7:db:6a:0a:8c:a7:b4:09:b9:5e:f9:e8:95:
f8:11:21:8e:bc:ab:43:c0:42:54:0e:dc:aa:29:09:
79:ac:fa:58:05:7e:e8:9f:d1:ae:35:d9:ee:5e:9e:
4a:66:28:16:58:42:9c:58:77:bb:2c:18:81:44:22:
38:49:18:3e:22:b1:f3:de:78:46:c4:20:87:8d:08:
bf:60:5a:90:8f:2e:48:23:83:d2:af:79:55:af:c2:
79:f5:24:f6:ab:fa:92:6c:d0:3e:02:86:3c:33:b4:
e1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:55:30:EC:6D:F5:67:52:BF:9B:97:D4:47:26:CB:5D:CB:7B:8D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/kL9VMOxt9WdSv5uX1Ecmy13Le40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.134.0/24
5.83.139.0/24
77.90.52.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fe:9c:f6:ce:7a:cc:a2:59:66:1f:c5:a5:a8:fb:4d:2c:c1:
1b:51:72:8b:76:9b:8a:b2:40:cd:a5:95:99:09:af:70:32:95:
75:39:e8:c8:4f:64:30:08:a6:a6:68:4f:ae:ae:2c:84:a0:07:
52:85:20:cb:e6:2c:79:b4:3e:c4:ac:5b:72:a7:03:f5:88:cf:
5f:d8:09:5c:a8:ba:e6:18:fd:7a:26:1b:f0:c2:0d:93:ca:05:
3d:ca:a0:01:0a:54:dd:77:16:3b:7f:d6:13:dc:d5:64:87:65:
ff:e9:a0:ee:76:1d:36:87:1a:e4:fb:10:17:4a:b6:5b:21:1d:
f7:16:d2:d4:d5:4a:9b:4e:c8:57:19:08:75:30:a1:94:b6:2c:
e8:5f:98:38:bc:cf:86:a2:ab:31:47:1c:42:fe:48:c3:a6:f4:
47:c3:b6:d7:5c:2f:26:de:24:3b:30:84:b7:e4:34:81:25:84:
44:17:c5:5d:66:53:42:60:a2:19:a5:98:1e:45:11:5d:eb:ae:
00:ea:9b:06:12:b4:4c:04:9d:7f:7d:6b:96:e0:4f:59:1d:40:
f1:2b:8f:97:8d:ad:6b:7e:dd:a9:5c:12:92:86:b2:4f:e8:60:
40:60:22:27:75:70:3e:c4:10:75:a0:2a:e5:c5:f5:13:c7:ac:
9f:ca:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 06:26:21 2024 by rpki-client on console-fra.rpki-client.org