Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l7HbkGD5qv5eZ5Bt6j7FWkTrk0w.roa
File: l7HbkGD5qv5eZ5Bt6j7FWkTrk0w.roa (raw, json)
Hash identifier: yQW3S18lRLdRrd70M4EGxTuokABpZvCA4cctapoQ7FY=
Subject key identifier: 97:B1:DB:90:60:F9:AA:FE:5E:67:90:6D:EA:3E:C5:5A:44:EB:93:4C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190977C268416924AC04399EBE8723B85E2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l7HbkGD5qv5eZ5Bt6j7FWkTrk0w.roa
Signing time: Tue 09 Jul 2024 12:33:34 +0000
ROA not before: Tue 09 Jul 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215828
IP address blocks: 77.90.24.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 13:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:7c:26:84:16:92:4a:c0:43:99:eb:e8:72:3b:85:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 9 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97b1db9060f9aafe5e67906dea3ec55a44eb934c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:25:99:5a:8a:7f:46:34:8f:f7:a5:ce:0b:
97:bb:9d:eb:80:58:a7:4e:4c:10:77:80:04:6d:e2:
37:20:62:6c:72:cb:40:62:ca:e9:7b:47:32:7d:41:
89:dc:32:9d:9f:2e:9f:fa:f7:26:1d:e1:d0:3b:4f:
2c:72:4a:76:ef:8d:4c:e9:63:c1:f1:98:ad:f8:47:
c4:14:22:3f:13:64:65:48:cc:20:2e:7f:32:bb:b6:
d2:a5:a6:08:a3:7e:84:3e:e5:2c:e7:84:34:37:36:
0e:40:cf:5f:3e:4d:ce:85:e4:97:f6:27:24:a5:03:
0f:03:ec:6e:5a:61:e0:fe:07:33:72:40:79:15:82:
8d:8e:3f:50:66:d3:1c:94:06:69:ce:d1:93:e0:9a:
70:98:03:30:58:d6:cf:9d:51:af:fd:9e:74:aa:93:
07:be:41:07:71:2a:75:54:2d:cf:58:c1:71:6a:98:
af:73:b2:5f:01:e7:4d:8b:19:7e:5e:93:93:6a:db:
17:bd:fd:77:89:0b:48:3a:74:22:29:fb:c7:d1:0e:
fb:8d:db:45:51:a6:c8:c7:cf:80:49:10:fc:f2:45:
cb:4e:a0:70:48:15:b9:57:45:2d:29:a8:26:a3:17:
a5:5d:64:0c:63:88:34:c1:b4:85:72:f2:4c:1a:17:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:DB:90:60:F9:AA:FE:5E:67:90:6D:EA:3E:C5:5A:44:EB:93:4C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/l7HbkGD5qv5eZ5Bt6j7FWkTrk0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.24.0/23
Signature Algorithm: sha256WithRSAEncryption
18:bb:3a:a3:e1:08:74:24:31:94:37:2b:97:ce:d4:34:28:c7:
79:18:60:cc:08:88:3f:ad:6e:f6:90:3d:c0:34:14:f1:96:18:
61:da:69:2f:76:80:35:d3:44:08:53:48:da:1d:13:8e:b1:d1:
a0:d4:b1:c8:b4:b9:cf:54:9d:25:8e:0b:7b:8f:63:28:d7:47:
a1:5a:b1:7a:56:f9:16:8e:66:27:49:89:4e:9b:5e:d3:c7:21:
53:fe:e5:21:79:a3:86:4d:d8:8c:0b:b3:0c:e7:02:c7:44:36:
84:39:80:a7:00:9f:f9:d5:3f:c3:93:8f:98:77:53:c3:40:5b:
76:b3:83:ae:27:c9:7b:aa:7a:b1:a1:4c:57:dd:57:a0:56:01:
9f:0d:70:5a:f5:de:1e:fe:f9:00:4d:40:e4:6a:52:e8:d9:e5:
c4:8a:9e:11:c3:e9:6d:61:44:f7:47:56:64:40:2f:bb:c3:24:
eb:2f:00:9c:af:70:78:c9:b4:b6:31:ee:eb:fe:71:75:e7:b6:
ea:1d:1a:b7:14:bb:22:75:46:f4:9c:1a:36:66:7c:d9:c0:2f:
46:97:25:1c:d9:9d:67:59:88:ca:47:be:64:8b:7c:b2:89:73:
fc:9f:db:42:cc:8c:e1:13:dc:86:18:08:38:bc:e6:5d:6b:90:
02:54:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 16:43:21 2024 by rpki-client on console-fra.rpki-client.org