Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-upSjVQhStn9ykoIvxU0ENqxvA.roa
File: m-upSjVQhStn9ykoIvxU0ENqxvA.roa (raw, json)
Hash identifier: HQUdO+zSffHpfqYTYNaPC/YrAVs5MKRswzsoIel9w8M=
Subject key identifier: 9B:EB:A9:4A:35:50:85:2B:67:F7:29:28:22:FC:54:D0:43:6A:C6:F0
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190F4E3725E8E1E579384FFC4988E9ABFF2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-upSjVQhStn9ykoIvxU0ENqxvA.roa
Signing time: Sat 27 Jul 2024 15:51:04 +0000
ROA not before: Sat 27 Jul 2024 15:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215240
IP address blocks: 77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 13:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f4:e3:72:5e:8e:1e:57:93:84:ff:c4:98:8e:9a:bf:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 27 15:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9beba94a3550852b67f7292822fc54d0436ac6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:c6:34:84:3b:ba:8c:1d:2a:5e:70:c1:3c:
50:d1:fc:79:b4:6a:31:c4:d0:aa:40:5b:5d:15:48:
46:b3:45:43:fe:ce:b0:9c:53:7b:12:6a:9c:81:f1:
53:d1:df:27:38:10:0e:77:37:aa:62:1d:6b:f0:53:
e8:bd:b4:76:bd:38:df:62:ab:0d:55:be:c9:4b:c4:
81:29:24:6d:b0:3d:9a:ca:ce:94:85:22:4d:91:51:
4f:b2:ae:a2:73:ff:1f:a8:b8:c3:8f:0b:77:fc:23:
5d:d0:06:8f:4d:73:c2:13:29:3a:1e:af:35:fa:2d:
af:21:fd:07:55:ed:2c:41:cf:9e:f8:d7:f4:35:94:
a5:e0:3a:8e:65:39:09:3a:71:f1:f2:7c:64:8d:5a:
60:59:78:51:e5:97:6e:5f:e5:d2:da:98:7a:72:16:
21:22:e5:e5:c6:10:22:0e:59:c1:3d:6d:ac:66:39:
58:11:3f:76:53:64:5a:db:74:90:81:68:e2:11:13:
ac:18:a6:d0:c7:02:6c:41:1e:bb:48:7a:c6:68:88:
df:45:54:71:a8:b8:02:02:86:c5:a7:5b:72:e9:db:
ad:f4:06:2c:70:ba:b1:fd:5d:3a:a1:9a:df:d2:68:
1c:05:ef:33:ca:ba:8d:1f:d8:88:4c:4d:9a:e1:fa:
4d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:EB:A9:4A:35:50:85:2B:67:F7:29:28:22:FC:54:D0:43:6A:C6:F0
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/m-upSjVQhStn9ykoIvxU0ENqxvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.31.0/24
77.90.35.0-77.90.39.255
Signature Algorithm: sha256WithRSAEncryption
8f:24:23:63:05:32:33:14:db:7f:b1:11:95:e0:42:a8:10:f6:
86:ca:0b:a7:55:6e:62:13:75:59:df:66:2d:72:98:62:aa:57:
72:4b:1c:5a:49:60:8c:21:b8:53:e2:10:20:e8:c6:05:3e:58:
37:65:c6:1e:68:ef:d9:cf:19:82:2c:08:9c:e8:b3:58:a2:17:
36:7b:ad:7c:07:16:5c:19:43:c3:41:6b:51:9d:48:77:7b:10:
ef:c8:41:1b:95:c5:24:99:70:f0:7f:18:2e:48:b5:47:60:f0:
9c:4f:43:fc:0b:8e:9a:09:97:27:11:16:18:25:ba:ef:35:81:
d5:a9:af:09:77:97:61:f5:c2:b1:ae:d5:fa:f7:44:5e:7d:e6:
92:4e:1c:f0:06:ff:1f:cc:3e:32:a9:0f:c7:0e:a9:d2:f7:e1:
84:f3:65:03:8c:71:83:41:7e:e1:aa:57:5f:0b:d5:17:38:ee:
52:bd:b8:65:93:07:4f:70:d0:42:71:18:d9:b9:75:50:98:ce:
f5:d2:ae:01:b2:65:18:38:c3:3a:83:31:3f:4a:3f:21:ba:1b:
16:d0:89:4b:69:db:2b:2c:d1:8f:64:ae:9c:0e:d3:c6:e2:9a:
a2:b2:df:4c:9a:bf:c2:61:38:40:3e:a4:49:38:f3:c5:e9:f8:
c2:ed:13:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Aug 2 16:11:33 2024 by rpki-client on console-fra.rpki-client.org