Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oeDHa5QL9BkBSOOIm7ouc2k2vFE.roa
File: oeDHa5QL9BkBSOOIm7ouc2k2vFE.roa (raw, json)
Hash identifier: 0YhlIIwZp8sFuZuQtHKDuTOwDlRiggUr/I6Ukt1pWqU=
Subject key identifier: A1:E0:C7:6B:94:0B:F4:19:01:48:E3:88:9B:BA:2E:73:69:36:BC:51
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191D5A6C8AB030B20363DAD5D1642B7CD6F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oeDHa5QL9BkBSOOIm7ouc2k2vFE.roa
Signing time: Mon 09 Sep 2024 07:19:22 +0000
ROA not before: Mon 09 Sep 2024 07:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197477
IP address blocks: 77.90.10.0/24 maxlen: 24
77.90.11.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 04:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d5:a6:c8:ab:03:0b:20:36:3d:ad:5d:16:42:b7:cd:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 9 07:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a1e0c76b940bf4190148e3889bba2e736936bc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:58:0f:f2:4d:64:db:d5:1c:88:78:20:0c:
b1:0a:8a:73:fb:8d:57:d4:3d:94:14:4a:7c:f8:d0:
22:9e:b0:2b:96:18:e0:fb:ef:c1:a1:90:58:73:c1:
94:ce:6c:bb:43:91:32:2d:36:c0:a5:86:84:78:be:
24:4d:5e:97:29:c4:47:23:94:39:87:8e:36:40:6b:
7d:73:fc:21:2f:48:86:f5:1b:1f:48:1e:30:46:61:
01:d7:e3:18:ed:a4:01:c4:85:01:6c:8b:16:51:0d:
2c:32:d5:03:bd:8f:89:4b:57:49:ad:a3:b4:97:ff:
c0:ef:fb:56:76:ce:68:e2:c5:5d:39:5f:47:ec:17:
e6:13:12:e6:77:3f:90:a2:6e:29:35:c1:ae:08:2c:
74:90:e6:6b:f0:37:01:f0:a0:dc:25:9f:e9:04:79:
87:18:3d:e0:b3:0a:8d:44:83:9d:da:18:06:3a:af:
a6:7f:eb:26:13:8a:4b:39:64:21:b1:1c:49:53:30:
32:80:75:bc:87:8a:a5:f1:18:ba:a0:cc:46:22:7c:
48:ff:33:e9:d8:d9:01:fe:97:a6:4d:19:78:70:4e:
ac:85:c8:9e:63:40:fc:9e:8b:5e:33:9c:17:bc:4d:
00:84:62:72:cd:8a:eb:94:10:ff:0a:cf:d5:2c:a8:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E0:C7:6B:94:0B:F4:19:01:48:E3:88:9B:BA:2E:73:69:36:BC:51
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/oeDHa5QL9BkBSOOIm7ouc2k2vFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.10.0/23
77.90.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:99:79:15:59:b0:da:7c:70:fa:3f:38:76:dc:aa:d2:4f:c7:
da:6d:d7:0b:92:cc:0a:33:6c:b1:a0:0a:92:0e:a1:c0:e4:c0:
11:9e:59:77:32:f9:ea:af:ae:df:91:03:67:86:78:8d:5d:38:
bc:42:19:53:0b:02:18:ef:c0:5e:f8:c3:78:09:d1:98:c3:d3:
04:24:7e:b7:20:0a:65:8c:db:e4:25:a4:58:8b:e2:14:d9:8d:
6f:c9:48:53:ae:05:44:37:99:e4:9a:cf:78:7e:37:c1:8e:f0:
4b:c9:e8:7d:bf:a7:e5:7d:51:07:65:63:39:d3:fc:70:3d:8f:
1c:61:f7:c5:e7:50:5d:d0:49:47:94:b7:4d:10:af:ec:47:6d:
29:30:c2:02:09:8b:77:3a:1b:92:39:dc:b1:08:93:ee:d7:a0:
62:50:ec:7e:5a:d9:af:2c:0a:08:8a:f6:61:d1:c9:0f:37:db:
cd:fa:68:c0:00:61:e5:6c:0d:ca:f8:ca:fb:31:10:76:eb:37:
da:7f:ea:58:dc:6f:31:16:ab:da:a7:b3:2c:b9:ab:88:1b:c8:
55:bd:3a:73:06:dc:aa:5a:17:80:08:47:c0:af:33:f7:a0:58:
59:dd:9e:3c:2d:9a:42:c1:e1:a9:f6:3d:36:af:09:cc:f4:42:
be:6d:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 04:59:38 2024 by rpki-client on console-fra.rpki-client.org