Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p5cjJ5bgEVelUoM2XkFd7u5Eksw.roa
File: p5cjJ5bgEVelUoM2XkFd7u5Eksw.roa (raw, json)
Hash identifier: y2KMn34u7W21qR/GfwHZGQv4jXHbK9/eF3pWwBiNGes=
Subject key identifier: A7:97:23:27:96:E0:11:57:A5:52:83:36:5E:41:5D:EE:EE:44:92:CC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193492C26219EACEC26E416993B4CD307FB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p5cjJ5bgEVelUoM2XkFd7u5Eksw.roa
Signing time: Wed 20 Nov 2024 10:44:10 +0000
ROA not before: Wed 20 Nov 2024 10:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.15.0/24 maxlen: 24
77.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 05:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:2c:26:21:9e:ac:ec:26:e4:16:99:3b:4c:d3:07:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 20 10:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a797232796e01157a55283365e415deeee4492cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:c6:c7:c7:68:2c:47:74:65:57:68:ba:5a:
e8:02:d1:88:5d:c2:e7:3d:bb:4d:36:52:6e:7d:59:
9a:db:aa:9b:28:8c:4b:c8:9c:a8:c5:86:0f:47:3b:
63:26:5a:06:ad:2e:4c:58:22:3b:65:d7:fd:6c:c1:
3c:cd:10:56:7c:36:8e:6b:7b:63:56:d6:41:da:66:
e6:84:45:82:1d:fc:0f:73:1d:58:c1:97:83:d9:ea:
e8:ab:2e:b3:3d:4b:bf:5b:24:e8:0d:2d:07:a5:a3:
e0:ec:df:9f:4b:9e:5e:80:90:64:89:ed:d0:eb:9c:
89:47:37:d6:ae:26:4a:a4:53:8a:cd:92:c6:f6:ae:
34:2b:c3:6e:f0:67:ca:c8:c4:81:50:3c:ea:cd:7f:
e8:79:82:38:4d:90:32:06:bb:73:42:dd:27:d5:d9:
4a:44:0d:f9:58:72:7d:a4:c9:77:a6:2b:19:83:87:
9c:d2:47:26:71:76:a2:b6:0e:63:cc:b8:9e:a7:d2:
60:7f:ec:33:63:ff:c2:72:e7:58:a4:4b:b9:4d:8e:
bd:b1:9c:ac:4b:23:b9:12:cf:6a:93:fa:0c:76:7c:
84:8d:35:cf:97:73:61:08:46:b5:e2:0f:b5:f9:c8:
00:23:c4:05:a7:5a:84:cf:5b:e2:87:a8:f5:84:df:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:97:23:27:96:E0:11:57:A5:52:83:36:5E:41:5D:EE:EE:44:92:CC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p5cjJ5bgEVelUoM2XkFd7u5Eksw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.15.0/24
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:33:da:d4:aa:bf:00:51:74:55:34:6e:aa:a5:39:3f:bf:7a:
73:b9:53:76:f5:e7:11:32:71:5a:a4:95:1a:29:ac:cb:fe:f0:
e2:a5:7f:23:e9:5e:15:57:bd:1d:ac:d5:9c:df:c6:77:0f:c6:
a3:b1:ae:c5:72:b1:b4:d0:4f:d2:37:28:7f:ae:1b:12:a3:6d:
19:d1:d7:8a:a8:6b:46:cb:44:4e:dc:2f:25:3c:01:d8:55:eb:
a8:af:f0:b5:88:6e:f7:a8:7e:b1:a0:7d:53:65:67:81:8e:66:
08:a5:6b:11:d8:0b:86:37:4f:f2:0c:0b:88:b1:7b:28:46:d9:
f3:ac:96:c8:7b:97:ac:29:e7:4f:6b:71:54:d4:a9:c5:c3:e3:
49:41:80:d9:cb:dc:cd:87:8f:6d:6d:cb:ac:53:09:9d:30:82:
c7:ef:3f:3f:48:b5:84:dc:bb:3c:6a:58:75:28:23:2b:c5:ba:
94:33:91:df:94:94:7e:06:93:01:e5:3a:25:7b:48:73:e5:5c:
67:15:07:1b:04:c0:52:01:35:31:84:84:ae:e9:8f:82:78:c9:
5e:cc:96:41:1c:cd:26:08:fc:f8:1d:d4:6c:fc:df:f8:b7:e1:
48:7d:7b:ad:bf:f8:d3:51:7a:f0:ae:19:86:5a:99:b3:e7:2f:
a9:f9:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:29 2024 by rpki-client on console-fra.rpki-client.org