Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pLXxJWZX7JOyXxXtSjgf3s6SK-Y.roa
File: pLXxJWZX7JOyXxXtSjgf3s6SK-Y.roa (raw, json)
Hash identifier: 57leSk9ThM2AJfhn8Uu8L2N+a42QDLTya09wZEtrJdo=
Subject key identifier: A4:B5:F1:25:66:57:EC:93:B2:5F:15:ED:4A:38:1F:DE:CE:92:2B:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190CAD9F0B0CF79346E56244C3574DCF0EC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pLXxJWZX7JOyXxXtSjgf3s6SK-Y.roa
Signing time: Fri 19 Jul 2024 11:56:38 +0000
ROA not before: Fri 19 Jul 2024 11:56:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 77.90.0.0/24 maxlen: 24
77.90.2.0/24 maxlen: 24
77.90.8.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
77.90.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 15:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:d9:f0:b0:cf:79:34:6e:56:24:4c:35:74:dc:f0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 19 11:56:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a4b5f1256657ec93b25f15ed4a381fdece922be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:8a:a8:20:2d:df:7a:40:67:82:a8:72:4d:
39:99:56:8b:51:db:0e:1d:b1:02:db:1c:7d:ef:8f:
dd:42:9f:22:32:3b:0c:20:a0:f3:e9:e6:40:2c:da:
ef:cc:cf:72:c4:b4:95:7a:72:68:e1:9f:e7:e3:04:
fa:be:df:be:ef:39:dd:d0:44:73:c8:82:11:d1:89:
ac:79:17:ef:b1:79:88:c0:2c:70:25:10:eb:d7:0a:
ad:79:aa:c1:51:5b:c1:b5:9d:10:cf:f7:b5:9a:86:
16:40:00:97:e4:e7:fa:22:d8:16:8a:97:94:73:6f:
8e:b3:0e:73:e7:f6:c3:bb:a6:bf:1b:71:12:a5:e8:
3b:2d:3e:a9:46:51:67:df:8d:f9:4f:9e:9e:e4:68:
12:10:11:28:3f:32:6e:75:f6:49:c4:54:f1:0a:88:
81:33:f6:1a:6a:a5:6e:94:f0:bd:77:9c:51:f1:2d:
03:79:11:7f:87:ee:a6:af:29:23:b9:26:47:f0:de:
de:c8:3e:f6:74:40:58:fb:4d:a6:d2:f2:7e:f8:54:
3f:47:b1:d5:d3:25:1d:36:92:7f:e0:51:89:b8:2e:
49:38:3e:db:f9:3f:1f:d5:7f:d1:70:ce:ad:cf:2d:
a3:e3:1e:90:fe:08:60:31:27:4a:1b:68:b1:0c:7f:
64:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B5:F1:25:66:57:EC:93:B2:5F:15:ED:4A:38:1F:DE:CE:92:2B:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/pLXxJWZX7JOyXxXtSjgf3s6SK-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.0.0/24
77.90.2.0/24
77.90.8.0/24
77.90.13.0/24
77.90.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:82:4f:07:d6:74:43:95:4b:65:ad:70:4f:b0:4c:9a:b2:92:
5d:8e:06:16:39:50:43:13:8b:85:e0:f8:1e:bc:0e:04:33:a1:
4b:1d:bd:fd:39:5a:30:be:78:9b:70:87:d7:b8:1b:9f:8a:1b:
d5:e3:6e:94:cd:16:6b:c0:eb:56:69:ed:8d:db:21:08:8d:50:
9f:5b:c3:06:21:89:78:25:d7:fb:8b:9c:ea:17:5f:85:8c:d1:
fd:b5:27:99:e4:e1:7b:0c:6d:9b:0b:81:32:17:36:c2:4f:3e:
8f:2d:71:10:b9:dd:ab:75:0f:4c:e0:dc:09:6c:ef:68:65:24:
cd:c7:9d:93:80:a8:d7:96:cd:81:c2:85:60:0e:bb:ca:0b:21:
e0:14:97:bd:ea:40:2b:f2:0e:d3:8c:be:a8:9e:ca:f8:9d:7b:
72:74:f8:f1:82:9a:15:9b:fe:47:83:ac:30:43:60:4f:63:3e:
08:7a:c7:c7:00:50:c0:39:f5:70:ce:1d:d1:f9:e5:e5:c4:73:
c0:de:7c:fe:44:9b:fc:49:cf:17:f4:cb:f1:e1:81:72:02:c4:
20:4f:58:65:16:50:11:5d:ac:61:31:e1:69:76:54:9b:b2:1d:
59:46:5c:58:12:45:09:26:a2:a7:7a:65:af:b0:d1:d3:dd:ef:
13:45:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 17:54:14 2024 by rpki-client on console-fra.rpki-client.org