Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qTkdstbR_-yz0_BCJebnjJM4rec.roa
File: qTkdstbR_-yz0_BCJebnjJM4rec.roa (raw, json)
Hash identifier: iokgxgChDVRp6ocwWfbRg1mjE3uOcNPt3SmWdZWO4wQ=
Subject key identifier: A9:39:1D:B2:D6:D1:FF:EC:B3:D3:F0:42:25:E6:E7:8C:93:38:AD:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019347F97213B10AA35D6C9553B7CCFE0B55
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qTkdstbR_-yz0_BCJebnjJM4rec.roa
Signing time: Wed 20 Nov 2024 05:09:10 +0000
ROA not before: Wed 20 Nov 2024 05:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44592
IP address blocks: 77.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 10:44:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:47:f9:72:13:b1:0a:a3:5d:6c:95:53:b7:cc:fe:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 20 05:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9391db2d6d1ffecb3d3f04225e6e78c9338ade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:eb:6f:e9:92:85:ce:45:87:4b:75:d4:d8:
96:73:f8:dd:08:cc:5f:37:87:c3:1a:00:1b:0e:49:
fc:f5:4d:8e:d1:35:54:99:08:17:c9:3e:0a:20:40:
2b:4f:9e:c9:b9:a2:01:98:77:19:bd:9a:e6:46:9f:
2d:20:1b:a8:28:99:c5:be:ee:8f:39:04:0b:42:51:
96:a4:e1:a9:6b:5f:a7:16:96:b1:cf:a7:97:07:9d:
de:a2:9f:56:cd:a9:e9:c4:f0:c9:54:bd:b4:d3:3c:
cc:b3:a4:d4:84:a2:eb:5e:7d:4c:7f:0d:7c:a6:12:
9e:f8:a2:42:6b:9e:04:46:6a:28:ab:c6:8b:fa:62:
9f:2e:f3:a5:c0:76:89:75:48:fa:25:66:31:6f:4f:
6f:4d:b6:7a:35:02:97:27:91:90:0d:38:f3:47:34:
dd:ac:45:b8:41:b2:58:ca:15:9a:6e:31:8d:04:59:
f3:a4:1b:c2:99:d5:48:a6:ce:12:c0:70:43:24:b0:
44:a2:76:da:99:9e:bf:64:17:91:bf:72:4d:8d:c3:
3e:8f:b8:a2:9e:f0:11:13:d8:f5:7f:b5:8d:9f:c0:
a8:4a:22:ef:2f:cc:61:bd:9c:ed:44:66:c4:1a:70:
ca:fa:0c:4f:e3:ed:ce:72:08:75:0c:40:4f:1f:c1:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:39:1D:B2:D6:D1:FF:EC:B3:D3:F0:42:25:E6:E7:8C:93:38:AD:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qTkdstbR_-yz0_BCJebnjJM4rec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
51:95:e6:97:11:7c:51:08:8e:44:ab:f6:6a:d8:ca:dc:ba:f3:
89:f2:98:ea:a1:47:03:58:97:40:34:9c:c1:6b:40:cb:18:45:
68:1b:4e:16:7e:ad:81:70:18:5f:23:84:89:74:6b:ce:bb:07:
d6:57:d4:ed:0b:47:69:a5:4e:84:ce:03:a0:50:49:83:df:b0:
81:ff:d0:f4:4a:98:22:b7:5e:f5:b1:9c:28:57:e4:f9:c1:4c:
b2:39:28:86:3e:c8:12:df:cc:79:84:2b:8d:2f:e4:94:18:f7:
0d:e8:f1:5c:4c:6f:40:6e:ac:7a:22:aa:36:ec:d3:a7:e3:60:
0b:5b:c1:5a:91:2c:27:98:c7:3f:01:29:75:4d:d7:7b:8b:46:
fe:f5:86:d0:f6:8d:0e:6d:ac:7b:50:b6:96:72:19:df:01:7a:
a6:7d:3e:61:7d:49:d5:fb:fd:bc:28:c9:e7:9f:2d:f6:2a:1c:
9c:fa:26:89:92:77:8c:2e:33:f4:60:81:c9:b4:90:6a:f0:32:
7a:36:9c:aa:48:0e:02:c6:38:3b:dc:9d:ba:d1:83:59:c0:82:
13:67:c4:05:fc:bb:4b:ae:53:16:a0:87:62:c2:58:81:3f:c0:
cf:93:40:e1:8b:4c:35:39:66:ab:a1:05:be:11:05:7c:a7:8a:
9d:27:c5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 14:28:25 2024 by rpki-client on console-ams.rpki-client.org