Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rQ8PRPmZLtKFO-aUPMhchoFPLiQ.roa
File: rQ8PRPmZLtKFO-aUPMhchoFPLiQ.roa (raw, json)
Hash identifier: bijJ3GlQCMDKCdWgaHzYtPKJHArY3DnceVjMoBZZwWY=
Subject key identifier: AD:0F:0F:44:F9:99:2E:D2:85:3B:E6:94:3C:C8:5C:86:81:4F:2E:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190F95AEFDD6502A02D96F58331E775CBBE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rQ8PRPmZLtKFO-aUPMhchoFPLiQ.roa
Signing time: Sun 28 Jul 2024 12:40:04 +0000
ROA not before: Sun 28 Jul 2024 12:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51396
IP address blocks: 77.90.30.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Aug 2024 14:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f9:5a:ef:dd:65:02:a0:2d:96:f5:83:31:e7:75:cb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 28 12:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad0f0f44f9992ed2853be6943cc85c86814f2e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:c2:1e:19:b1:53:c4:73:f7:84:ce:fc:20:
9a:26:f9:1f:2b:31:51:c3:c5:73:15:a9:84:8f:0f:
98:d6:32:cf:1d:c7:2d:23:e5:b0:86:e1:8d:ad:69:
16:de:12:a3:6b:05:64:2c:8b:89:0c:e6:23:3e:68:
d3:47:fd:20:b9:1d:45:ce:45:ca:c5:ee:98:1e:ec:
fa:e7:40:7c:79:b8:e0:c9:36:e1:b6:0e:39:a2:80:
27:3c:b8:21:75:5e:3a:64:74:ef:48:10:6b:38:50:
15:64:a6:ba:58:5f:2e:13:b2:bc:12:b6:80:59:d2:
06:35:f4:31:b9:2a:0f:52:09:c2:38:b0:2c:81:6d:
d4:7c:c5:a3:5c:15:b4:e7:3a:4b:e7:3e:76:05:ab:
6b:48:e4:9e:b4:0d:3a:dc:46:60:90:6c:4a:3e:d1:
d2:b4:0e:73:5f:06:a4:4e:df:d1:0f:f0:d5:19:66:
ac:f9:ef:ea:20:0f:dd:de:92:00:fe:28:4c:a4:80:
2e:7e:81:27:fb:d1:f0:f9:8f:b0:0a:2f:89:d2:80:
46:7d:91:54:43:5c:64:67:81:f0:17:ae:b5:1c:96:
91:4a:b7:9b:35:0e:52:bc:ca:e2:70:e5:94:37:2a:
c0:9c:dd:9a:2b:1f:85:a6:31:fc:5a:a4:c2:b0:5c:
75:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0F:0F:44:F9:99:2E:D2:85:3B:E6:94:3C:C8:5C:86:81:4F:2E:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rQ8PRPmZLtKFO-aUPMhchoFPLiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
77.90.47.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c8:3d:6a:0f:79:67:7c:04:90:14:cd:b5:48:86:eb:8c:c3:
4b:3d:09:95:d6:d2:cf:9e:34:df:90:ce:3d:f7:d9:7e:ab:b9:
70:b7:4b:0b:af:c9:a3:96:ef:e8:74:10:3f:ca:62:88:ab:59:
4d:27:c1:2c:d0:26:ac:4e:7f:89:a8:f3:a6:6c:05:af:fd:70:
88:4c:c2:c6:ae:66:34:fc:4f:1d:b7:0b:5d:b6:83:28:16:f2:
36:f0:b3:21:91:60:09:e2:13:2a:eb:2c:fc:74:fe:3d:a4:32:
c8:d2:2a:ed:cf:04:8c:ce:cd:50:19:46:f7:76:37:51:93:63:
1f:76:27:06:58:51:5b:88:a7:a2:8b:67:e0:b5:26:c8:96:1f:
7d:bd:f3:54:e8:20:b3:a6:f8:66:f6:c8:9c:9d:e4:cf:2a:af:
86:db:c9:f8:14:f5:61:0e:53:20:19:59:c4:75:4a:de:51:74:
5e:95:c3:c1:1b:60:03:f0:2d:40:49:0a:fc:0c:81:d4:f1:11:
d9:a3:ce:1d:0c:50:f4:6b:6f:08:d2:2a:d6:63:d5:66:5e:96:
1d:84:b1:6b:59:60:52:89:27:56:9d:e3:c8:6b:df:97:ee:66:
fe:49:d5:d3:73:01:23:8b:37:e0:35:d2:e6:5d:0d:c8:26:e3:
54:c0:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 2 17:51:18 2024 by rpki-client on console-ams.rpki-client.org