Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rTuwVTa9sqQ0cuTHk_tXTtB20G4.roa
File: rTuwVTa9sqQ0cuTHk_tXTtB20G4.roa (raw, json)
Hash identifier: U6I9CcAanw0AFzc47pLletl6xmOf3boq+Mg8iAnAYxU=
Subject key identifier: AD:3B:B0:55:36:BD:B2:A4:34:72:E4:C7:93:FB:57:4E:D0:76:D0:6E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01923F01B3A99433FE2C82F39ED648518300
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rTuwVTa9sqQ0cuTHk_tXTtB20G4.roa
Signing time: Sun 29 Sep 2024 18:18:49 +0000
ROA not before: Sun 29 Sep 2024 18:18:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 5.83.152.0/24 maxlen: 24
77.90.12.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 04:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3f:01:b3:a9:94:33:fe:2c:82:f3:9e:d6:48:51:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 29 18:18:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad3bb05536bdb2a43472e4c793fb574ed076d06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:30:84:6a:12:db:f1:50:ad:48:19:07:c5:
72:87:e0:e2:a7:b0:50:33:39:c5:5f:eb:2d:cb:28:
df:af:ea:3f:98:bb:63:1b:3f:90:dc:b3:07:21:53:
4e:c1:5b:f8:9f:93:c1:fd:99:37:10:c8:e7:1f:30:
59:9e:1a:ab:13:aa:f7:f5:9d:03:e4:c4:58:53:fb:
cf:dc:dd:e3:39:0b:8e:88:21:37:87:9f:cf:8f:b0:
13:9c:7a:39:4c:9a:75:6e:76:ab:e1:b7:2d:30:1b:
aa:21:e9:5c:cb:cc:b1:81:f8:bf:ee:33:16:94:4a:
80:d0:00:73:0b:61:cc:2e:4a:1e:3d:9d:24:1f:5d:
5b:c2:09:b8:80:31:78:f9:20:3f:b8:c5:37:33:b2:
41:0f:9d:a8:a8:fb:b7:ea:91:7c:23:fa:a3:bf:14:
81:67:dc:15:4b:ae:cd:a2:41:d3:50:0e:06:e7:df:
97:0e:0c:4e:36:fd:e7:9d:af:c8:2a:2b:47:43:d1:
38:f7:2a:c0:d3:a3:2a:8d:e0:3a:45:9f:91:ad:66:
38:b8:5d:58:c4:1d:83:59:f8:ae:cd:4d:a1:93:42:
c0:61:14:19:7c:6e:84:9b:bb:46:04:a8:55:9b:16:
a2:89:8c:f8:8e:e9:9d:cf:23:56:9b:ba:3a:7f:cd:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3B:B0:55:36:BD:B2:A4:34:72:E4:C7:93:FB:57:4E:D0:76:D0:6E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rTuwVTa9sqQ0cuTHk_tXTtB20G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.152.0/24
77.90.12.0/24
77.90.22.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:7d:be:01:42:7b:40:ea:95:56:66:a1:58:c0:ab:17:90:b9:
43:50:7a:8c:ea:fd:39:8d:e8:9a:65:c6:a1:11:51:fe:2b:ab:
97:65:71:6a:75:e6:64:0b:c9:b3:e9:0c:68:31:f2:2e:25:26:
dd:92:80:44:76:57:ee:08:a6:94:16:46:48:db:05:29:6e:23:
c5:61:15:28:4a:1b:01:cf:40:c5:e1:ec:1f:84:a6:ce:a6:42:
05:92:55:0e:55:4e:f2:64:76:7c:8f:91:55:f5:86:19:a8:a3:
54:8e:b8:af:e0:32:81:bd:44:0b:6d:cd:d9:8f:d2:ff:97:fc:
ff:7d:7c:c8:24:6b:ec:99:a6:a9:f2:55:a6:7a:f1:0b:42:b2:
fd:7d:cd:54:eb:56:8a:43:07:91:3d:4c:85:af:8b:1b:5c:3f:
28:2a:1e:60:c4:6e:b4:93:60:d5:b7:28:30:ec:0f:a7:f8:9b:
2c:ff:d0:7e:97:92:bc:93:dc:ce:e9:71:47:2c:f3:99:86:47:
45:65:e6:d0:bc:ce:cf:b1:b9:28:98:4b:6f:92:9a:b9:87:fd:
fb:82:3d:8e:23:70:32:81:f6:31:6d:01:f9:e3:85:87:a9:40:
36:98:d8:8d:b4:d6:30:c4:3f:39:2c:ce:ef:6f:52:69:a3:92:
12:b3:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 05:42:07 2024 by rpki-client on console-fra.rpki-client.org