Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uGp0t_uqt6mNtwuvWycK97T0vNQ.roa
File: uGp0t_uqt6mNtwuvWycK97T0vNQ.roa (raw, json)
Hash identifier: 6Ch9c+RUI5iYQ/8fwa69mMDVT7Yl/VSwRr2jNAeJJs8=
Subject key identifier: B8:6A:74:B7:FB:AA:B7:A9:8D:B7:0B:AF:5B:27:0A:F7:B4:F4:BC:D4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192ADDDA65850326C34B97C23707748656E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uGp0t_uqt6mNtwuvWycK97T0vNQ.roa
Signing time: Mon 21 Oct 2024 06:57:17 +0000
ROA not before: Mon 21 Oct 2024 06:57:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211301
IP address blocks: 77.90.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 05:09:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:dd:a6:58:50:32:6c:34:b9:7c:23:70:77:48:65:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 21 06:57:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b86a74b7fbaab7a98db70baf5b270af7b4f4bcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:42:be:25:b6:62:2b:6f:22:a0:c8:fb:1e:1e:
ef:6d:73:4a:8b:56:7e:dc:c3:b5:8e:fe:4b:91:e2:
32:cf:96:f9:0c:95:9d:48:46:57:d0:52:cb:35:73:
94:36:f5:d6:fc:ef:7b:7d:2b:9c:47:fb:f4:3e:bb:
d2:26:44:e9:5b:b8:cc:c3:1c:8c:6e:a8:dc:43:e1:
6e:4e:0c:87:4e:20:e6:67:51:f3:fe:30:4c:49:72:
38:47:a7:6d:8c:bb:31:2a:5a:6d:ca:93:59:1a:05:
d5:47:87:5e:7e:b6:0f:84:e6:fd:1d:f3:c5:49:95:
6e:37:fe:5e:00:f1:61:ef:04:63:70:6c:42:8e:f4:
7d:6b:cc:35:29:a5:33:1d:a7:d2:cb:7f:b1:0b:d2:
b8:11:67:09:a8:bd:6c:c2:93:79:c7:52:fc:b5:30:
08:1f:05:de:dd:6f:19:e3:e1:bc:dc:fa:2b:fe:d4:
e6:64:b7:3d:a4:8d:74:ae:00:73:19:aa:e4:0d:67:
22:a5:04:a7:7e:2b:b6:9a:d6:d2:bc:3b:cd:8a:6f:
a4:53:19:7e:91:46:6d:54:87:f4:47:95:4c:53:cf:
55:aa:28:29:9a:80:51:6e:70:33:63:69:37:df:d8:
e0:23:6f:dc:89:cf:d2:a6:20:30:56:1f:3b:e5:09:
0d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:74:B7:FB:AA:B7:A9:8D:B7:0B:AF:5B:27:0A:F7:B4:F4:BC:D4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uGp0t_uqt6mNtwuvWycK97T0vNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.57.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c0:32:4b:de:42:47:4f:1f:cc:31:0f:08:0f:9d:cc:35:d1:
0b:c7:86:4d:47:60:ae:f7:e1:93:90:b8:69:48:13:23:b9:fc:
ae:df:f1:5f:c3:ff:32:ba:0e:cb:83:b3:2b:8b:47:cd:03:cc:
7b:6a:52:12:11:b2:7d:28:3c:02:1c:33:d6:16:12:08:ff:e3:
b1:03:c7:99:5f:d2:eb:77:c8:36:94:75:e0:43:ce:0e:3d:94:
78:d7:6b:ce:47:b3:e7:3c:1e:d5:03:d0:22:82:c0:7e:9c:93:
4e:11:48:07:39:28:16:af:76:55:7b:12:14:c4:fa:dd:bc:2e:
63:48:61:0d:b7:96:2b:c6:de:07:de:76:88:cf:76:d9:1d:f9:
c6:08:e8:19:99:c7:c5:70:ea:ba:66:8c:25:83:68:6f:81:4d:
3a:5f:fc:f6:9a:b2:98:d6:66:f1:33:cf:47:73:b9:68:e2:7d:
30:ba:c7:8c:20:56:a3:73:87:97:11:27:3d:18:c1:51:43:e5:
0c:c1:ae:ec:85:c6:8e:dd:80:06:05:98:56:af:a1:de:d7:5e:
b4:a6:1e:d0:18:a7:dd:e3:d2:a6:e7:b3:c0:25:90:18:f7:5d:
c9:93:22:b2:08:9a:27:90:1b:40:95:e8:32:6b:32:40:27:47:
e3:df:5c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:41 2024 by rpki-client on console-ams.rpki-client.org