Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uufmi3n0kS29MHwESQq4VVK8phQ.roa
File: uufmi3n0kS29MHwESQq4VVK8phQ.roa (raw, json)
Hash identifier: 5nzzRwDVwWPYLQlUGzZwH2VJxU6PD6ljJqJ4K7/InEk=
Subject key identifier: BA:E7:E6:8B:79:F4:91:2D:BD:30:7C:04:49:0A:B8:55:52:BC:A6:14
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01927BAEE4695A637E80ECB340A633B6A82A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uufmi3n0kS29MHwESQq4VVK8phQ.roa
Signing time: Fri 11 Oct 2024 13:05:12 +0000
ROA not before: Fri 11 Oct 2024 13:05:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215365
IP address blocks: 77.90.30.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 15:55:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7b:ae:e4:69:5a:63:7e:80:ec:b3:40:a6:33:b6:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 11 13:05:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bae7e68b79f4912dbd307c04490ab85552bca614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:1f:d9:5c:75:63:6f:50:c8:8c:86:37:db:
a0:48:81:b4:8a:5f:a3:81:a6:37:0e:3b:16:da:07:
91:7f:d5:de:95:17:96:a5:e7:f3:0d:72:e1:ee:03:
5d:81:4c:03:51:ac:98:2d:e1:18:80:7c:79:88:1c:
e5:36:79:55:84:91:1f:12:4c:8f:24:73:61:48:91:
58:0e:23:f9:67:89:8c:92:7d:b1:7e:bf:5f:2b:f3:
7c:aa:6a:d6:5f:42:02:1c:fc:07:42:03:f6:31:e2:
f4:74:b6:d5:02:8f:cb:d2:fb:81:e2:96:a4:ee:50:
62:8a:b3:43:99:5a:51:26:e0:bf:a2:a6:15:50:d9:
b9:28:33:26:df:de:28:f2:58:16:4f:d4:78:09:bc:
b2:f7:ae:c9:f3:eb:26:1e:f6:ae:5b:c3:9f:2a:ba:
77:99:0e:d1:87:59:37:5d:33:04:c2:45:a7:42:a9:
63:a0:28:f3:f5:f9:a6:cf:fc:cc:6a:3e:3d:2e:e2:
47:a7:81:66:7d:b1:aa:06:aa:81:46:ed:a0:33:fa:
4f:d7:20:a4:4e:6e:ed:ac:68:6b:16:0a:0f:0a:19:
fd:08:30:b3:8e:01:3e:be:e3:9c:2a:0e:52:79:e1:
f5:47:b3:c1:86:3d:7a:52:17:a3:d7:2a:08:7b:ee:
0a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:E6:8B:79:F4:91:2D:BD:30:7C:04:49:0A:B8:55:52:BC:A6:14
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uufmi3n0kS29MHwESQq4VVK8phQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
77.90.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f0:c9:b7:4d:bf:6f:00:fc:4e:2a:a6:44:b4:0f:a1:58:4c:
4f:a2:57:75:6a:78:ff:27:9b:e4:71:f6:a6:c9:ea:f5:e2:f3:
35:28:f1:5f:b5:e9:79:76:c5:d7:61:9d:b4:72:99:0e:53:1a:
d2:82:c6:1b:19:08:ee:33:43:21:39:55:dc:de:61:21:6b:6d:
dc:20:61:fd:94:6e:c4:66:b0:30:6f:e7:f1:db:8d:b0:e6:9e:
45:dc:60:7b:71:1c:14:b5:05:91:f7:42:10:16:bd:ab:27:03:
71:d2:eb:cc:c6:24:3f:58:3b:e1:3b:72:03:0f:ba:41:af:cc:
c3:92:b4:55:0a:37:70:82:4e:5d:af:0b:7d:7c:45:10:f4:50:
e3:2e:87:d0:04:52:3a:49:ec:eb:8c:4c:9a:c2:48:f6:5c:e9:
b7:c5:6d:29:96:25:9d:ad:6b:8e:d3:0a:1a:89:4b:60:ed:9f:
f1:de:05:fd:64:3e:8e:15:cd:0f:2b:5a:24:d9:0c:93:26:a2:
4b:13:5f:0c:e5:8a:fa:d6:05:02:40:6c:ae:07:4b:62:88:0a:
4e:6b:c8:fa:97:80:67:6c:6d:76:8a:9c:cf:3c:d1:e8:2e:f6:
b2:0e:ef:c6:8b:71:db:5d:27:70:23:fe:71:09:91:e3:3d:19:
2a:02:47:b4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZJ7ruRpWmN+gOyzQKYztqgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDExMTMwNTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYWU3ZTY4Yjc5ZjQ5MTJkYmQzMDdjMDQ0OTBhYjg1NTUyYmNhNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEEf2Vx1Y29QyIyGN9ugSIG0il+j
gaY3DjsW2geRf9XelReWpefzDXLh7gNdgUwDUayYLeEYgHx5iBzlNnlVhJEfEkyP
JHNhSJFYDiP5Z4mMkn2xfr9fK/N8qmrWX0ICHPwHQgP2MeL0dLbVAo/L0vuB4pak
7lBiirNDmVpRJuC/oqYVUNm5KDMm394o8lgWT9R4Cbyy967J8+smHvauW8OfKrp3
mQ7Rh1k3XTMEwkWnQqljoCjz9fmmz/zMaj49LuJHp4FmfbGqBqqBRu2gM/pP1yCk
Tm7trGhrFgoPChn9CDCzjgE+vuOcKg5SeeH1R7PBhj16Uhej1yoIe+4KgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLrn5ot59JEtvTB8BEkKuFVSvKYUMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdXVmbWkzbjBrUzI5TUh3RVNRcTRWVks4cGhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVoeAwQA
TVo8MA0GCSqGSIb3DQEBCwUAA4IBAQDK8Mm3Tb9vAPxOKqZEtA+hWExPold1anj/
J5vkcfamyer14vM1KPFftel5dsXXYZ20cpkOUxrSgsYbGQjuM0MhOVXc3mEha23c
IGH9lG7EZrAwb+fx242w5p5F3GB7cRwUtQWR90IQFr2rJwNx0uvMxiQ/WDvhO3ID
D7pBr8zDkrRVCjdwgk5drwt9fEUQ9FDjLofQBFI6SezrjEyawkj2XOm3xW0pliWd
rWuO0woaiUtg7Z/x3gX9ZD6OFc0PK1ok2QyTJqJLE18M5Yr61gUCQGyuB0tiiApO
a8j6l4BnbG12ipzPPNHoLvayDu/Gi3HbXSdwI/5xCZHjPRkqAke0
-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org