Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wKBPwWKlVWppmNrI9UCmyTizw4w.roa
File: wKBPwWKlVWppmNrI9UCmyTizw4w.roa (raw, json)
Hash identifier: ahPcHm6GLgScRNQrWWfDNEKB4BnkvYqWu91td8f8n1E=
Subject key identifier: C0:A0:4F:C1:62:A5:55:6A:69:98:DA:C8:F5:40:A6:C9:38:B3:C3:8C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191D093A69D63C8C605B96D254B15266760
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wKBPwWKlVWppmNrI9UCmyTizw4w.roa
Signing time: Sun 08 Sep 2024 07:40:22 +0000
ROA not before: Sun 08 Sep 2024 07:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31025
IP address blocks: 77.90.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 12:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:93:a6:9d:63:c8:c6:05:b9:6d:25:4b:15:26:67:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 07:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0a04fc162a5556a6998dac8f540a6c938b3c38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:77:87:66:31:43:fa:29:29:02:55:92:8f:74:
b0:37:5e:ce:82:f5:e0:8a:91:2f:f0:83:87:ec:df:
1c:8c:a2:a8:f1:be:90:7c:7d:2c:5f:46:6d:f2:8c:
15:65:40:6d:3a:69:d9:6d:1e:c9:f4:59:05:c9:9b:
b3:23:72:5e:97:89:ad:96:20:0f:db:2c:6f:ef:d3:
af:95:41:ca:99:31:18:b5:d6:b1:9c:cd:59:df:69:
96:00:c0:40:c1:f7:ff:e7:40:40:88:f4:89:30:df:
3e:d3:fe:c1:b2:44:2a:4b:51:77:9f:0e:c0:0e:38:
b2:72:9e:5e:78:df:42:74:e8:55:b4:8c:34:8a:b6:
ca:80:b9:dd:69:4f:9c:a2:0a:ed:f0:a2:24:47:3e:
77:9c:29:5d:64:97:53:3c:57:02:27:a6:e7:1e:2e:
94:8c:9c:2e:2a:14:7f:ee:61:5c:1d:4d:6d:0a:53:
9f:f1:5a:c0:74:0b:20:1e:c0:d1:5e:af:32:fe:d1:
69:a7:47:f9:6c:67:09:9a:05:53:a7:19:79:bf:c1:
9d:1f:c6:e2:69:e8:18:f5:0c:78:88:f1:e5:ef:39:
0b:4b:d7:74:70:31:5f:02:65:35:c9:47:f1:ed:ad:
4c:34:d5:aa:17:15:64:2f:2d:0a:ab:ac:23:f8:3a:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:4F:C1:62:A5:55:6A:69:98:DA:C8:F5:40:A6:C9:38:B3:C3:8C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/wKBPwWKlVWppmNrI9UCmyTizw4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:9f:cc:65:01:3a:54:2f:db:6f:05:21:7a:b4:ba:12:c4:57:
1e:64:f2:d4:af:1c:ee:4d:6a:78:5f:e5:0c:5d:37:87:f1:9e:
53:58:fb:71:0b:ac:d7:9b:63:6b:39:a2:e7:32:f9:73:7d:b8:
4f:3b:9b:4c:6d:39:0e:97:85:7f:46:c0:3d:08:19:ff:9c:84:
21:bf:fe:7f:34:ec:01:e2:af:5d:f8:dc:7c:5b:53:a6:e9:bf:
d8:5a:3f:90:f4:b2:dc:6f:c8:c8:c6:bb:9a:51:82:7a:55:c7:
1a:db:ac:c9:91:c7:77:f8:b6:1a:6b:78:64:de:32:dd:b6:50:
9b:d1:e1:a1:ff:af:f0:5c:0c:a9:29:38:d9:d2:05:d8:1a:67:
55:0b:3d:6a:35:86:6b:ab:e8:81:f7:1e:75:3c:cc:75:c4:16:
55:d4:e4:fa:2b:6f:c7:2c:73:58:c2:d6:00:a0:78:fa:90:70:
d6:20:9f:dc:58:36:8d:73:bc:21:07:ea:79:a5:28:a9:cf:96:
73:b6:ce:79:96:ca:52:77:85:7c:e7:01:dd:4e:44:cf:41:d3:
aa:a1:45:37:bb:81:24:b2:02:a4:e5:da:99:32:8c:30:da:99:
50:20:2b:59:b1:8d:c7:58:1d:21:7e:c1:3e:61:73:00:5f:fa:
73:16:34:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 15:05:54 2024 by rpki-client on console-fra.rpki-client.org