Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xi5IHdA1e9Iz3rZvjLvu_-NuVJg.roa
File: xi5IHdA1e9Iz3rZvjLvu_-NuVJg.roa (raw, json)
Hash identifier: uuFaAh0bFk0bE2/sMpEAWByWv3q/gUJuC0rqjJ1QwQk=
Subject key identifier: C6:2E:48:1D:D0:35:7B:D2:33:DE:B6:6F:8C:BB:EE:FF:E3:6E:54:98
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018C2B461463C31DB768C641588A66631FA9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xi5IHdA1e9Iz3rZvjLvu_-NuVJg.roa
Signing time: Sat 02 Dec 2023 16:04:22 +0000
ROA not before: Sat 02 Dec 2023 16:04:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212685
IP address blocks: 77.90.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2b:46:14:63:c3:1d:b7:68:c6:41:58:8a:66:63:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 2 16:04:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c62e481dd0357bd233deb66f8cbbeeffe36e5498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b1:5f:7a:98:0c:4f:9c:ad:c3:a4:a1:ae:81:
1f:bf:63:62:cf:28:92:ae:8c:fd:76:7e:50:1e:fe:
15:c4:dc:3a:c8:ef:98:cb:9b:14:57:ea:3e:b9:ba:
2c:3c:ad:a3:7b:2f:cb:e9:1f:9a:69:6b:c2:55:e4:
02:c9:a5:f1:db:04:0a:3b:9c:83:d5:f2:37:29:6d:
a5:0c:2c:02:e7:b0:37:2e:60:93:d2:88:f0:12:90:
e4:51:4c:9c:29:7f:ec:68:7e:14:49:4a:3e:ae:63:
72:79:7d:05:35:9d:10:e4:fc:ff:2e:62:91:65:c3:
80:a5:96:11:51:23:5d:c3:0e:85:a3:6d:65:a4:7c:
b5:28:ac:a3:f0:2d:3e:9c:5b:06:9c:e5:68:a0:6d:
0c:9d:01:5a:06:a4:90:b0:e8:02:5f:12:a7:92:e3:
2c:12:11:18:0e:67:52:f3:a8:a7:c5:ce:2e:7b:55:
1d:7d:bd:35:01:0d:bf:65:1b:07:f8:36:28:91:a1:
52:97:3b:66:74:73:74:2c:27:a7:74:76:10:0c:d5:
66:76:d9:c2:7c:65:e0:18:b3:6b:7a:ba:37:53:f7:
cf:63:27:68:94:49:d8:9d:8c:bd:68:a3:06:7e:2e:
9f:ce:ff:45:33:c4:23:b7:7f:14:ac:eb:45:a7:c6:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2E:48:1D:D0:35:7B:D2:33:DE:B6:6F:8C:BB:EE:FF:E3:6E:54:98
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/xi5IHdA1e9Iz3rZvjLvu_-NuVJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:15:c4:26:e2:32:4b:82:40:20:c9:69:b9:92:88:bf:37:8f:
3c:1e:aa:79:b5:0b:ff:d1:c9:8d:0e:cc:a4:1e:34:80:29:ea:
b1:a7:5b:71:cc:bf:14:e9:af:60:71:1f:5d:27:56:62:10:0d:
ea:76:9d:64:84:1b:80:1d:49:e5:b9:e4:3a:2f:a0:a9:55:cb:
63:eb:50:b8:5b:07:ac:b0:db:e8:af:91:e0:b7:68:f5:a8:3f:
3a:34:0e:a6:e1:d0:06:1c:12:d8:dc:66:9d:aa:27:37:78:d4:
16:ab:0b:14:3c:c1:7b:0c:c4:24:d4:d0:0a:85:70:1e:73:39:
a2:73:88:e1:97:06:55:25:c2:a7:0f:22:e6:6f:85:68:00:e0:
0d:4a:97:21:7a:fc:4c:02:ed:c0:86:5c:04:aa:22:e7:69:e9:
15:a5:84:e4:96:f7:ba:ea:77:af:ce:81:34:cf:3c:38:86:89:
66:46:22:22:5d:7a:b7:5a:0b:81:cb:ed:37:df:01:a0:9b:91:
37:f7:e9:18:9b:92:c5:3d:d5:5f:3c:19:36:2b:16:c3:18:84:
92:2c:29:85:cf:45:61:14:fa:e8:59:0c:50:ca:4e:37:93:a9:
2d:b5:12:dc:ca:5f:f7:c1:53:9e:24:b4:8e:b6:5e:e9:26:af:
6c:a9:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org