Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yc7GPiYqxu9B8r9cwfZcdtESBJ8.roa
File: yc7GPiYqxu9B8r9cwfZcdtESBJ8.roa (raw, json)
Hash identifier: VHzFOO1KM6uII/JkhBYq0cwKgzt8z0vuXjJaIr3lu4I=
Subject key identifier: C9:CE:C6:3E:26:2A:C6:EF:41:F2:BF:5C:C1:F6:5C:76:D1:12:04:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018D8357F2DCB1C6EFB0F07AD291B681B31D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yc7GPiYqxu9B8r9cwfZcdtESBJ8.roa
Signing time: Wed 07 Feb 2024 11:33:15 +0000
ROA not before: Wed 07 Feb 2024 11:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 77.90.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Mar 2024 15:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:83:57:f2:dc:b1:c6:ef:b0:f0:7a:d2:91:b6:81:b3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 7 11:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9cec63e262ac6ef41f2bf5cc1f65c76d112049f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:03:18:3d:72:36:6c:12:54:9d:4b:5b:b2:
4b:0a:67:76:04:0f:e5:bd:b6:de:77:f4:fa:a8:9a:
d5:73:57:d3:06:68:74:36:99:28:46:87:6f:4b:c2:
8f:cf:33:00:b2:6c:b6:e0:b8:1c:fe:16:6b:f9:50:
2b:2a:18:33:8b:51:b8:2c:88:d9:50:58:59:b3:c4:
c0:6f:de:c3:0d:a1:69:68:e5:9f:46:5d:9b:ac:ea:
e6:5a:52:8b:a1:0a:77:bb:a9:70:07:c2:0a:11:dc:
cf:6d:59:42:50:9f:52:5b:56:f0:6f:e1:15:3a:81:
48:a0:87:1d:db:62:21:6c:85:24:bd:96:56:46:07:
52:24:5f:ff:d7:19:cb:58:f8:15:ad:ca:84:6e:15:
2c:47:94:60:a6:72:43:3d:db:83:fc:77:f7:11:fc:
36:b8:a0:7f:9c:34:c4:34:ad:1d:2a:ca:94:57:4d:
68:cc:a5:60:af:84:a3:7c:a9:59:89:4a:fd:e5:6a:
c1:f9:c3:ed:fa:79:05:01:e4:97:87:f0:c6:21:e1:
ef:7b:40:13:6f:99:35:1c:45:34:46:64:d6:f9:19:
d9:57:a0:f1:43:74:42:ce:42:ec:83:98:be:fb:e4:
47:99:6f:78:b1:83:b6:22:44:28:0c:1b:39:0f:e4:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CE:C6:3E:26:2A:C6:EF:41:F2:BF:5C:C1:F6:5C:76:D1:12:04:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yc7GPiYqxu9B8r9cwfZcdtESBJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.8.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:72:dd:d1:0e:d3:e6:82:0a:20:e1:48:48:ec:a1:01:58:7c:
8c:61:a2:33:ec:1d:88:78:95:0c:b9:31:de:ba:39:52:69:66:
cc:3e:be:4a:6f:56:77:18:0d:d8:dc:4b:0a:44:72:01:3a:05:
d4:03:94:11:99:05:8b:5d:79:76:8b:2a:aa:f6:9a:60:77:21:
a1:c8:22:43:cc:e3:d9:bb:b9:e1:20:0e:1f:31:2d:dc:22:91:
99:60:40:c8:e2:0f:95:a1:12:33:e9:3a:6e:a2:c1:fe:9c:94:
d5:f4:1b:ec:1d:a8:c4:76:10:f8:c0:fc:d2:14:68:af:1f:ca:
6b:96:e5:24:76:66:27:4b:42:44:68:36:18:06:0c:89:40:1d:
c6:b0:76:b5:7a:47:a9:fe:6a:43:e1:fd:d6:8a:7b:12:22:e2:
6f:62:13:fa:5f:d4:ec:6c:17:78:8d:fb:9e:f0:68:07:96:c4:
1b:bb:ea:72:3e:c3:0a:6b:d0:3d:ec:1e:d1:c5:67:59:c8:33:
26:f3:07:6e:9a:ff:9f:d6:23:51:1b:c9:ff:ce:a8:b4:d5:3b:
f2:f6:10:9a:93:9d:0a:dd:7e:18:d9:ad:37:90:3d:64:93:8b:
10:47:ff:d0:97:6d:5e:2a:b8:35:d7:9a:3a:59:0c:f5:84:99:
6a:21:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org