Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yxVmt46wcguMtY_mrG4beR63oes.roa
File: yxVmt46wcguMtY_mrG4beR63oes.roa (raw, json)
Hash identifier: nW+pAZdb4gdPS0RnVpEd+xxi7cW4sA73EK3bRRH5R6s=
Subject key identifier: CB:15:66:B7:8E:B0:72:0B:8C:B5:8F:E6:AC:6E:1B:79:1E:B7:A1:EB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192C2E5DC798821838A52040B8A157F4480
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yxVmt46wcguMtY_mrG4beR63oes.roa
Signing time: Fri 25 Oct 2024 08:58:16 +0000
ROA not before: Fri 25 Oct 2024 08:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58212
IP address blocks: 5.83.150.0/24 maxlen: 24
77.90.7.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.39.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 03:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:e5:dc:79:88:21:83:8a:52:04:0b:8a:15:7f:44:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 08:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1566b78eb0720b8cb58fe6ac6e1b791eb7a1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:db:94:2b:e7:77:e0:31:f5:52:1c:2f:c1:
2d:71:cf:25:21:a1:3a:77:4b:7c:cd:a2:00:ce:6f:
28:20:56:84:4f:a6:a1:1c:95:bb:14:5e:65:b6:25:
31:aa:62:66:17:9f:5e:6e:76:f7:82:cb:59:77:7e:
5d:2f:61:71:d2:d6:1d:e3:58:b5:6b:fd:eb:11:c3:
6b:84:1b:b3:b1:93:27:51:60:05:b5:a9:37:bf:02:
42:d0:6c:f0:40:e5:c7:11:c6:00:b5:a2:5b:e4:cc:
b7:7d:e3:e1:a7:95:a0:69:08:02:77:6b:b4:0e:4f:
d8:99:85:90:a5:2f:a3:70:52:95:d5:08:b1:e7:a7:
df:ff:b5:67:bd:c5:2c:a5:56:5d:1f:0b:28:bb:26:
ce:3a:c6:11:ee:8d:9f:c5:91:0c:c0:a8:a8:e2:48:
4c:96:ff:9b:7e:ca:25:f2:c6:3c:48:14:b4:7e:c6:
45:cf:15:71:0f:eb:7c:b5:4e:66:44:24:0a:93:e4:
fe:12:27:16:96:84:70:e8:a4:8c:25:29:ee:bd:10:
e0:0b:74:f2:9d:5e:89:59:dc:ff:81:cf:7e:fb:7f:
74:68:17:d3:d9:96:c5:52:5b:89:6b:02:dd:4a:0b:
bf:8e:30:07:99:4d:11:05:5c:bb:8e:97:76:d8:7d:
c7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:15:66:B7:8E:B0:72:0B:8C:B5:8F:E6:AC:6E:1B:79:1E:B7:A1:EB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/yxVmt46wcguMtY_mrG4beR63oes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.150.0/24
77.90.7.0/24
77.90.29.0/24
77.90.39.0/24
77.90.41.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:73:37:bd:8d:1b:aa:45:51:ce:68:2f:f6:ac:4f:a7:b0:63:
f5:14:65:82:66:4e:e8:ee:1b:55:e8:4f:dc:8f:47:5c:ac:4f:
44:7f:a1:e3:f2:99:22:7a:39:a4:a0:b1:3d:7a:95:68:e7:38:
15:cf:de:e4:58:db:64:60:99:84:c3:e7:d9:c5:33:22:5f:fe:
c7:a5:c9:0d:41:2c:36:8d:fe:30:4a:f7:4b:59:52:4c:50:fe:
87:55:51:60:c0:74:38:55:6b:e9:2c:ae:25:2d:0d:69:f3:29:
ae:35:a1:3c:cf:8e:13:fb:90:58:c8:09:d6:e8:5f:87:ed:69:
ec:93:12:08:5b:85:c3:98:75:58:56:70:f6:83:fc:34:33:c3:
92:45:28:c2:89:5c:86:3d:bd:8e:53:76:88:28:2b:29:8a:7c:
51:e7:2f:a9:ce:12:36:a1:c4:15:26:01:2b:65:33:62:63:72:
73:12:4e:bb:12:1c:d0:21:b1:2c:65:b4:05:b4:c5:62:b3:63:
40:2b:24:d6:00:a7:98:a5:b1:4a:d6:7e:f2:47:ee:cc:36:a0:
9c:8b:99:7e:2d:01:39:33:73:f7:48:2e:a4:19:c1:3c:ec:45:
5b:1f:be:17:ae:63:3c:ce:95:43:4a:30:2e:0a:8f:69:a3:f7:
22:a7:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 07:16:18 2024 by rpki-client on console-ams.rpki-client.org