Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6jBLuXggEvGPmLpXO0q4gIjwuM8.roa
File: 6jBLuXggEvGPmLpXO0q4gIjwuM8.roa (raw, json)
Hash identifier: W+ZVfGh5Nw54sWTBOy8LaH5psTRg3hwuN9EMXzEgfJo=
Subject key identifier: EA:30:4B:B9:78:20:12:F1:8F:98:BA:57:3B:4A:B8:80:88:F0:B8:CF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01927C1F8060B2B8252BAD8EF5E08DEB705A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6jBLuXggEvGPmLpXO0q4gIjwuM8.roa
Signing time: Fri 11 Oct 2024 15:08:12 +0000
ROA not before: Fri 11 Oct 2024 15:08:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 77.90.131.0/24 maxlen: 24
77.90.135.0/24 maxlen: 24
77.90.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:1f:80:60:b2:b8:25:2b:ad:8e:f5:e0:8d:eb:70:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 11 15:08:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea304bb9782012f18f98ba573b4ab88088f0b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:56:7b:47:b6:d7:4f:e4:99:12:e4:c6:56:
37:f9:f3:5e:e7:c3:39:99:31:16:63:12:2b:19:64:
f4:20:91:7c:e8:aa:a6:48:e1:cc:82:e2:82:64:9e:
57:f9:46:e0:fa:ab:1a:35:be:7c:3a:0b:5d:77:bd:
f0:42:37:e3:cd:1c:4c:23:62:b9:dd:7b:69:d6:02:
83:8a:e9:dd:2c:58:b0:08:ee:53:54:fb:43:95:67:
2c:2e:9f:51:e5:1f:b9:d9:c9:8f:1b:55:30:83:b1:
fd:59:3c:f5:3a:81:7b:12:06:95:37:02:0d:aa:2a:
69:92:88:29:c5:98:69:18:17:c4:2c:f8:12:f9:5e:
24:e0:10:f8:6d:1b:e4:8c:73:24:ea:3a:a4:0a:1c:
aa:eb:e3:ed:9f:66:e3:b8:b5:8b:d6:c1:0f:06:72:
52:ff:b6:17:51:b4:63:8c:81:93:6f:ba:24:a0:de:
f0:79:36:4f:90:df:52:d3:68:3d:db:84:de:74:c5:
77:6f:fd:7c:15:56:61:e7:37:08:bf:1c:7f:61:ae:
5b:c0:e9:9a:e7:4a:63:4f:f0:01:99:ce:7b:17:ca:
9c:47:df:d4:3d:a2:a6:cb:23:1a:6d:43:a2:bc:b3:
71:78:ce:de:2f:b2:d0:b5:59:73:35:da:1b:9e:3f:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:4B:B9:78:20:12:F1:8F:98:BA:57:3B:4A:B8:80:88:F0:B8:CF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/6jBLuXggEvGPmLpXO0q4gIjwuM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.131.0/24
77.90.135.0/24
77.90.141.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ef:e3:71:65:2c:02:0c:9c:ae:31:c7:75:3a:93:df:64:9d:
44:3a:ed:f5:7f:eb:a9:4f:65:a2:34:c9:e6:8a:81:2b:9f:6a:
c0:e6:8b:4d:b0:da:ea:27:70:0c:40:ba:83:a7:30:b3:9f:0e:
d2:3c:04:85:47:27:d5:5a:7e:35:eb:11:98:e6:4a:d2:66:eb:
33:36:fc:a4:02:cb:aa:bd:9d:7a:6a:cf:8d:32:af:f5:92:0b:
54:66:3a:cc:d9:45:52:8a:1e:da:9f:97:37:ba:09:e1:2b:72:
d3:1e:38:5c:29:4f:21:d9:ac:16:0e:78:4e:d6:d9:cf:34:a9:
3c:57:6f:f3:15:c3:92:3f:28:46:9e:4a:15:72:ec:13:3b:da:
2d:a2:34:d5:f2:03:1f:2b:7f:dd:cf:97:c0:d2:df:9c:cf:80:
7f:5f:b4:03:d6:2c:5d:c1:88:ec:f8:cf:f1:0f:93:d7:c1:05:
a6:c3:92:c2:be:90:d3:b8:75:1c:89:60:62:ad:c9:e0:ee:c1:
5d:58:3f:27:74:6e:1b:4f:13:8c:0f:be:c5:7b:b3:9f:14:89:
36:8a:ee:fb:c3:92:24:de:fd:3a:92:4d:67:91:52:33:aa:d2:
97:ae:54:a0:19:9d:e6:b2:b8:13:20:dd:44:3a:38:ac:fa:5e:
fd:fc:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 14:06:16 2024 by rpki-client on console-ams.rpki-client.org