Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9Wp4YSS0L_EvpF39EYHW22869JE.roa
File: 9Wp4YSS0L_EvpF39EYHW22869JE.roa (raw, json)
Hash identifier: xKUyY7Lqv5xec93iWCgoOl48D/Ff0ryrD9xGQbz6UDk=
Subject key identifier: F5:6A:78:61:24:B4:2F:F1:2F:A4:5D:FD:11:81:D6:DB:6F:3A:F4:91
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01856F825B439773EEFCC0B975AEA954BBD3
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9Wp4YSS0L_EvpF39EYHW22869JE.roa
Signing time: Sun 01 Jan 2023 22:44:52 +0000
ROA not before: Sun 01 Jan 2023 22:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 77.90.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:5b:43:97:73:ee:fc:c0:b9:75:ae:a9:54:bb:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 22:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f56a786124b42ff12fa45dfd1181d6db6f3af491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:46:82:bb:bf:f8:ef:04:9e:7d:31:5c:a5:
b8:fd:e7:47:0e:72:63:1c:b3:87:81:84:8a:6b:25:
3f:46:4a:7f:0e:e8:4f:57:2d:72:d7:2d:83:46:a4:
7c:92:9d:fc:87:08:44:2e:05:0b:28:bf:61:ec:c4:
33:73:41:1a:18:6a:b5:52:87:b8:94:70:77:36:95:
63:ff:e9:51:0b:ff:76:6b:55:e9:32:bc:c0:58:f4:
c3:10:cb:bb:62:aa:82:dd:eb:32:03:7b:ea:eb:ed:
a1:ce:9e:e2:f2:86:f4:9c:c2:b1:58:6d:e7:7a:09:
10:5a:e9:b2:0b:98:68:8e:47:69:68:50:ce:29:4b:
bf:90:f1:f0:b2:f4:35:61:67:a3:80:60:9c:d8:cd:
f7:fe:68:a6:cd:20:eb:bc:96:07:56:a2:42:01:81:
57:0b:46:aa:63:17:95:e5:8d:15:f7:29:e6:b3:e1:
60:0d:13:aa:98:6e:60:a5:f9:66:18:19:c2:94:13:
da:be:4b:57:08:85:f0:9a:b5:73:8f:e0:b1:e5:31:
07:69:c7:62:cb:1d:45:53:83:9e:db:9e:bb:96:fc:
20:f8:85:56:09:71:83:11:fc:90:bb:99:4f:c1:da:
13:b0:5a:ef:26:ec:82:f6:c3:a5:0c:8b:b4:e2:ed:
59:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:78:61:24:B4:2F:F1:2F:A4:5D:FD:11:81:D6:DB:6F:3A:F4:91
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9Wp4YSS0L_EvpF39EYHW22869JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:6e:21:29:32:23:9f:b2:55:01:65:95:75:42:7c:ed:ad:bb:
01:32:2a:9f:ea:33:e2:70:f0:3e:fa:e9:8c:93:b5:90:8a:63:
c7:6a:e9:16:b3:2e:73:7c:6a:0b:55:07:89:46:85:42:d4:32:
4c:a0:01:a5:cd:64:11:f4:b8:c8:2c:50:ee:bf:2c:58:e2:ea:
6b:26:ad:3b:3d:b4:13:87:75:53:f2:8e:2e:6a:eb:92:60:6a:
9c:64:9a:ce:68:83:f2:75:7d:46:7f:d3:83:97:7d:96:36:9b:
d4:90:b6:ab:79:ff:c5:0b:b1:3a:36:15:e2:3a:ad:b4:9a:89:
d5:26:00:6a:c3:65:fd:d2:3c:51:c3:25:00:a5:c8:76:49:24:
14:29:18:a9:24:01:8f:4e:60:7c:92:05:41:e3:44:0d:6a:df:
66:cb:8c:25:fa:53:a7:d1:db:6f:11:15:4d:af:20:58:23:c1:
76:0d:b1:a2:7d:40:cf:d0:cc:9e:8c:4c:ab:4c:51:a5:c4:d0:
c3:52:43:f0:18:df:41:47:55:7b:d4:19:a4:6b:91:37:f8:78:
29:66:4d:6e:47:e8:5b:81:ee:36:4f:1f:8e:40:9e:1e:f6:3e:
02:62:0f:29:ad:9e:d6:6d:c7:71:c4:f9:78:de:79:fd:14:b7:
6e:37:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org