Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9cngTT_mz-eIHsQD6gGDTWfR2mc.roa
File: 9cngTT_mz-eIHsQD6gGDTWfR2mc.roa (raw, json)
Hash identifier: vyQgmWYJQvsM2Imqo0d1EgkfVsjkENMrqgzPB2fHX+8=
Subject key identifier: F5:C9:E0:4D:3F:E6:CF:E7:88:1E:C4:03:EA:01:83:4D:67:D1:DA:67
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0187DB975E6F40B23604FC349E1E68D453D1
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9cngTT_mz-eIHsQD6gGDTWfR2mc.roa
Signing time: Tue 02 May 2023 08:32:23 +0000
ROA not before: Tue 02 May 2023 08:32:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.90.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:97:5e:6f:40:b2:36:04:fc:34:9e:1e:68:d4:53:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: May 2 08:32:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c9e04d3fe6cfe7881ec403ea01834d67d1da67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:7c:8e:9a:7c:05:6d:be:7d:87:4a:1b:26:
3c:fc:c3:52:1a:f6:a9:ed:d6:b4:b2:16:b8:ab:d1:
47:6c:53:50:c4:42:2e:02:f4:37:48:a7:e7:d3:82:
aa:bf:2d:fa:8e:6a:5b:1b:24:f0:39:62:ea:75:53:
bf:7d:f4:2d:1e:a4:15:64:9e:b7:5b:12:ad:bb:13:
2d:28:18:63:8d:8c:0b:92:c1:5a:a9:40:4f:7c:af:
c9:37:0a:25:68:c1:69:f6:b5:1a:4d:1a:07:ef:86:
3a:35:62:89:b3:ed:7c:e8:60:57:51:8b:64:21:15:
88:d7:6f:c5:86:e9:fa:95:9e:ec:9c:2c:a7:70:35:
34:fe:c1:c4:03:29:71:08:7b:47:44:ae:2f:ce:4e:
cc:1a:8b:f0:fb:05:3c:78:49:64:b8:15:e8:8a:fe:
d5:95:09:83:03:5a:fa:15:0d:1b:2b:43:66:6b:c0:
4a:6f:67:8f:e7:e1:01:19:4b:1a:3e:90:fc:df:66:
bb:61:3a:42:e7:51:56:f4:2f:3d:b3:e3:07:2f:9e:
00:b6:81:99:4a:f9:a3:9c:76:a3:1c:12:94:64:8d:
76:c2:a2:98:a5:a9:9e:e3:d5:b0:94:e8:4c:0d:65:
4b:b4:ee:58:7c:a0:7a:ba:7d:28:1b:8f:d4:fa:93:
c7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C9:E0:4D:3F:E6:CF:E7:88:1E:C4:03:EA:01:83:4D:67:D1:DA:67
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9cngTT_mz-eIHsQD6gGDTWfR2mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
Signature Algorithm: sha256WithRSAEncryption
97:de:d2:42:40:e2:aa:30:1b:d4:af:60:59:ae:69:de:7d:55:
b2:3f:d1:f1:30:b9:4c:21:4d:4e:5e:ad:25:37:42:b1:86:24:
f1:39:71:82:f2:58:f2:82:ce:90:51:80:24:9e:19:38:dd:af:
66:d8:06:1b:3c:ce:9f:4c:a9:52:7e:04:b0:d4:d8:86:6e:9d:
b8:a8:b9:cc:e0:50:ea:70:54:55:fd:2d:b6:cc:ca:be:f2:a3:
57:32:06:43:5d:09:20:25:70:31:6f:d4:45:48:90:a2:2d:10:
09:41:b5:4e:6f:cb:a3:bf:8c:c5:31:16:72:1e:6f:89:c3:f8:
4a:76:b1:91:d2:ff:91:c9:01:6a:d6:58:f0:84:5d:51:8a:ce:
68:46:21:77:54:98:e6:24:df:a5:83:42:ca:e6:5e:b4:22:78:
1f:3e:b7:a9:c8:b1:e2:61:cf:00:c8:b1:7d:bf:e9:4c:68:4b:
b7:3d:13:c2:32:4c:bb:93:3f:eb:44:cf:97:3d:86:01:2f:08:
9f:f3:b4:1e:8d:51:7c:06:b2:b9:8f:cc:04:fb:fd:d2:bf:9e:
89:58:05:75:4a:f9:eb:13:79:18:a4:44:5b:95:06:d9:45:04:
50:10:33:43:09:e2:11:8a:d7:88:a0:12:09:5c:ed:5f:ab:f4:
b1:f9:15:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfbl15vQLI2BPw0nh5o1FPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwNTAyMDgzMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWM5ZTA0ZDNmZTZjZmU3ODgxZWM0MDNlYTAxODM0ZDY3ZDFkYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU58jpp8BW2+fYdKGyY8/MNSGvap
7da0sha4q9FHbFNQxEIuAvQ3SKfn04Kqvy36jmpbGyTwOWLqdVO/ffQtHqQVZJ63
WxKtuxMtKBhjjYwLksFaqUBPfK/JNwolaMFp9rUaTRoH74Y6NWKJs+186GBXUYtk
IRWI12/Fhun6lZ7snCyncDU0/sHEAylxCHtHRK4vzk7MGovw+wU8eElkuBXoiv7V
lQmDA1r6FQ0bK0Nma8BKb2eP5+EBGUsaPpD832a7YTpC51FW9C89s+MHL54AtoGZ
SvmjnHajHBKUZI12wqKYpame49WwlOhMDWVLtO5YfKB6un0oG4/U+pPH2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXJ4E0/5s/niB7EA+oBg01n0dpnMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvOWNuZ1RUX216LWVJSHNRRDZnR0RUV2ZSMm1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqyMA0G
CSqGSIb3DQEBCwUAA4IBAQCX3tJCQOKqMBvUr2BZrmnefVWyP9HxMLlMIU1OXq0l
N0KxhiTxOXGC8ljygs6QUYAknhk43a9m2AYbPM6fTKlSfgSw1NiGbp24qLnM4FDq
cFRV/S22zMq+8qNXMgZDXQkgJXAxb9RFSJCiLRAJQbVOb8ujv4zFMRZyHm+Jw/hK
drGR0v+RyQFq1ljwhF1Ris5oRiF3VJjmJN+lg0LK5l60IngfPrepyLHiYc8AyLF9
v+lMaEu3PRPCMky7kz/rRM+XPYYBLwif87QejVF8BrK5j8wE+/3Sv56JWAV1Svnr
E3kYpERblQbZRQRQEDNDCeIRiteIoBIJXO1fq/Sx+RWs
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org