Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9jioDxAEVBOURFeOYvATb1nUgAY.roa
File: 9jioDxAEVBOURFeOYvATb1nUgAY.roa (raw, json)
Hash identifier: 6Woozq0Yg/5mDsUE/791tZOH273ysnDQ1zAHYKpgMiw=
Subject key identifier: F6:38:A8:0F:10:04:54:13:94:44:57:8E:62:F0:13:6F:59:D4:80:06
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 019001AB0BBE5840988BCD1B81AED1C0D136
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9jioDxAEVBOURFeOYvATb1nUgAY.roa
Signing time: Mon 10 Jun 2024 10:21:45 +0000
ROA not before: Mon 10 Jun 2024 10:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 15:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:ab:0b:be:58:40:98:8b:cd:1b:81:ae:d1:c0:d1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 10 10:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f638a80f100454139444578e62f0136f59d48006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:08:71:93:48:6b:95:6b:40:90:ac:a3:be:
2a:d5:25:6a:61:f2:da:a1:41:af:ed:eb:19:78:a4:
01:da:3e:38:9b:65:3c:66:55:4b:c2:07:56:eb:7b:
6c:c1:d1:d7:66:f5:d8:7a:7a:36:ce:6b:ac:f6:2b:
1f:ee:5e:ae:3d:b6:1b:0b:41:1b:68:9e:94:18:d8:
6c:5f:4f:99:0a:e0:79:46:14:86:8c:17:64:9a:28:
39:1b:34:07:1b:d4:06:56:28:85:3f:8d:35:eb:66:
05:ad:bd:f1:d0:a4:51:26:7d:01:75:d0:c2:99:79:
8e:df:02:c9:a4:e8:69:b9:d5:84:2c:e8:a2:0d:b3:
b0:bd:3c:5f:55:d4:fb:fc:66:cb:2b:0c:79:80:fa:
aa:ea:de:f2:7b:ed:24:62:ec:1c:68:03:b2:df:bc:
a3:59:32:b2:0a:af:d1:2b:ee:e6:58:55:36:b2:f1:
96:0b:20:b7:14:28:42:8e:03:96:8d:c9:ce:62:0f:
41:53:ff:da:49:6c:69:82:a8:0e:e2:dd:92:2b:be:
38:32:4f:a2:51:82:28:6c:c3:3e:e3:e4:c4:15:0f:
9b:90:83:8e:59:0a:4d:cf:4a:d8:2c:1f:6b:72:c6:
40:a7:b1:e1:7c:8b:d9:ae:96:60:ad:02:64:9e:65:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:38:A8:0F:10:04:54:13:94:44:57:8E:62:F0:13:6F:59:D4:80:06
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9jioDxAEVBOURFeOYvATb1nUgAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.138.0/24
213.209.143.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:70:34:4c:45:3b:88:33:8c:c8:f6:24:48:8a:e0:b6:64:c6:
9b:63:6d:8e:1f:62:07:e1:0e:3e:54:39:12:b1:a8:d9:24:c9:
3b:8f:75:9b:8f:83:8d:59:69:d9:c1:64:97:09:99:31:22:79:
27:4a:9a:fb:ca:a6:43:db:6e:60:c8:c1:83:83:3f:92:51:d8:
ee:ef:ba:aa:e9:a4:28:2e:cf:24:7b:0e:24:32:0a:b1:41:93:
9c:3b:0d:dd:b8:3d:d6:ed:e1:6d:e6:83:62:56:6a:c7:c5:25:
d4:9a:50:1a:a5:44:16:55:b9:56:f8:92:b2:ad:50:c5:e0:13:
21:2d:ff:17:34:47:bb:f1:59:5d:70:40:9e:53:c2:e1:64:29:
e4:fd:63:32:f5:1d:a3:bc:9b:dc:5d:16:bb:fd:2b:8c:8c:0b:
31:46:52:a9:9f:cb:f3:63:b0:65:b9:1f:53:51:77:e3:cf:05:
fa:c9:e9:7b:d5:f4:88:b0:20:11:66:60:a4:de:bc:b5:33:f8:
e1:af:8b:a4:90:aa:0e:85:e6:95:e0:9e:fd:8d:0d:ad:7e:1b:
87:d3:60:67:90:e8:50:69:92:d1:7a:87:3d:ce:65:42:bc:c8:
bd:40:14:a1:f9:73:4b:7c:ef:f2:34:19:4d:cb:5e:b0:41:8c:
89:2a:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 22:31:06 2024 by rpki-client on console-fra.rpki-client.org