Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9vtrKyLz1FdAiYphyc0ZxlD1qCI.roa
File: 9vtrKyLz1FdAiYphyc0ZxlD1qCI.roa (raw, json)
Hash identifier: JfT2oaacLxZO3r1OyRXYphGFsNEYWYeI5rcF+F2pBPo=
Subject key identifier: F6:FB:6B:2B:22:F3:D4:57:40:89:8A:61:C9:CD:19:C6:50:F5:A8:22
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018902C16C4B22E8E3C636027F04492A9D21
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9vtrKyLz1FdAiYphyc0ZxlD1qCI.roa
Signing time: Wed 28 Jun 2023 16:06:17 +0000
ROA not before: Wed 28 Jun 2023 16:06:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 77.90.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:c1:6c:4b:22:e8:e3:c6:36:02:7f:04:49:2a:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 28 16:06:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fb6b2b22f3d45740898a61c9cd19c650f5a822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:62:9f:43:3f:60:62:93:f2:0b:a3:43:82:18:
da:94:78:83:1a:2b:9f:a3:b8:0b:15:ae:f4:c5:d2:
25:69:0b:8b:8d:d9:ac:b1:8b:8d:f7:c0:31:c5:e1:
da:fd:69:6c:9f:3b:e4:e1:dd:a6:5c:85:a7:d2:d3:
9f:ea:21:11:44:49:1e:2d:2a:66:a2:9c:2f:76:e0:
26:18:87:70:9c:c3:99:0e:5a:4e:61:fc:b1:a9:20:
ac:19:77:fb:78:56:5b:19:f8:20:d4:68:05:99:c6:
80:f7:fe:47:97:d3:29:68:b5:a5:d6:e1:41:5c:38:
c1:98:4d:3e:0c:2b:a0:22:94:29:05:80:f3:73:e1:
ba:54:76:23:11:8d:08:da:08:9b:f8:ea:40:05:0e:
81:85:7c:a1:0e:28:4f:51:0c:bf:7a:ac:78:bf:85:
12:2f:ad:5a:53:09:d8:ce:e7:37:94:34:3d:21:63:
b2:f9:5d:56:09:a7:94:ce:e6:b2:7a:91:4a:52:d7:
35:9f:00:75:4b:ad:17:17:b0:54:d8:e9:b5:15:b6:
b3:0b:d4:68:72:62:7d:ef:3f:5a:6c:17:29:4d:a7:
93:db:fe:b1:4d:e5:c9:54:a1:6f:a7:91:e4:35:31:
d3:12:75:ae:6f:5b:72:4a:b9:8c:c5:d9:08:b9:c3:
df:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:6B:2B:22:F3:D4:57:40:89:8A:61:C9:CD:19:C6:50:F5:A8:22
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/9vtrKyLz1FdAiYphyc0ZxlD1qCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
Signature Algorithm: sha256WithRSAEncryption
07:2f:d7:20:35:33:5e:a5:e6:43:03:cc:31:8a:06:dc:2c:38:
a5:60:22:85:d9:0a:75:d8:50:a3:fa:14:9f:df:c3:ba:59:eb:
76:a7:15:ed:9e:89:9f:ba:9d:50:e7:c4:f5:60:9c:c6:76:39:
da:c9:80:7d:74:e7:a5:0b:62:65:55:e0:8a:31:35:d0:e1:3b:
f8:ab:7a:d2:8a:73:12:03:70:2a:1c:24:91:2f:aa:5b:99:1b:
c7:47:8c:16:43:5a:de:ae:54:96:36:21:3f:91:d4:df:77:af:
18:75:75:fd:f0:6c:fb:43:7b:0f:8a:60:44:7c:e2:51:92:f1:
be:22:a3:7d:ab:ff:8a:64:82:ee:b1:e9:3f:db:b7:d8:f9:d4:
26:92:64:b3:85:0d:a4:40:b6:3e:19:8d:10:e9:16:41:f2:34:
8b:4d:0c:14:2b:e9:55:db:5b:d7:e7:fd:13:ee:b4:2c:76:42:
df:0c:5d:42:5a:c3:8f:34:f7:18:b6:11:40:f2:37:8e:4d:c5:
78:84:08:d2:22:de:c8:be:ea:23:eb:09:14:06:97:2b:d0:56:
98:e0:60:4d:56:78:5f:9d:88:a6:a0:de:20:4d:59:7c:35:22:
df:17:58:d6:49:50:28:d2:b1:99:33:e2:72:a5:41:89:47:12:
d5:b4:93:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:30 2024 by rpki-client on console-ams.rpki-client.org