Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/I3m-jzQ0k6dND3RRjcVAxRsGF5U.roa
File: I3m-jzQ0k6dND3RRjcVAxRsGF5U.roa (raw, json)
Hash identifier: nHw949VYU+dVVhbuf9gN67krraTRayB0WBsVsC7n/5Q=
Subject key identifier: 23:79:BE:8F:34:34:93:A7:4D:0F:74:51:8D:C5:40:C5:1B:06:17:95
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01893AAFDF6F99F6AF7381C28943D80D55AB
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/I3m-jzQ0k6dND3RRjcVAxRsGF5U.roa
Signing time: Sun 09 Jul 2023 12:45:51 +0000
ROA not before: Sun 09 Jul 2023 12:45:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 77.90.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3a:af:df:6f:99:f6:af:73:81:c2:89:43:d8:0d:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 9 12:45:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2379be8f343493a74d0f74518dc540c51b061795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:a2:8d:e7:d3:fd:5a:d9:15:43:1e:55:cd:
3d:f1:71:02:73:a4:1e:33:5f:11:72:68:67:4e:b1:
ba:29:b5:3e:83:f6:ed:9c:89:b1:62:31:80:7a:da:
91:89:b2:92:b4:c5:30:81:9e:f0:32:b6:09:6a:dc:
19:68:d5:21:ff:3f:24:1a:fe:0b:ce:08:07:77:fd:
be:1c:ab:d2:31:e9:2f:a7:07:c5:c4:6e:2c:e5:6b:
0d:e0:36:9e:b3:f6:b3:26:42:b7:cb:f2:23:71:53:
f0:83:0d:b6:5d:2d:f5:f1:88:e7:58:e5:cb:25:aa:
b8:43:83:a2:22:b6:06:62:6b:d4:24:45:23:11:79:
b5:14:ce:95:fa:3b:91:3e:01:1a:ad:50:f8:74:b0:
a1:5a:3e:5e:74:07:e2:a1:a2:e2:cb:67:3e:bc:c8:
01:a8:6c:7f:17:57:50:55:a3:41:dc:84:46:66:03:
c1:5e:36:b9:8a:05:e9:1d:f8:4a:eb:ca:33:5a:d8:
f8:27:6e:f4:4c:b1:ac:0e:48:08:7c:cc:54:bd:32:
9d:c6:cd:b2:fc:3a:ed:58:95:42:b5:96:1f:94:7c:
8c:8f:48:f3:b3:45:bd:96:ad:82:d5:02:f6:54:22:
d9:a1:16:8a:56:e2:3e:39:bc:75:8a:9e:6a:f9:62:
d9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:79:BE:8F:34:34:93:A7:4D:0F:74:51:8D:C5:40:C5:1B:06:17:95
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/I3m-jzQ0k6dND3RRjcVAxRsGF5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.183.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:85:3d:00:52:e5:20:ce:85:0c:e2:fd:15:a5:03:4e:db:
f8:c9:a1:d7:94:a0:03:10:22:60:e6:c2:e4:0f:e6:57:99:fe:
7b:d9:f0:9d:52:df:17:29:f2:d7:39:c4:a6:66:08:b2:41:4e:
f8:08:69:20:36:5f:2f:38:ad:79:14:90:e7:44:86:9a:df:9d:
20:8f:3b:73:c7:5f:7d:c9:4c:fd:ec:b6:5c:71:12:6c:cf:27:
27:c4:63:80:9f:b3:c6:43:0a:6f:9e:66:a6:c0:9a:af:8d:ab:
c5:d9:19:21:7b:bd:83:81:4b:09:08:d9:03:8e:28:19:0d:31:
7a:6f:53:60:f0:cd:4d:c9:ce:df:2a:06:b9:fb:2b:6a:63:cc:
e3:d0:24:a2:4b:6b:a8:31:20:42:bb:99:79:39:91:9e:13:59:
aa:5e:b3:ee:a5:73:d0:40:28:25:12:00:47:77:2b:14:8b:b4:
3b:d4:f9:d1:7a:dd:98:6b:88:55:23:70:e3:df:97:1a:68:8b:
8e:20:ba:79:d7:2f:b5:7b:b6:f4:93:06:2a:40:b0:5e:f3:eb:
ca:e5:45:83:22:dd:31:d8:03:bf:d0:f9:77:66:aa:79:68:7f:
34:74:03:52:30:4d:c9:a8:b5:ef:e2:e8:5a:0f:d7:6b:e6:f4:
2f:e7:86:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org