Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IiiGW_-e4myZ3GSq0UQC9dVwFsQ.roa
File: IiiGW_-e4myZ3GSq0UQC9dVwFsQ.roa (raw, json)
Hash identifier: QA9PT3XI5CluJald+HTHBzdPsGy0e883zB7hWoAm4Co=
Subject key identifier: 22:28:86:5B:FF:9E:E2:6C:99:DC:64:AA:D1:44:02:F5:D5:70:16:C4
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018AC1783D2CFAC3D1347BDCFF96A09EF04C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IiiGW_-e4myZ3GSq0UQC9dVwFsQ.roa
Signing time: Sat 23 Sep 2023 09:56:37 +0000
ROA not before: Sat 23 Sep 2023 09:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 77.90.189.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:78:3d:2c:fa:c3:d1:34:7b:dc:ff:96:a0:9e:f0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 23 09:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2228865bff9ee26c99dc64aad14402f5d57016c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:14:6d:2a:66:d1:7a:8b:e2:c5:d7:58:7e:53:
7b:e6:ee:3c:0a:04:70:84:5d:73:65:4f:34:2c:49:
4a:8d:1f:c7:b4:2f:d8:2b:26:4f:fd:ba:78:94:e7:
ad:05:fb:be:b9:1f:9c:13:b3:1c:01:60:41:60:94:
da:3b:a7:78:c5:3f:a8:c9:4e:ad:a5:a3:9b:fe:91:
ae:ea:12:7c:6a:4e:66:d3:a9:25:d3:2f:ed:0b:38:
d2:a9:1e:39:76:ca:98:81:d4:50:d0:d1:d4:e8:89:
c5:3c:91:20:29:06:08:f9:54:db:3f:7b:0c:84:db:
83:a0:d2:19:f3:8c:3c:db:ba:20:88:1c:a2:0e:53:
f8:9c:7d:50:19:77:93:d0:fd:6b:20:cf:24:ba:80:
49:12:8c:94:14:fc:f0:cd:e3:bd:b4:cb:a6:ff:ca:
c2:d4:a5:22:37:61:20:d1:b6:8c:4d:32:7a:98:0e:
9a:a1:61:12:61:78:d2:bf:60:7b:91:1f:97:36:f0:
f7:87:75:d7:7e:c3:9a:cd:81:21:2b:a5:0d:3d:c9:
c5:4a:da:eb:c2:34:c7:64:e8:56:ea:34:64:29:4e:
69:1b:23:ef:5e:a2:df:89:82:2f:2d:ab:6d:24:7a:
a4:c8:88:b6:0c:8f:8b:02:f9:3b:f3:c4:0a:64:fa:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:28:86:5B:FF:9E:E2:6C:99:DC:64:AA:D1:44:02:F5:D5:70:16:C4
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/IiiGW_-e4myZ3GSq0UQC9dVwFsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.189.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:5f:37:15:b3:b2:5d:7e:c2:51:b0:ac:58:35:cd:2f:5f:b7:
5a:7f:f5:7e:c0:c9:a4:12:12:a9:de:e0:d3:7b:f9:cd:bc:aa:
3c:95:40:ef:ab:2b:d4:5c:06:8f:1f:8a:e8:38:c1:d0:b2:a3:
ce:8d:be:3a:c8:d7:ec:91:c3:e1:e4:20:20:fc:ff:4a:4e:60:
1e:9e:da:ca:7a:99:3e:b7:5e:75:ac:f5:fd:e7:7d:ea:ee:f0:
9c:63:14:a6:34:ab:40:6c:a3:03:c4:63:58:39:76:eb:d2:ae:
35:b4:16:e5:86:ab:89:5b:4c:d8:63:94:f9:3a:f4:a6:57:12:
4a:89:b5:72:68:15:27:14:90:52:2a:9a:b0:69:f7:d2:b8:a8:
b0:f5:62:65:31:c6:a4:b9:2b:da:f6:30:7d:df:93:9e:9e:30:
35:f9:ef:13:a3:91:21:aa:dd:91:48:4a:a5:a9:86:b6:22:f6:
8d:0c:46:9a:d7:7a:b7:14:f0:1e:1c:69:87:70:33:ba:7f:a3:
18:99:d7:3b:ea:88:19:02:fa:71:99:7f:ce:e6:db:ba:3b:cd:
d9:9b:e7:43:8a:01:e1:10:b1:05:03:cd:13:c3:bc:e2:7b:8f:
6b:5b:e0:90:80:92:13:7b:94:c3:f8:bb:a2:6c:b6:b9:63:3e:
bd:45:c0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 11:07:44 2023 by rpki-client on console-fra.rpki-client.org