Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NGZa9Knom6sM-ShZ2Bkpjoc79cU.roa
File: NGZa9Knom6sM-ShZ2Bkpjoc79cU.roa (raw, json)
Hash identifier: 8rfLVEWVrbPU85KECiW7V/d8a9MWFqPiEXQkvS31m8k=
Subject key identifier: 34:66:5A:F4:A9:E8:9B:AB:0C:F9:28:59:D8:19:29:8E:87:3B:F5:C5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A215D58D655E93966F434FB9E287D8CD2
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NGZa9Knom6sM-ShZ2Bkpjoc79cU.roa
Signing time: Wed 23 Aug 2023 07:48:00 +0000
ROA not before: Wed 23 Aug 2023 07:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58349
IP address blocks: 77.90.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:5d:58:d6:55:e9:39:66:f4:34:fb:9e:28:7d:8c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 23 07:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34665af4a9e89bab0cf92859d819298e873bf5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:86:60:29:fd:6f:a7:22:62:7d:09:3e:55:
09:7d:5e:82:c3:af:29:b5:4f:96:48:07:37:51:f4:
28:0c:d7:fa:cf:cb:cd:bb:16:7b:d3:94:bd:08:90:
de:21:81:07:80:cc:61:fb:51:cd:0b:69:17:1d:99:
78:fc:65:79:ac:ed:51:4b:07:21:ee:36:ff:76:ef:
dc:97:c1:79:87:f5:d6:bf:c8:f9:9e:a6:dd:c8:f3:
e7:fd:e0:35:5a:23:67:99:5b:e5:93:94:b0:6e:65:
b1:f6:f1:d7:18:9e:ae:e9:05:05:6b:73:2c:f4:9f:
af:2f:69:8f:8c:58:4a:39:02:61:14:a5:e9:23:34:
c9:73:6c:4a:03:8d:34:54:53:91:08:0a:63:88:4c:
e5:75:f0:f5:6c:7c:22:c7:4f:2e:7f:36:e2:1a:19:
bf:a6:4a:05:24:63:af:43:6b:ac:fa:33:16:62:18:
ca:25:d2:ee:59:d1:66:e9:69:57:53:28:0b:f7:a3:
81:e2:5d:7e:2f:be:f4:4e:c3:f7:f2:23:8c:b4:8d:
fe:ea:71:b9:63:d9:80:2a:a6:26:e7:66:60:27:be:
04:98:3d:db:67:82:cc:37:a0:8d:8b:3e:a0:6b:fb:
91:8c:d1:8f:25:56:41:44:66:bf:7c:22:be:3b:17:
aa:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:66:5A:F4:A9:E8:9B:AB:0C:F9:28:59:D8:19:29:8E:87:3B:F5:C5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/NGZa9Knom6sM-ShZ2Bkpjoc79cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a1:bc:d1:9f:8a:13:f7:c6:3b:6d:82:9f:bb:75:ae:b7:da:
41:b7:50:d8:ba:93:a6:3f:a0:48:b8:f7:79:68:73:4f:37:0f:
cf:8b:06:e5:58:27:cc:ba:39:a3:24:56:6c:7f:4e:88:d2:02:
d8:07:b5:1c:84:b6:f3:5c:c1:11:0f:5c:0e:59:ab:6d:82:b8:
59:20:9c:20:0b:66:d5:0b:50:97:91:c8:ab:b9:c1:db:ca:e1:
b2:98:d2:80:1c:aa:2d:11:8d:80:ad:78:44:a1:1a:c2:08:9f:
d7:e8:39:cf:47:8e:7f:cb:8d:e6:14:bd:be:75:7f:32:a2:fc:
28:66:18:31:84:08:95:30:46:2b:d4:ca:01:33:ab:f6:c6:c6:
28:cd:6d:af:01:c3:4a:35:f7:d7:72:88:9c:ec:fe:30:5c:5b:
b2:ba:e6:ed:14:c6:e3:8b:ec:9e:08:03:82:5a:3a:a2:1a:11:
2c:ad:47:74:02:5d:99:aa:a1:9b:c7:05:89:ea:2d:d0:64:59:
bc:33:f6:6c:85:91:54:f7:20:90:cf:37:f6:6f:96:95:11:58:
18:08:2e:b1:84:83:ed:83:5f:62:2a:f6:88:33:a8:1d:41:77:
69:23:57:6b:69:34:d2:30:72:d7:4b:a1:66:83:81:66:39:d8:
1f:d8:2a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 13:56:37 2023 by rpki-client on console-fra.rpki-client.org