Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Ox6CWcoe9DkgcSiTJtzTO_OMXdk.roa
File: Ox6CWcoe9DkgcSiTJtzTO_OMXdk.roa (raw, json)
Hash identifier: fRxjJPcDokdHO3v9j7fiLQkWG685woUloWsyL+QXht4=
Subject key identifier: 3B:1E:82:59:CA:1E:F4:39:20:71:28:93:26:DC:D3:3B:F3:8C:5D:D9
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018EF156434AD7E06055E08E87F5A3DB4391
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Ox6CWcoe9DkgcSiTJtzTO_OMXdk.roa
Signing time: Thu 18 Apr 2024 13:12:26 +0000
ROA not before: Thu 18 Apr 2024 13:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.138.0/24 maxlen: 24
213.209.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 May 2024 09:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:56:43:4a:d7:e0:60:55:e0:8e:87:f5:a3:db:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Apr 18 13:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b1e8259ca1ef4392071289326dcd33bf38c5dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:0f:f3:49:e9:5c:e7:c7:75:67:08:b2:c1:
51:63:93:6c:3b:85:ad:03:46:cc:c1:51:19:e4:c2:
f3:95:25:80:86:a4:72:76:5e:e9:fc:f4:d6:9f:31:
56:fe:1f:c1:bf:bc:86:f4:01:a1:b0:25:15:87:ab:
c2:1e:ca:3c:d6:c9:4b:a0:11:15:e0:f2:71:dc:b2:
13:59:88:cd:be:72:eb:0f:9a:31:2d:a3:53:68:4b:
5f:2c:e6:9e:4b:c9:a2:2c:ef:13:41:4b:bc:f7:fb:
b1:e8:70:e3:7a:18:2e:a6:8a:8a:99:21:20:35:bc:
ca:bc:0b:2c:7d:92:97:ea:be:6e:88:70:e4:80:a0:
95:04:a3:52:23:e5:ae:c4:d0:c8:44:8b:3a:11:2b:
4d:76:a4:01:f5:9a:8f:42:ec:9f:1b:b2:99:b6:9c:
22:63:63:7c:8d:fc:90:a3:f4:e8:4d:cb:a1:01:89:
60:53:7e:23:1f:82:5c:5b:ac:3c:23:95:98:3e:5f:
06:7c:9d:00:34:9d:22:b2:d6:77:6e:c6:a0:1d:18:
df:e6:1d:27:b3:8b:2e:a8:d3:98:78:a4:57:a1:9c:
a5:95:18:33:fd:a6:f5:3f:53:9a:e5:ce:15:0d:fa:
66:30:ad:27:29:fa:69:14:9c:b3:73:1d:19:8d:1c:
a9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:82:59:CA:1E:F4:39:20:71:28:93:26:DC:D3:3B:F3:8C:5D:D9
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Ox6CWcoe9DkgcSiTJtzTO_OMXdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.138.0/24
213.209.159.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:20:81:38:e3:ab:c9:26:f4:fc:14:5f:51:ac:7e:fb:0f:d8:
b2:0f:eb:85:1a:c4:f6:48:67:8b:70:72:42:28:71:fa:09:46:
e2:35:26:d7:67:78:92:09:f5:86:e4:d8:2b:5c:f8:69:43:55:
27:00:c7:1b:49:a9:23:25:1f:4b:1c:37:c1:ff:5e:56:ab:07:
3c:82:33:9f:c6:5d:77:a8:ce:25:17:0f:c8:9b:85:3a:da:d9:
8c:3e:f4:0a:be:1f:82:eb:2f:31:9c:12:73:aa:4c:16:e5:47:
01:1f:97:be:34:11:ae:e3:66:82:49:b1:3a:98:56:59:45:0c:
94:10:88:21:b1:c5:7f:b1:42:e6:de:0d:9e:ba:48:15:32:89:
20:c0:db:ea:0b:fa:76:1b:3f:5e:d6:ec:da:ba:9c:af:21:2b:
18:c0:73:2e:cb:be:a1:17:49:5f:3e:47:15:7a:d6:66:0c:44:
de:ea:b0:d0:71:e5:6d:fb:54:41:90:88:a5:4d:8d:07:d4:bb:
42:75:94:1c:96:7e:f9:8c:b1:b7:7d:e5:21:ef:cf:ad:a4:b1:
fa:85:c3:98:1f:d1:5c:1d:51:2b:35:81:c3:c1:45:3c:9d:4f:
4a:fa:09:26:41:0f:ed:e4:9c:9c:5d:1c:f6:60:cd:cb:4d:ea:
9f:6a:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:03 2024 by rpki-client on console-fra.rpki-client.org