Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QTbj5aDlbAexqhkD4Z5eGJ66xw0.roa
File: QTbj5aDlbAexqhkD4Z5eGJ66xw0.roa (raw, json)
Hash identifier: TvakIM0NBVybgdvlrLQumLCOuHMrq52DJX5deIsW80U=
Subject key identifier: 41:36:E3:E5:A0:E5:6C:07:B1:AA:19:03:E1:9E:5E:18:9E:BA:C7:0D
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018CD66F9DCAFC8CFEE256AA19A6E5E2F2F5
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QTbj5aDlbAexqhkD4Z5eGJ66xw0.roa
Signing time: Thu 04 Jan 2024 21:44:48 +0000
ROA not before: Thu 04 Jan 2024 21:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 20:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d6:6f:9d:ca:fc:8c:fe:e2:56:aa:19:a6:e5:e2:f2:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 4 21:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4136e3e5a0e56c07b1aa1903e19e5e189ebac70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4a:75:52:eb:e2:b9:25:25:46:09:ce:c4:a3:
39:bd:55:c7:3f:2e:c4:06:67:e8:8d:cd:9f:46:71:
c3:a9:69:88:f4:75:2a:93:dc:f5:a4:06:b1:5a:d6:
08:fd:53:09:0c:70:7c:32:9f:c4:e8:b6:5a:2d:6b:
62:06:81:66:1d:89:c3:9a:63:46:31:26:c9:fe:1d:
d0:9e:1b:30:dc:60:67:10:67:95:ae:8e:d9:22:ba:
d8:d9:f4:76:04:d2:08:8c:c3:56:12:1e:08:a6:e1:
90:e4:a2:2d:ab:ca:41:8e:26:a6:28:96:bb:9b:86:
50:11:10:4d:b7:0d:bc:c8:7c:d4:08:2f:a6:57:b8:
54:f3:39:2a:de:36:73:6e:a1:44:b2:3a:7e:38:0d:
e7:dd:58:dd:8c:76:e1:b8:13:5a:fc:4e:0e:6d:fc:
32:9a:a0:f6:08:ec:83:4b:3e:52:f8:87:bd:da:8a:
2b:aa:5a:75:a1:ed:70:e2:08:f8:1c:39:65:76:a3:
50:e1:14:0e:98:1a:60:65:3c:4d:22:98:50:32:d6:
b6:ac:22:47:e8:4e:81:a4:44:3e:91:87:44:8d:f4:
78:64:45:04:a5:d1:f0:04:b6:6e:98:5e:38:17:d3:
3d:74:51:41:1b:be:99:42:27:d1:f0:3d:c4:3b:8f:
81:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:36:E3:E5:A0:E5:6C:07:B1:AA:19:03:E1:9E:5E:18:9E:BA:C7:0D
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/QTbj5aDlbAexqhkD4Z5eGJ66xw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3c:08:d9:58:21:6c:aa:86:33:f0:9c:fc:6b:93:72:7e:ae:
42:0d:5b:5e:05:86:f3:99:ec:ba:94:e0:33:76:f7:01:28:e7:
03:99:04:ae:c9:4d:08:ed:50:f3:39:95:59:3f:55:ca:15:2b:
cd:d5:02:81:82:30:9a:4f:7b:3b:63:6a:4f:6a:21:3c:91:c5:
5f:92:8e:f6:c8:b8:c6:71:59:65:ae:74:ec:a3:9c:c4:1e:2c:
c7:56:a1:13:1d:33:3d:b6:ec:c6:5b:ac:93:19:e5:3b:73:03:
fa:8f:8a:1f:7d:3a:ab:13:bd:1a:e2:9b:83:19:23:4f:1b:38:
d9:37:6e:b2:e0:76:2a:d3:ec:30:ad:6a:23:f5:c4:fc:10:28:
45:67:72:35:32:96:11:38:8c:d7:c9:c7:84:b6:82:22:db:c3:
27:72:9e:6f:db:42:4c:30:63:36:3b:f8:10:43:0b:ac:81:53:
f7:9e:e1:47:75:d0:23:2f:81:cf:a6:08:87:e8:bc:97:53:df:
4b:77:1b:38:64:7e:f8:4b:07:7d:2b:13:0b:8b:67:0b:44:84:
95:5d:bc:da:e3:50:ab:8f:74:e0:95:cd:4c:67:8c:59:44:6d:
3f:88:09:25:74:fc:bd:f2:26:17:b8:bc:cd:68:d8:e0:be:96:
ae:35:bc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 00:45:10 2024 by rpki-client on console-fra.rpki-client.org