Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RyHsZBHL3E3hT2yO7LnQIqRvWk8.roa
File: RyHsZBHL3E3hT2yO7LnQIqRvWk8.roa (raw, json)
Hash identifier: 4Oo8HMWGOZGF9sDliDk+Wfp7jVp4OoeRoozc4GMzYO8=
Subject key identifier: 47:21:EC:64:11:CB:DC:4D:E1:4F:6C:8E:EC:B9:D0:22:A4:6F:5A:4F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0191C2525A09C2C1329937078DEDDB47B6CC
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RyHsZBHL3E3hT2yO7LnQIqRvWk8.roa
Signing time: Thu 05 Sep 2024 13:14:22 +0000
ROA not before: Thu 05 Sep 2024 13:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
213.209.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 21:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c2:52:5a:09:c2:c1:32:99:37:07:8d:ed:db:47:b6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 5 13:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4721ec6411cbdc4de14f6c8eecb9d022a46f5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:c2:3b:c9:91:0f:11:63:12:11:5c:98:17:
34:c4:09:6f:3d:f3:9c:9b:9f:23:93:1d:87:8e:91:
ae:a6:9c:9e:6a:40:da:aa:d5:28:3b:e9:f8:af:15:
39:ab:39:ae:78:25:e9:8f:fd:d9:a6:20:0b:8a:a4:
ec:6b:4b:57:59:d3:a8:71:84:9c:44:91:0a:de:93:
6f:a3:4b:1a:17:2f:2c:9c:de:69:ef:aa:c1:ee:6b:
f9:9d:3e:fd:40:8e:1e:7e:51:91:3c:f0:95:69:dc:
25:fa:a1:3e:ac:9e:33:27:a7:ba:9f:2b:24:cf:20:
6d:32:bf:1e:a5:20:21:31:23:1d:7f:85:04:cf:9f:
d2:28:12:e0:91:f8:59:e7:43:41:2f:5d:b3:cf:4a:
b9:a3:4e:4f:36:e4:7a:e6:f5:30:30:72:8c:7c:76:
b7:53:3b:86:02:df:7b:95:7e:c4:b8:e2:8e:4e:24:
0f:d9:98:18:fe:20:e8:f7:63:25:22:05:13:8c:8b:
56:d6:7f:5d:b1:17:e7:bc:ad:7e:b4:42:de:35:78:
cf:02:3c:c2:8c:76:54:db:ad:f5:f3:a7:54:54:70:
1c:38:43:db:da:36:49:02:af:f9:8d:d6:a6:00:2b:
ca:14:9b:b4:b4:ea:24:ae:12:d2:e3:04:a9:db:e1:
1f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:21:EC:64:11:CB:DC:4D:E1:4F:6C:8E:EC:B9:D0:22:A4:6F:5A:4F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/RyHsZBHL3E3hT2yO7LnQIqRvWk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
213.209.129.0/24
213.209.143.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d0:5e:9e:ca:e5:77:8a:7e:ac:db:6b:68:a1:e2:ee:a9:52:
d9:99:d0:8d:1b:30:f7:0c:9b:65:b3:6a:56:aa:c1:40:4f:42:
cf:91:db:94:b2:3b:e4:40:b6:38:95:e9:6d:ac:7d:da:98:a7:
c3:f2:f1:a7:51:77:ef:e2:9b:3e:b4:e5:ec:a8:60:43:54:a3:
e3:02:a1:6b:4b:6b:8c:ec:52:03:94:81:34:53:41:90:d0:ff:
0c:bd:2d:ae:ae:ef:60:b1:a6:7e:d7:2d:39:73:34:0e:e6:e6:
01:c7:c4:25:3b:32:b6:24:4f:2d:7f:e3:07:cd:d8:af:47:98:
3a:95:71:cc:0d:d6:9c:a3:10:c9:2b:f3:59:7d:dc:3c:c5:84:
6c:35:a4:58:ba:23:f6:d9:4e:97:34:17:8c:b9:a1:54:d6:b2:
a6:f3:03:75:46:37:42:a0:8c:9a:d6:3a:04:00:be:e8:f3:80:
13:f6:b7:92:46:cc:47:d9:8c:8f:f6:76:bb:f2:44:d7:39:89:
c8:8a:ab:ed:f0:c6:66:51:bd:48:dd:32:ee:2c:a4:0e:e0:fe:
f3:aa:0b:0e:53:4c:0d:73:7f:b4:8b:2c:33:b6:a4:e3:e7:06:
b2:e9:04:a2:5b:ce:09:d1:b8:93:b7:22:9c:72:fd:ec:8f:60:
af:fe:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 23:09:17 2024 by rpki-client on console-ams.rpki-client.org