Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TP-cMnnpfGA3k26EMZ1vq0kSof8.roa
File: TP-cMnnpfGA3k26EMZ1vq0kSof8.roa (raw, json)
Hash identifier: pvrO7es3Eq8kS7B2cLk2km9FkRP9K37PE7JRAZ0brlw=
Subject key identifier: 4C:FF:9C:32:79:E9:7C:60:37:93:6E:84:31:9D:6F:AB:49:12:A1:FF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188C5C77700D5E36D4018CA94DBC78FB687
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TP-cMnnpfGA3k26EMZ1vq0kSof8.roa
Signing time: Fri 16 Jun 2023 19:56:03 +0000
ROA not before: Fri 16 Jun 2023 19:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207710
IP address blocks: 213.209.131.0/24 maxlen: 24
77.90.177.0/24 maxlen: 24
77.90.186.0/24 maxlen: 24
77.90.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jul 2023 10:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:c7:77:00:d5:e3:6d:40:18:ca:94:db:c7:8f:b6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 16 19:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4cff9c3279e97c6037936e84319d6fab4912a1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:74:a7:4f:62:be:71:fa:62:00:0b:30:80:
66:09:90:59:ff:e0:4c:2f:a7:78:57:7e:f3:8d:e6:
44:cd:92:e1:e8:17:92:f0:65:30:89:98:93:ea:76:
d1:14:d3:df:5e:05:20:bc:d7:e0:89:8d:1b:b8:83:
7a:4f:16:d9:fe:87:13:ed:1c:52:e1:92:6f:32:3e:
10:5d:e6:8e:20:3c:a7:12:8c:93:f7:b9:1a:02:c4:
fd:7c:7a:dc:36:e1:b4:7c:07:60:4b:d4:80:7c:6e:
88:6a:a0:1a:63:a5:60:2c:e8:ac:07:39:2e:90:a4:
0c:63:95:c9:5c:75:a8:3e:7d:2c:3a:d6:7f:1c:9a:
cd:aa:90:7e:c8:97:25:7b:60:ef:03:ad:ae:7c:ce:
9e:e5:f0:fb:5c:96:65:eb:b1:a5:fb:1d:33:5d:81:
7b:b9:cf:a4:92:6e:08:ed:17:09:c5:48:49:cc:5b:
33:d2:d9:ba:54:bc:2d:a1:d8:c1:7a:bd:cd:44:7d:
65:f7:b1:11:b4:45:20:ed:87:c1:7a:84:3e:87:97:
20:a3:fe:ef:52:f5:10:16:e7:8a:d7:9e:78:5f:7d:
59:25:6e:01:e3:02:2d:7c:df:c2:d7:aa:93:e1:3f:
cd:ee:8c:38:09:32:8e:07:13:bd:39:e5:9a:48:78:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:FF:9C:32:79:E9:7C:60:37:93:6E:84:31:9D:6F:AB:49:12:A1:FF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/TP-cMnnpfGA3k26EMZ1vq0kSof8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.177.0/24
77.90.183.0/24
77.90.186.0/24
213.209.131.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:89:42:a9:12:16:e1:b0:07:62:f4:4c:7c:c2:0d:3a:76:75:
02:1e:24:ff:eb:28:6f:92:c0:21:b1:51:14:2a:7a:3e:28:e7:
b3:02:b4:39:a8:3c:2a:83:95:91:26:9b:68:dd:3e:c2:bf:d1:
b0:dc:d5:16:b5:f4:4e:8c:7b:a5:aa:7e:61:68:1a:06:f5:a4:
ff:4f:2a:89:77:33:69:4f:fb:09:8f:b0:7a:f1:62:a1:a3:66:
4a:de:97:e2:44:bb:0d:f8:ba:0e:e3:fa:73:fb:45:5f:3b:9c:
be:64:2c:9a:32:19:09:d9:fd:dd:dd:96:ae:2d:a3:fc:e7:87:
15:8a:b5:3f:0d:6e:28:72:10:b2:86:cb:01:59:83:83:7e:e8:
3a:7d:a8:c8:4a:9f:d5:1c:94:8b:a9:a2:8c:b4:69:59:5b:5c:
03:08:8a:91:23:5b:ad:7f:61:54:9a:65:25:19:37:aa:2f:fe:
38:a6:c2:4d:5c:02:ef:40:18:e6:a5:6c:40:be:2a:21:7b:a8:
05:36:e9:62:67:97:3e:31:60:5d:0c:07:4c:12:3b:32:f7:ce:
a3:f6:d0:f7:54:5c:4a:c0:fb:41:77:27:e9:a9:e8:8b:f5:8b:
0f:3f:59:1a:bd:34:1b:7e:f9:e2:ea:58:d0:f8:e5:ac:7d:f7:
fd:f2:c0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:25 2024 by rpki-client on console-ams.rpki-client.org