Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WpjuurUeqe2FYSdGU_NJOiaFV1A.roa
File: WpjuurUeqe2FYSdGU_NJOiaFV1A.roa (raw, json)
Hash identifier: x9NZJuNE/2dBsZZe166oxCs6Z0IqeqwzC8GW8iQvn84=
Subject key identifier: 5A:98:EE:BA:B5:1E:A9:ED:85:61:27:46:53:F3:49:3A:26:85:57:50
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01918919EA64687C42C979334E187914129A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WpjuurUeqe2FYSdGU_NJOiaFV1A.roa
Signing time: Sun 25 Aug 2024 10:34:22 +0000
ROA not before: Sun 25 Aug 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 77.90.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 15:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:89:19:ea:64:68:7c:42:c9:79:33:4e:18:79:14:12:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 25 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a98eebab51ea9ed8561274653f3493a26855750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:c6:25:a9:b1:cb:b9:1b:1e:27:c1:8b:fc:
5f:6c:79:3d:d2:a4:76:09:c3:82:15:83:c1:bf:1f:
7a:43:07:3f:a1:3e:01:7f:80:91:d8:d8:91:5c:cc:
9f:9c:3c:d6:e8:29:4e:10:51:67:65:16:8c:d9:bd:
90:83:cf:ff:4b:d3:b4:a7:9f:32:c4:45:43:f5:58:
a1:a1:6b:4d:d2:42:a2:25:09:e9:fb:64:ca:91:bc:
ac:79:7a:00:91:66:6a:e4:90:cd:01:cc:ea:54:b8:
b6:ca:b1:df:01:e6:31:50:66:6a:66:4e:db:01:4e:
8d:42:7d:60:8c:58:e5:58:26:04:35:93:2a:8f:9d:
5d:3c:0e:42:d9:8d:fd:f8:33:50:dd:e7:5f:3c:57:
f9:71:ec:b2:94:71:ef:b9:25:24:d7:8c:b9:d9:89:
8e:80:9d:1c:95:3c:41:f9:27:42:8b:a6:dd:59:b4:
70:89:87:bf:f3:9b:70:d3:e0:7c:0d:77:4d:99:49:
8c:21:9d:2c:ef:44:19:bf:29:d1:b4:25:25:0a:c0:
6a:91:9c:62:a5:2a:ef:6b:64:4c:4b:75:f2:9c:cb:
3c:c1:7c:19:28:d5:98:79:9e:11:b7:2c:5d:c7:57:
66:05:36:fe:08:1b:db:1e:84:e9:60:35:26:42:79:
63:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:EE:BA:B5:1E:A9:ED:85:61:27:46:53:F3:49:3A:26:85:57:50
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WpjuurUeqe2FYSdGU_NJOiaFV1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.139.0/24
Signature Algorithm: sha256WithRSAEncryption
35:9d:c1:22:5b:c5:a4:65:bc:85:a1:f1:40:7b:f5:85:03:8e:
92:c8:14:86:b8:7f:a5:45:22:61:f2:09:3d:be:63:a8:3f:49:
ad:ce:89:50:e6:c1:5a:04:be:de:b1:00:37:b1:06:de:fd:fc:
0c:f8:1c:bc:3c:37:42:ba:9c:39:66:7b:b9:77:4e:87:9b:61:
5f:e9:bd:f9:40:58:62:f1:a7:ef:c8:89:95:b8:09:8f:3b:55:
54:aa:69:88:9a:c5:6a:4c:ef:02:ab:a1:92:96:eb:bc:7f:05:
ad:4b:0b:05:f9:1c:b0:9d:15:ab:8a:bd:49:41:09:03:97:22:
8c:6d:8a:d7:0f:bb:b4:47:bb:c7:8b:72:e2:fa:78:16:85:ff:
20:15:a2:da:03:ad:bd:29:ea:60:6d:5b:d4:47:28:81:b0:ce:
21:0a:51:72:95:10:cc:9b:9b:8f:2a:2f:d1:d4:40:7a:9a:30:
95:9e:06:c3:a6:49:d0:ff:fe:d7:37:a5:19:7d:d6:d1:42:c4:
5f:da:ea:a1:40:ae:ee:32:33:13:7c:77:b0:ae:0f:42:f3:3a:
c5:6f:47:04:29:7d:7e:04:9d:49:f2:2c:c9:80:5a:14:a8:9a:
53:c6:66:ef:e4:a2:6d:20:16:88:c0:c6:20:63:a6:6f:02:52:
f6:32:91:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGJGepkaHxCyXkzThh5FBKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwODI1MTAzNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTk4ZWViYWI1MWVhOWVkODU2MTI3NDY1M2YzNDkzYTI2ODU1NzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWXGJamxy7kbHifBi/xfbHk90qR2
CcOCFYPBvx96Qwc/oT4Bf4CR2NiRXMyfnDzW6ClOEFFnZRaM2b2Qg8//S9O0p58y
xEVD9VihoWtN0kKiJQnp+2TKkbyseXoAkWZq5JDNAczqVLi2yrHfAeYxUGZqZk7b
AU6NQn1gjFjlWCYENZMqj51dPA5C2Y39+DNQ3edfPFf5ceyylHHvuSUk14y52YmO
gJ0clTxB+SdCi6bdWbRwiYe/85tw0+B8DXdNmUmMIZ0s70QZvynRtCUlCsBqkZxi
pSrva2RMS3XynMs8wXwZKNWYeZ4Rtyxdx1dmBTb+CBvbHoTpYDUmQnlj/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqY7rq1HqnthWEnRlPzSTomhVdQMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvV3BqdXVyVWVxZTJGWVNkR1VfTkpPaWFGVjFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVqLMA0G
CSqGSIb3DQEBCwUAA4IBAQA1ncEiW8WkZbyFofFAe/WFA46SyBSGuH+lRSJh8gk9
vmOoP0mtzolQ5sFaBL7esQA3sQbe/fwM+By8PDdCupw5Znu5d06Hm2Ff6b35QFhi
8afvyImVuAmPO1VUqmmImsVqTO8Cq6GSluu8fwWtSwsF+RywnRWrir1JQQkDlyKM
bYrXD7u0R7vHi3Li+ngWhf8gFaLaA629KepgbVvURyiBsM4hClFylRDMm5uPKi/R
1EB6mjCVngbDpknQ//7XN6UZfdbRQsRf2uqhQK7uMjMTfHewrg9C8zrFb0cEKX1+
BJ1J8izJgFoUqJpTxmbv5KJtIBaIwMYgY6ZvAlL2MpEv
-----END CERTIFICATE-----
Generated at Wed Sep 25 19:06:12 2024 by rpki-client on console-ams.rpki-client.org