Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Yc46YnvPUNCIPI98sd8RFTmh688.roa
File: Yc46YnvPUNCIPI98sd8RFTmh688.roa (raw, json)
Hash identifier: T//tw8ueFDAn4pbcNzEqzOwSrOEQYeSIGhDa7RioCG8=
Subject key identifier: 61:CE:3A:62:7B:CF:50:D0:88:3C:8F:7C:B1:DF:11:15:39:A1:EB:CF
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0194234A4BB2035F51F20B9B05BCE0874D74
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Yc46YnvPUNCIPI98sd8RFTmh688.roa
Signing time: Wed 01 Jan 2025 19:14:19 +0000
ROA not before: Wed 01 Jan 2025 19:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.135.0/24 maxlen: 24
77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:4a:4b:b2:03:5f:51:f2:0b:9b:05:bc:e0:87:4d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 19:14:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61ce3a627bcf50d0883c8f7cb1df111539a1ebcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:55:b8:15:24:c5:ff:40:7c:9d:b1:33:f0:
dd:77:28:39:c5:b3:71:7e:c9:15:7c:4b:43:d3:55:
ae:fd:e5:54:ac:1a:9c:df:26:e5:ae:f9:5c:d6:05:
4b:dc:fd:bc:a2:a9:b3:6c:40:91:2b:5c:40:b5:c3:
b1:9f:81:d1:a2:d8:16:fe:5b:6e:a5:a6:dc:c6:78:
31:d4:46:49:c5:39:e8:8b:b1:28:e8:8c:f6:7c:1e:
61:ad:38:41:16:bc:6c:f0:a5:ee:58:78:71:bc:40:
2c:63:16:fe:f0:88:d9:44:4a:94:0e:bb:c7:f3:88:
56:c9:f7:8d:04:8a:0a:cf:92:64:86:6a:a2:a3:2b:
16:0e:71:de:e6:5f:20:64:07:c5:d9:8f:b7:48:58:
f8:8d:3f:d7:e1:ba:38:a8:d1:da:de:0d:91:4c:bd:
3c:e8:7d:4c:c7:b3:79:ec:d5:cc:57:22:04:55:f7:
48:f0:00:9d:3c:40:4f:58:42:6f:d7:0a:c5:61:01:
ee:45:0a:cd:2f:8e:d8:0a:cd:fa:ab:6e:da:09:ae:
ee:6f:17:a2:57:16:ac:c2:fe:4c:74:0b:9f:41:ff:
4c:49:01:fe:0a:98:5c:8a:e2:45:85:3c:3e:a8:91:
77:cc:0b:8e:0e:ee:fb:ac:01:10:e8:4d:16:6b:fb:
65:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:3A:62:7B:CF:50:D0:88:3C:8F:7C:B1:DF:11:15:39:A1:EB:CF
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Yc46YnvPUNCIPI98sd8RFTmh688.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.135.0/24
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c0:47:f0:ef:f6:5f:aa:37:26:1c:1c:e5:3d:bd:33:0a:c2:
bf:89:2c:5e:bf:a0:c6:a1:cd:da:1b:31:f8:cd:b6:fe:b1:15:
a8:f3:2c:1b:59:d6:6b:4f:b6:2a:ef:81:23:63:c1:54:53:7e:
7c:64:bb:e9:30:f9:2d:d2:9d:f4:b2:48:f2:91:66:a0:32:f3:
5c:31:f0:ea:61:d0:38:76:bc:ea:f3:ff:dc:b0:43:7f:35:9a:
fc:3c:77:82:36:6e:13:ba:f0:5e:71:b0:da:b9:13:6d:a1:57:
3c:41:58:8b:8f:79:05:95:a1:94:9e:7d:2c:a9:1a:10:7e:f4:
77:f0:17:06:ba:2d:f0:17:db:18:dd:23:67:13:57:ee:d5:9f:
db:48:89:68:d0:23:8e:7e:7b:ea:14:1d:32:ca:40:27:e5:bb:
14:31:92:3f:a4:d9:61:be:13:ed:98:5b:61:d7:fd:cf:46:80:
bb:df:5b:c3:77:53:4c:68:c6:58:0d:9b:ec:59:fd:6e:35:53:
62:71:02:9a:9f:5a:82:d9:6b:10:6a:b0:12:23:d8:0d:62:ec:
f2:cb:fd:d3:72:cd:99:b2:8c:44:22:d1:2f:3b:db:b3:6b:21:
aa:8a:f2:6a:8e:3a:86:0d:9e:09:b0:75:3a:b2:26:7b:07:02:
ed:d0:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:26:54 2025 by rpki-client