Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YrkxVAKXCSleFTzQtIcTzQyuS-E.roa
File: YrkxVAKXCSleFTzQtIcTzQyuS-E.roa (raw, json)
Hash identifier: PzSGrK78zxzkAv88Lh2p6fxVdnn06fLgwKOgoY7cW68=
Subject key identifier: 62:B9:31:54:02:97:09:29:5E:15:3C:D0:B4:87:13:CD:0C:AE:4B:E1
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01856F82598C3C8A4A1EE2887D48D8B8A22E
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YrkxVAKXCSleFTzQtIcTzQyuS-E.roa
Signing time: Sun 01 Jan 2023 22:44:51 +0000
ROA not before: Sun 01 Jan 2023 22:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:59:8c:3c:8a:4a:1e:e2:88:7d:48:d8:b8:a2:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 22:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62b93154029709295e153cd0b48713cd0cae4be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:58:80:74:f8:19:cf:1d:c4:a0:f6:bb:c4:
c2:8e:f5:c9:60:37:4f:92:ba:4b:f3:a1:50:34:77:
c4:32:8f:07:e0:13:07:d7:db:98:40:e4:68:db:53:
b2:8f:8a:aa:8e:6d:ae:37:69:37:9a:bc:be:b0:22:
43:1c:72:5a:cf:d6:47:c3:15:a8:ad:c9:8d:2f:56:
ce:38:e3:97:9b:e7:17:8f:22:56:4f:f0:62:bb:16:
72:01:31:28:90:e6:b4:c4:d6:47:f6:49:ba:9f:af:
b0:2c:fb:4c:31:10:19:eb:e6:1f:84:28:cd:2a:e2:
54:94:62:f4:10:f8:32:23:e1:2d:00:df:90:f0:31:
06:63:bf:50:8f:ea:98:32:33:72:44:67:54:b1:f2:
4f:0f:0a:30:50:49:02:85:a0:04:9e:90:26:0f:99:
10:52:49:57:c7:b3:ef:b2:99:f2:5b:f2:4e:b0:a8:
f5:a7:9f:d3:22:52:94:75:e3:ec:e1:22:c9:b7:80:
8b:f6:54:fd:91:80:34:c7:6e:5e:45:f8:35:f3:92:
e0:b1:65:7f:e9:77:ca:df:08:ed:38:a4:28:0a:11:
7c:7b:8d:c1:e9:03:a8:b8:ef:c1:42:dc:9c:7c:12:
b9:a6:7d:27:05:30:57:08:9d:e2:7b:2f:a8:04:bf:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B9:31:54:02:97:09:29:5E:15:3C:D0:B4:87:13:CD:0C:AE:4B:E1
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/YrkxVAKXCSleFTzQtIcTzQyuS-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
Signature Algorithm: sha256WithRSAEncryption
61:a0:2a:46:3e:39:75:e1:c6:30:52:05:8f:4b:40:4c:50:38:
82:47:cf:57:ae:a6:55:72:7a:b2:b6:bc:88:0e:8d:23:45:12:
fa:27:47:fc:d7:cb:b8:87:c1:3d:37:72:37:77:07:35:92:5f:
69:23:cf:9b:9f:67:88:e8:18:b8:b5:35:39:42:86:26:5a:6a:
16:ca:0d:12:96:50:e0:72:cc:be:2e:dd:dd:5b:30:72:37:92:
f4:42:a3:64:a6:df:33:e6:ee:69:3f:22:47:4e:d6:2d:9b:43:
09:e7:11:40:a3:24:71:3e:b6:4f:4c:17:28:82:0d:79:66:49:
8c:f6:96:35:33:e4:d3:18:d9:fe:bb:39:b3:f8:be:a6:10:57:
ee:97:00:fa:6a:84:3d:a3:08:ac:2d:56:0c:10:6c:f1:6c:08:
e7:4d:4a:93:d6:4e:b0:0a:d7:6c:f6:30:67:4e:06:dd:7a:fd:
d3:76:1a:0d:ef:eb:1e:52:20:e2:e4:8e:09:60:95:c3:ee:7a:
ce:bd:5f:a7:5b:cf:ca:95:96:e9:1e:bd:ce:5c:f5:3f:86:97:
31:2f:3d:fc:5e:4c:aa:b9:3b:6d:64:e6:f9:30:bc:96:fb:b0:
d2:d8:13:ce:03:0a:9b:a3:4e:8e:cc:63:27:a3:be:0e:71:82:
d4:6f:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org