Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_rx3X46ri_0Rz9wkyNxhnqYG55Q.roa
File: _rx3X46ri_0Rz9wkyNxhnqYG55Q.roa (raw, json)
Hash identifier: 0mPlXarMnZV0A5Zx7ap8FtFKu/Wfnof/PrCvkwaz7FY=
Subject key identifier: FE:BC:77:5F:8E:AB:8B:FD:11:CF:DC:24:C8:DC:61:9E:A6:06:E7:94
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188D91B005A79F68A3E4718F55B013661A6
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_rx3X46ri_0Rz9wkyNxhnqYG55Q.roa
Signing time: Tue 20 Jun 2023 14:00:05 +0000
ROA not before: Tue 20 Jun 2023 14:00:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57097
IP address blocks: 77.90.188.0/24 maxlen: 24
213.209.146.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:1b:00:5a:79:f6:8a:3e:47:18:f5:5b:01:36:61:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 20 14:00:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=febc775f8eab8bfd11cfdc24c8dc619ea606e794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:2b:e3:67:d6:89:17:e6:fc:7a:61:e1:08:
fe:5a:2c:ee:41:59:02:8a:c1:38:0a:fe:df:13:12:
1a:a4:69:63:7b:a8:9e:ee:85:93:69:59:e8:b0:7a:
9d:0b:1f:cf:78:36:f8:24:de:ae:19:f6:dc:9c:d4:
bf:62:a6:26:78:e7:1e:0b:23:86:e6:db:31:c7:d7:
fb:70:40:bc:f4:f0:48:9f:da:99:8c:b9:5f:e9:0e:
c8:5f:3e:b3:ce:76:04:ca:c7:30:f7:de:da:c3:93:
63:91:bb:40:a9:1a:ad:68:7a:ee:97:51:1f:d1:4b:
15:56:b3:50:2d:66:d8:c9:1e:60:71:b2:06:63:3a:
14:8a:8f:70:bf:f4:17:db:fa:07:cd:aa:c2:4f:e4:
15:5b:fb:d9:d7:02:94:f0:63:ea:ef:65:f1:67:d1:
3c:d1:3d:91:46:76:f8:7b:1c:b3:f8:ba:08:70:31:
cf:37:3f:64:98:1c:83:81:c6:77:aa:ad:2a:3f:ab:
4d:c8:14:05:c1:24:d3:9b:4f:a4:2d:e4:5c:6a:0b:
1a:91:b3:c1:3a:d0:ca:1f:ab:cf:7f:05:5a:c1:d6:
f9:34:ea:2a:db:f5:05:e9:a6:aa:75:b1:6e:a4:7e:
eb:48:aa:fc:00:22:6a:ca:c0:f5:af:02:79:77:94:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BC:77:5F:8E:AB:8B:FD:11:CF:DC:24:C8:DC:61:9E:A6:06:E7:94
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/_rx3X46ri_0Rz9wkyNxhnqYG55Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.188.0/24
185.230.15.0/24
213.209.146.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:aa:22:bf:b7:3e:83:c2:27:c2:67:58:19:99:71:50:24:09:
8f:61:b7:6e:75:1c:c4:d4:ae:30:6c:16:2a:4b:61:eb:5b:27:
3b:c4:7b:23:c2:ce:4b:52:94:7a:89:a4:cc:ff:be:3b:eb:5d:
ce:ba:02:1d:7c:8f:6c:47:16:48:3b:cb:89:9f:9e:3a:d1:37:
f7:a4:1c:7a:62:42:19:c9:0b:7b:fd:1a:70:0b:ec:fb:50:13:
68:40:24:83:d3:e2:b9:f9:9d:89:12:cf:65:f7:68:fc:87:e6:
99:39:6b:2d:a7:e3:e7:51:d2:f6:c0:72:cf:1e:6c:e7:fe:42:
85:22:3d:40:55:9b:e0:9f:2b:2d:52:1e:21:b7:46:91:2f:60:
4e:ca:ad:a3:55:9f:43:80:cc:bb:e4:52:92:0a:da:e9:34:4d:
05:a9:69:ce:e9:b5:f3:8b:01:b8:3d:91:bd:aa:34:9c:ab:00:
b2:33:c5:dc:e7:e3:b0:77:e6:b1:e2:8d:3b:96:29:78:94:f9:
b9:52:3d:5c:be:03:29:b4:98:b1:7a:98:ef:c0:92:52:36:3d:
7c:2d:bb:2c:86:84:39:af:1a:2c:2d:fa:b5:5e:3f:f9:71:0c:
b9:e5:27:92:e3:58:cf:11:2e:f8:c9:9b:da:1a:06:93:62:37:
ec:e7:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 16 07:24:56 2023 by rpki-client on console-fra.rpki-client.org