Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/diQdoJozSFz4fzRf7wfgx4E5_es.roa
File: diQdoJozSFz4fzRf7wfgx4E5_es.roa (raw, json)
Hash identifier: h+xcjcIXHYfdrkEY2NnYawYTvdto0F9dn7ONpzKeI4Q=
Subject key identifier: 76:24:1D:A0:9A:33:48:5C:F8:7F:34:5F:EF:07:E0:C7:81:39:FD:EB
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0191A9FE05C78CABBD57CD1B1C272B6ABA6A
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/diQdoJozSFz4fzRf7wfgx4E5_es.roa
Signing time: Sat 31 Aug 2024 19:51:22 +0000
ROA not before: Sat 31 Aug 2024 19:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 77.90.153.0/24 maxlen: 24
213.209.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 15:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:fe:05:c7:8c:ab:bd:57:cd:1b:1c:27:2b:6a:ba:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 31 19:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76241da09a33485cf87f345fef07e0c78139fdeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:69:f7:f2:43:4f:24:3d:07:d7:36:d5:63:1a:
01:63:0f:a6:4c:d6:e5:0c:9e:75:42:cb:d3:a4:c7:
39:de:67:1a:29:f2:2f:68:52:dc:b5:72:4e:d2:7d:
9c:4d:c6:6c:d4:d5:12:e5:b5:cd:ca:67:9c:86:8d:
fe:14:c9:dd:51:87:c9:73:4d:33:e9:21:6a:87:da:
19:a8:db:91:2b:b9:78:6d:02:31:97:65:e3:93:91:
3c:e6:6c:c6:0d:22:68:8d:1c:fd:ee:89:24:b4:32:
41:46:13:bd:56:b7:c4:fe:d3:7a:28:0e:97:ac:65:
91:11:57:62:c8:11:0b:18:6f:1f:c1:aa:49:8e:8a:
0b:48:d1:28:28:03:44:47:06:e3:cd:a6:69:99:fe:
4a:5f:83:13:f9:fb:13:98:a4:d7:86:26:89:ce:e6:
3b:3e:ea:85:76:a5:b2:37:17:6d:b8:6c:10:e0:e8:
84:05:8d:68:d8:eb:18:e3:57:6b:50:49:7f:86:fd:
3b:6f:42:c6:c9:70:44:74:b1:c1:a9:bb:8a:a4:3c:
63:0e:d9:e5:71:44:9f:9f:79:cd:0a:fa:c2:be:9b:
83:f3:28:df:73:4d:a9:da:52:29:c8:93:02:64:e2:
c8:e2:24:ad:d8:37:a9:27:43:2f:f2:14:58:5a:f7:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:24:1D:A0:9A:33:48:5C:F8:7F:34:5F:EF:07:E0:C7:81:39:FD:EB
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/diQdoJozSFz4fzRf7wfgx4E5_es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.153.0/24
213.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:35:99:ed:17:43:bf:fc:3b:6d:d6:18:fd:29:37:6b:bc:81:
43:a5:71:d3:60:74:cb:24:b9:ce:12:36:a2:ff:25:39:5c:29:
af:c5:40:65:45:a5:8d:46:35:a4:9f:81:72:b7:f0:2f:1c:f9:
92:bb:99:11:d1:e7:ba:d2:a0:84:49:34:63:e2:8e:4d:d3:9f:
67:43:5b:11:a7:c3:33:07:2f:27:5c:7e:de:d4:16:6c:1b:dd:
49:95:06:2c:b4:83:9e:a8:0d:7c:f2:b3:04:cd:31:63:89:ea:
c3:e2:5f:0a:31:05:9c:66:d7:75:00:48:8d:dc:70:78:3e:e7:
f1:23:78:8d:cd:a4:08:04:f9:1c:46:77:6d:08:1d:90:d0:08:
34:98:ec:7e:72:c9:2a:1e:c3:df:b1:43:f6:b3:1c:47:69:70:
f8:9d:82:1a:b1:81:3c:28:0e:e7:a9:b7:65:d9:d3:e5:b6:34:
52:0a:34:d5:97:a9:65:d1:9c:d2:09:df:d3:7d:58:bf:a8:cd:
d8:7d:d9:46:da:3e:81:0b:f7:aa:8d:02:7d:35:c0:9f:cd:7f:
00:7a:7d:8f:08:15:62:4a:c3:62:16:63:74:30:d6:8e:53:f1:
83:8d:7e:6f:79:a2:c5:9b:03:7a:e7:85:49:e7:3a:b1:4b:7b:
b9:d6:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 19:06:12 2024 by rpki-client on console-ams.rpki-client.org