Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kmEHiG6Eg9rhpTNHQy4bLTwhr9g.roa
File: kmEHiG6Eg9rhpTNHQy4bLTwhr9g.roa (raw, json)
Hash identifier: vRQ62zb6ZnvM9T4Mno9Y7mNpimOF5iJlmYVl97f3mbA=
Subject key identifier: 92:61:07:88:6E:84:83:DA:E1:A5:33:47:43:2E:1B:2D:3C:21:AF:D8
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0192B994E9C292EE8BDA402B9D34E22C685C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kmEHiG6Eg9rhpTNHQy4bLTwhr9g.roa
Signing time: Wed 23 Oct 2024 13:33:16 +0000
ROA not before: Wed 23 Oct 2024 13:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
213.209.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:07:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:94:e9:c2:92:ee:8b:da:40:2b:9d:34:e2:2c:68:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Oct 23 13:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=926107886e8483dae1a53347432e1b2d3c21afd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:d7:66:c8:d8:3f:16:4e:0e:a6:cc:5f:c4:
8f:62:f6:64:8f:a6:0e:f5:53:db:57:b8:91:03:05:
a4:55:f3:ca:6b:d5:0e:e5:96:fc:c1:48:09:72:de:
dc:97:4c:75:e8:39:a2:c8:19:f2:87:c9:20:8c:3d:
27:90:67:25:67:9e:85:f9:0b:f0:e8:01:f0:32:1b:
ca:57:61:d7:7b:a1:66:70:6a:86:91:cd:3e:8b:ea:
b8:1a:30:3c:4c:94:20:53:41:d8:2d:55:d4:fb:06:
82:1f:42:52:e6:36:23:dd:1f:95:60:69:4a:56:bc:
3c:0a:e4:8d:46:78:2e:62:77:24:70:05:56:82:fd:
1e:7b:b9:88:6c:12:74:a0:a8:a3:44:db:fa:65:b0:
68:89:2a:e1:d5:17:5d:79:d6:76:49:03:e8:3a:a3:
03:d7:2a:f4:f1:b5:77:bd:3a:a4:ea:32:b0:e1:76:
6e:01:ca:4a:f6:bd:d0:85:d0:b3:0a:9d:e0:b7:63:
e6:c7:83:6c:18:2e:ee:8b:4e:a7:2c:e4:b8:4c:a4:
4a:05:c1:78:8d:c0:a3:ed:25:61:0c:0f:01:d0:e6:
0b:bc:34:d4:a3:d6:66:49:7c:29:4e:78:87:87:87:
33:b7:c0:83:a0:92:33:ea:f0:ba:37:90:ab:18:b2:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:07:88:6E:84:83:DA:E1:A5:33:47:43:2E:1B:2D:3C:21:AF:D8
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/kmEHiG6Eg9rhpTNHQy4bLTwhr9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.188.0/24
185.230.15.0/24
213.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
13:85:1c:f6:ad:e9:d9:29:35:c1:b5:f9:da:0e:e3:41:3b:b8:
d6:72:b6:42:1c:17:02:2e:0f:f6:51:70:31:75:03:8b:87:39:
78:04:0b:67:4c:9a:34:09:1d:31:d0:01:4c:9a:2d:66:4e:8d:
4c:7e:b5:36:e4:dd:d2:89:7f:b0:28:a1:f1:cc:17:01:45:26:
bf:a6:04:51:81:55:7e:ed:82:a5:46:f2:91:8e:a2:37:bf:8b:
f8:db:d3:30:56:00:c2:59:74:79:3b:1a:a8:49:2f:4b:34:4a:
43:90:a4:49:4f:9d:6c:31:f6:c9:2b:51:89:d9:d2:c8:a8:88:
3d:12:a6:c3:d1:af:fe:73:36:74:4e:2f:ca:52:cf:e2:54:e6:
c8:d9:19:b2:eb:09:9d:10:e3:94:a1:ee:ef:81:54:14:70:20:
e1:51:dc:d4:5b:92:40:71:cd:54:1b:75:16:da:18:0f:37:0f:
10:c5:e6:93:d3:e8:0e:a4:0b:ec:cb:14:5b:d2:c4:62:68:4d:
12:39:d5:ef:8a:18:ac:00:07:a2:eb:6d:16:b3:23:34:af:70:
37:e6:93:93:29:95:93:31:22:1e:a6:2c:18:b6:04:e1:b4:a3:
36:7e:03:d9:5a:60:c3:42:d0:0a:ff:c6:23:4f:9c:6b:02:df:
4c:5e:d5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 13:01:07 2024 by rpki-client on console-fra.rpki-client.org