Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pcFi9hQt7SRUDaXHrdVJAyNxfiQ.roa
File: pcFi9hQt7SRUDaXHrdVJAyNxfiQ.roa (raw, json)
Hash identifier: wRjuTsgrwjLDJYdtTHEoI86aR07rL7VNUH4IImcBJac=
Subject key identifier: A5:C1:62:F6:14:2D:ED:24:54:0D:A5:C7:AD:D5:49:03:23:71:7E:24
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A79430F520FD7BF23B52CAE6B3465465C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pcFi9hQt7SRUDaXHrdVJAyNxfiQ.roa
Signing time: Sat 09 Sep 2023 09:25:52 +0000
ROA not before: Sat 09 Sep 2023 09:25:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 77.90.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:79:43:0f:52:0f:d7:bf:23:b5:2c:ae:6b:34:65:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Sep 9 09:25:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c162f6142ded24540da5c7add5490323717e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:a6:4b:23:15:59:41:fb:5b:ca:64:ad:a6:
ad:85:9b:17:a9:1b:e3:a6:b7:a1:18:81:ca:49:20:
31:10:9e:d4:55:5b:c2:d7:9e:17:54:c1:72:17:a8:
87:c1:75:a7:13:e3:89:47:20:6b:9a:5e:8b:0f:f8:
c1:26:93:57:56:34:25:3e:c6:05:f7:46:4c:db:90:
71:b0:66:83:0b:62:15:28:e1:ae:82:c5:87:ec:cb:
33:3b:9a:e6:41:06:11:4c:ba:d6:c3:a1:cd:41:99:
5b:72:c4:1c:9c:d8:e5:43:20:1b:3b:3f:51:16:df:
4a:42:0c:e8:5f:7a:12:b6:62:53:8c:70:5b:91:ba:
b4:ef:0b:3d:0d:48:ee:40:41:84:54:68:34:13:90:
2c:6c:0a:37:7a:e9:cd:42:2c:97:28:33:1c:53:43:
8b:74:bb:0c:ac:d0:e8:9c:ff:aa:e2:47:80:3b:0c:
b0:46:26:13:17:19:90:1b:fb:2e:6f:e8:83:e1:9c:
79:f7:8e:a2:3a:b4:5d:6f:f3:2b:df:23:9a:b1:78:
4f:f0:44:86:e4:9d:55:01:64:7c:d5:02:da:9a:6b:
39:89:75:bf:24:76:a6:c8:00:ad:91:3f:c9:ce:64:
74:40:32:d7:b6:78:3e:53:c9:cb:9b:d6:8e:12:0b:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C1:62:F6:14:2D:ED:24:54:0D:A5:C7:AD:D5:49:03:23:71:7E:24
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/pcFi9hQt7SRUDaXHrdVJAyNxfiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:da:b5:6f:8e:e9:d8:eb:dc:f5:c1:90:79:88:00:b6:88:7b:
ab:a8:62:35:45:b7:5d:9d:9d:0a:66:8d:f1:44:03:f2:5b:1c:
1c:f5:59:32:82:9d:47:bd:56:86:99:39:50:39:b9:c0:b7:8b:
84:1d:c4:df:4b:1d:b7:42:1b:f2:8d:63:c1:88:65:14:43:85:
9b:82:2d:83:0d:fb:77:28:6b:b4:03:44:46:58:1c:e7:c4:78:
3b:bc:05:25:cb:bb:42:b7:32:40:ec:1e:8a:73:af:7c:01:2a:
a6:6a:e7:34:05:7b:7c:fc:19:db:3d:68:48:ac:df:41:48:12:
41:a6:06:a6:11:f8:e3:f9:48:aa:5b:cf:f4:53:b4:06:c6:fa:
de:cd:97:9d:48:0e:30:e5:03:d2:68:0a:eb:73:35:69:5e:c3:
f1:ba:9e:33:3a:52:ad:1e:93:b2:ff:02:77:3b:65:9b:b0:f6:
2e:79:c6:83:b1:3f:40:e1:69:07:73:a8:ae:80:d3:7a:3a:4e:
17:41:88:96:cb:58:2d:a3:2a:88:80:07:89:ec:a3:54:b7:65:
a3:be:12:ab:3d:eb:b9:11:f5:a6:aa:59:87:73:87:60:47:99:
5f:54:5e:2f:8c:bd:6e:7e:b7:71:dd:f8:70:c8:21:1d:37:ad:
fa:d8:5b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 15:51:21 2023 by rpki-client on console-ams.rpki-client.org