Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/q7vz0MWL_CElv8p1db7h0RvfqU8.roa
File: q7vz0MWL_CElv8p1db7h0RvfqU8.roa (raw, json)
Hash identifier: CfXGFaWE3SzaRx9UQ0Ojnhl/6zuHuU+rGDxFzq8BgcM=
Subject key identifier: AB:BB:F3:D0:C5:8B:FC:21:25:BF:CA:75:75:BE:E1:D1:1B:DF:A9:4F
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018A4D8916E11C1ADE950CD7F169D10DA2A4
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/q7vz0MWL_CElv8p1db7h0RvfqU8.roa
Signing time: Thu 31 Aug 2023 21:39:04 +0000
ROA not before: Thu 31 Aug 2023 21:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.90.138.0/24 maxlen: 24
185.230.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:89:16:e1:1c:1a:de:95:0c:d7:f1:69:d1:0d:a2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 31 21:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=abbbf3d0c58bfc2125bfca7575bee1d11bdfa94f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:6e:7a:c6:16:d3:b5:71:12:ab:9e:30:83:
55:2f:de:4f:67:a5:4f:e0:22:4d:f9:59:fa:5b:94:
4f:a2:bb:44:ba:44:a8:27:12:96:de:0b:a6:b5:8b:
43:10:1c:93:ac:7f:b2:26:5d:8c:d1:d7:52:d1:60:
b3:ce:88:63:d5:ee:b3:14:1e:1b:2f:e7:29:a2:96:
bf:85:c6:d7:d6:60:4c:b0:87:9b:97:c8:63:41:52:
0b:d4:fc:64:04:4d:20:48:b3:b3:e2:35:29:1f:0c:
a6:4d:fe:bb:54:3f:64:23:82:9d:55:4c:f9:9d:e2:
02:7b:d8:9e:75:1f:d9:27:d0:a7:c3:23:20:81:d2:
d7:ad:0e:66:e2:32:75:9a:59:bf:02:df:4c:34:84:
5d:89:74:88:69:cf:df:b1:58:06:2d:a1:35:5e:f9:
68:3c:67:e6:35:f3:3a:d1:ed:34:f0:00:8c:31:5d:
62:ae:76:d3:c8:3f:b8:d6:c7:2f:f4:0a:d7:fa:5d:
d3:60:22:a3:2f:48:cb:f6:84:ca:aa:6a:bb:38:23:
f8:cd:7b:4e:7b:0f:4f:94:3e:e1:90:d9:89:7a:39:
04:33:fe:06:a1:fc:7c:50:ac:72:9a:0a:1d:3f:05:
14:ff:1c:7a:b6:80:60:7f:98:e6:f9:e6:23:9c:0c:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:F3:D0:C5:8B:FC:21:25:BF:CA:75:75:BE:E1:D1:1B:DF:A9:4F
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/q7vz0MWL_CElv8p1db7h0RvfqU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.138.0/24
185.230.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d9:44:0a:e3:04:cb:e9:1f:f9:02:05:a5:20:c4:13:99:e3:
6f:c3:f1:df:24:a5:8a:7d:30:d1:20:94:f7:4c:5d:58:63:04:
c5:38:42:62:e9:de:6e:c7:69:76:9a:73:d2:a7:11:b8:8b:01:
ea:3a:53:ff:15:76:2f:e6:0e:fd:43:5d:6a:a2:74:7f:e2:98:
73:a6:67:13:20:6f:75:4a:e2:48:81:8c:8f:6a:c2:90:97:ad:
95:bd:0d:3d:80:ba:02:77:5a:4a:fb:cc:d6:0f:de:37:6e:35:
51:3e:61:d3:94:f9:5f:6c:7b:e6:84:b2:71:15:02:f7:2a:6f:
d9:0a:6e:a7:ec:68:a0:3b:06:16:1a:9a:e1:40:9f:e7:33:90:
b2:43:d8:ef:89:c0:cd:08:3b:9d:75:bb:24:4a:a3:43:bd:25:
6d:16:c2:25:97:6c:31:86:96:ec:df:56:6b:c3:6d:c3:1c:da:
13:81:3f:dc:a9:68:77:8f:b6:30:c1:11:90:b0:23:13:c3:6a:
a2:c2:c1:84:9e:5d:36:f1:d6:18:db:19:71:41:2b:58:ea:d1:
21:70:b0:af:31:59:31:c9:d3:17:17:66:43:39:13:7f:57:1d:
d8:d7:a8:f3:1b:1d:43:d0:7d:dc:20:5c:ee:94:fd:18:09:b8:
75:e5:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 09:31:15 2023 by rpki-client on console-fra.rpki-client.org