Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s3nxSK-hCXtCSa6T8XfeD6_aC1U.roa
File: s3nxSK-hCXtCSa6T8XfeD6_aC1U.roa (raw, json)
Hash identifier: GO/HcUVxcKp9eEKAj3/HhXMvs6Tad5ZbWNTcBW7UsDo=
Subject key identifier: B3:79:F1:48:AF:A1:09:7B:42:49:AE:93:F1:77:DE:0F:AF:DA:0B:55
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 018977ABFC50D3504A554D162434A8443C9C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s3nxSK-hCXtCSa6T8XfeD6_aC1U.roa
Signing time: Fri 21 Jul 2023 08:58:27 +0000
ROA not before: Fri 21 Jul 2023 08:58:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 77.90.145.0/24 maxlen: 24
77.90.154.0/24 maxlen: 24
185.230.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:77:ab:fc:50:d3:50:4a:55:4d:16:24:34:a8:44:3c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jul 21 08:58:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b379f148afa1097b4249ae93f177de0fafda0b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:08:7e:bc:d2:e5:a8:1f:80:01:42:7b:5b:58:
bd:96:23:2b:0b:41:84:7f:ea:ac:61:42:23:5c:02:
fc:bd:50:91:e2:56:e6:f0:c5:57:c2:97:e0:fe:bb:
0e:0f:96:16:6b:6a:17:95:0a:fc:cd:27:63:e1:e9:
e9:af:a5:ea:59:74:2e:7b:47:43:ef:a3:0d:8b:a6:
f5:36:58:00:7b:ed:93:cf:dd:ee:f0:b9:dc:30:07:
65:c4:dd:a3:3b:82:3f:cc:e4:29:a6:f6:b8:e5:ca:
84:c9:85:a2:1e:53:9c:9d:fc:e8:b1:9f:4b:6f:f0:
b5:af:4c:c6:76:c6:70:db:05:e7:99:62:10:f1:d2:
5b:f2:a1:30:93:ab:a7:ea:66:7b:87:98:10:13:d9:
73:6c:76:fa:23:5a:41:dc:a7:6f:87:fe:ee:04:38:
e3:69:18:3a:a6:1d:0c:3e:d6:31:4a:81:0f:c5:fd:
36:e3:7d:4d:43:ec:cc:57:dd:c9:67:75:72:93:b6:
10:15:ea:8b:6a:66:6f:91:aa:d1:1d:68:4e:9c:32:
6a:55:f9:1c:ca:95:06:81:3a:e4:39:3c:bf:cd:87:
b8:e3:16:1b:3c:c4:be:6e:94:d2:db:8f:f6:76:cc:
ef:3d:63:3c:ad:80:56:b6:69:cb:39:1a:78:6b:fe:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:79:F1:48:AF:A1:09:7B:42:49:AE:93:F1:77:DE:0F:AF:DA:0B:55
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/s3nxSK-hCXtCSa6T8XfeD6_aC1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.145.0/24
77.90.154.0/24
185.230.13.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:91:d4:8b:6d:a6:cd:fc:94:86:2a:e7:ae:f5:9a:bc:77:
a2:25:06:c8:22:d7:f5:3b:99:4c:ed:fd:85:5b:b1:f2:de:0a:
5c:4a:a5:0e:35:c2:27:56:75:e3:92:bf:9b:d7:b0:d6:1d:ba:
f2:43:a3:d6:b4:43:e3:3d:f2:11:c4:6c:e1:51:63:0e:0e:8e:
22:a8:5f:0e:7b:34:9d:26:35:aa:ba:39:74:30:59:85:c9:8f:
c0:11:d0:fe:a3:a7:19:c4:18:58:4f:39:bd:d9:35:a0:c0:f0:
02:13:1a:f8:86:58:17:88:35:9a:fe:86:4f:67:2d:09:21:65:
9e:90:20:71:77:8c:d8:89:7d:fc:ca:5d:46:70:77:cd:1d:96:
0c:aa:91:38:10:9c:c2:60:c6:7a:81:4c:1b:0d:e9:1c:f1:f3:
8a:2c:1c:c9:7e:e3:a3:85:57:c0:bc:f3:34:80:e4:b7:76:42:
09:ae:f4:ef:2c:2b:cb:74:a5:b2:d6:16:f5:d2:f4:cf:ad:91:
f7:df:d2:52:2f:9d:53:5e:6d:d2:98:fb:5e:c3:82:df:d1:5c:
7a:e1:93:f9:d9:55:b8:a7:ea:78:86:18:25:22:72:b2:73:55:
99:20:38:50:58:f0:2e:69:55:32:38:11:b0:ed:40:87:2b:0a:
b4:09:87:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 10:50:59 2023 by rpki-client on console-ams.rpki-client.org