Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/w2DAPHKVpFaZ9RZIv19FsXJ0-VE.roa
File: w2DAPHKVpFaZ9RZIv19FsXJ0-VE.roa (raw, json)
Hash identifier: 2bGHR0a5H2bfhVCoF5utx9TOOrW3XUtWRI1LqeXLrRw=
Subject key identifier: C3:60:C0:3C:72:95:A4:56:99:F5:16:48:BF:5F:45:B1:72:74:F9:51
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 01856F8258192A1F5E98E10ACBA32701520F
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/w2DAPHKVpFaZ9RZIv19FsXJ0-VE.roa
Signing time: Sun 01 Jan 2023 22:44:51 +0000
ROA not before: Sun 01 Jan 2023 22:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 77.90.131.0/24 maxlen: 24
77.90.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:58:19:2a:1f:5e:98:e1:0a:cb:a3:27:01:52:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jan 1 22:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c360c03c7295a45699f51648bf5f45b17274f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d7:72:2e:6c:60:ee:67:94:66:0d:fa:2c:67:
cc:f8:e9:4b:22:6a:88:b6:cc:20:df:b4:c1:25:4f:
80:8c:59:0b:19:8f:9d:38:6b:64:aa:48:05:b9:e3:
a9:b1:b4:48:fb:93:73:54:64:d7:97:0c:c8:54:b5:
5e:1d:c4:d7:74:13:65:a0:e3:26:0d:c4:da:2b:68:
f8:b9:ee:67:a4:0b:67:2d:0d:2b:67:50:4d:95:71:
6d:44:3c:40:43:0b:3c:2a:82:db:95:5d:50:86:fb:
5b:7f:04:77:93:da:bd:ca:9a:48:39:b1:13:51:44:
d2:37:30:c3:86:88:9c:8e:eb:6d:64:b3:4e:bb:27:
d4:d1:d5:7f:9b:08:e9:2f:c3:ab:c8:f9:9d:6a:78:
95:80:9b:44:d0:8c:ab:7a:f4:e7:0a:01:b4:69:bf:
58:26:91:8f:2f:4f:84:12:18:4e:dd:0e:8e:78:b0:
f3:ce:c9:5e:b5:d3:70:80:c6:45:d8:55:01:fe:dd:
cd:88:f5:27:7e:a3:7f:c1:a5:de:9d:f7:4b:b5:7d:
9c:db:e5:47:0f:43:6b:c0:a9:f3:0a:10:75:71:f6:
77:93:b4:ba:17:e3:3e:1c:de:17:ca:c5:f4:87:9f:
c8:bf:5f:2f:bf:9c:06:75:00:5c:ed:ca:7a:bc:87:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:60:C0:3C:72:95:A4:56:99:F5:16:48:BF:5F:45:B1:72:74:F9:51
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/w2DAPHKVpFaZ9RZIv19FsXJ0-VE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.131.0/24
77.90.141.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f9:65:c6:1b:8d:8e:6d:14:92:77:d7:9e:24:81:ba:77:7a:
26:d0:b6:0c:c6:de:a0:d3:92:2f:c3:0a:48:de:53:5a:c8:5d:
75:0c:8d:42:57:37:2d:88:37:11:b4:57:38:70:0f:04:89:a2:
c0:5e:65:b1:7d:eb:1e:c3:fd:44:30:e4:bd:b4:b2:f4:f9:6c:
86:6b:b4:0e:38:c0:2d:d6:a6:11:4f:b1:5c:bf:65:1f:bc:69:
38:c9:10:f9:dc:c4:36:69:0c:cb:7f:7f:cf:af:32:51:c3:60:
48:97:42:5a:47:30:09:6c:21:2e:41:35:75:cc:9d:7f:c1:d1:
31:33:79:54:a1:20:e3:2d:c5:d1:f6:f0:70:b9:ed:d0:ba:33:
73:a6:14:3b:ea:c2:cb:a2:4b:b4:22:d4:17:ae:98:4b:ed:23:
af:6d:86:30:d4:82:5a:7c:b8:31:dc:dc:81:f7:d1:0d:88:ec:
88:3d:8c:3d:d7:ec:ae:e4:a2:15:32:0f:57:a0:00:f5:ba:f3:
bc:3d:e8:4b:af:7e:14:b1:61:88:06:06:02:13:65:12:d9:ee:
45:9a:e1:af:bc:e6:2f:97:37:7f:76:2a:6f:0a:de:4d:3d:6d:
cd:19:61:ea:c6:4d:03:8b:ab:e5:91:21:51:fd:19:f7:ab:73:
5c:96:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:02 2024 by rpki-client on console-ams.rpki-client.org