Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/19cWVJOzjrz9Q8jZ5IknmqYKTaM.roa
File: 19cWVJOzjrz9Q8jZ5IknmqYKTaM.roa (raw, json)
Hash identifier: xZjBQjg8xBQSJ0Y/pkUKR1QsOOhP3TsF8QsKdnKmwRU=
Subject key identifier: D7:D7:16:54:93:B3:8E:BC:FD:43:C8:D9:E4:89:27:9A:A6:0A:4D:A3
Certificate issuer: /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial: 01926D940C5BDC567563B847934F33DCEC24
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/19cWVJOzjrz9Q8jZ5IknmqYKTaM.roa
Signing time: Tue 08 Oct 2024 19:21:11 +0000
ROA not before: Tue 08 Oct 2024 19:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34120
IP address blocks: 77.90.64.0/21 maxlen: 24
77.90.72.0/22 maxlen: 24
77.90.73.0/24 maxlen: 24
77.90.76.0/22 maxlen: 24
77.90.80.0/22 maxlen: 24
77.90.94.0/23 maxlen: 24
77.90.96.0/23 maxlen: 24
77.90.98.0/24 maxlen: 24
77.90.100.0/23 maxlen: 24
77.90.104.0/21 maxlen: 24
77.90.112.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6d:94:0c:5b:dc:56:75:63:b8:47:93:4f:33:dc:ec:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Validity
Not Before: Oct 8 19:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7d7165493b38ebcfd43c8d9e489279aa60a4da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:56:21:29:04:de:47:e5:12:ab:0e:d5:6b:
94:81:49:cb:89:71:67:47:55:45:24:73:32:20:67:
91:4b:c3:06:ca:d3:fe:53:00:79:88:82:31:ac:f8:
0f:21:69:76:1d:11:ff:41:2c:ea:ee:41:90:5f:0f:
86:13:d9:52:d2:f2:a8:9b:14:8f:4f:66:d5:c9:99:
f0:2d:19:1b:10:c9:a6:91:62:06:5a:ae:b6:77:94:
12:e3:ba:49:a5:7e:e2:fe:79:c7:14:8b:47:53:a6:
2c:8f:fd:92:15:65:54:05:56:4a:5c:8a:9a:97:83:
98:90:bd:70:1b:1c:ef:e7:20:3f:f1:b9:62:60:71:
ff:0e:f1:3a:fe:f4:5b:a5:ea:6d:63:75:1f:bb:a2:
5c:dc:90:ec:99:25:67:17:3d:1a:35:a3:e8:1f:ab:
77:fc:20:11:a9:59:f2:3a:63:61:93:f2:88:4a:4d:
1f:11:d6:84:65:07:e2:5e:c8:ff:0a:8f:d6:ad:a5:
b6:1b:f4:c7:9c:c6:ae:13:b9:51:c9:76:01:28:db:
20:66:8d:f5:54:9c:e8:4c:54:6c:ac:81:78:55:08:
8f:f2:5b:bc:7f:c2:74:09:36:e5:1e:aa:1d:7e:13:
e7:49:01:63:78:a2:9b:25:0c:80:6e:50:74:e9:1e:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:16:54:93:B3:8E:BC:FD:43:C8:D9:E4:89:27:9A:A6:0A:4D:A3
X509v3 Authority Key Identifier:
keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/19cWVJOzjrz9Q8jZ5IknmqYKTaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.64.0-77.90.83.255
77.90.94.0-77.90.98.255
77.90.100.0/23
77.90.104.0-77.90.127.255
Signature Algorithm: sha256WithRSAEncryption
7b:59:86:13:e2:23:5e:75:c0:10:c9:73:27:bc:91:d6:de:c7:
7b:c1:75:6a:b4:f3:9d:af:0b:7e:04:45:d5:49:93:09:de:6e:
d3:a9:4a:fd:a4:0e:21:05:13:d5:06:0c:00:66:95:79:f5:6a:
63:ef:22:9f:dc:83:41:54:33:b2:de:d7:73:68:d9:1e:0b:da:
3b:e4:f2:9d:98:fa:3e:3e:cb:eb:5c:bb:29:e0:72:56:f3:9c:
f4:5a:c3:1e:73:77:59:7b:f9:92:98:48:28:8f:27:b5:1d:ca:
9c:b4:58:ed:23:8a:94:79:bc:e3:03:95:a0:21:a4:7c:b8:66:
40:69:f7:d7:18:7a:df:bf:a3:8a:66:f5:fd:81:00:42:4b:dc:
97:7c:bd:73:65:84:64:1b:f0:d5:43:79:80:90:23:39:6a:72:
11:9f:c7:4b:58:e3:9f:f3:46:8f:e8:ac:a0:65:1c:fe:a1:73:
00:7b:a8:05:1e:1e:eb:7c:af:ce:aa:58:4b:03:80:6a:a3:0c:
c9:db:05:4e:e8:6c:16:9e:af:57:1f:f0:bd:7a:26:73:53:be:
cd:ea:5a:03:7f:6d:e6:94:11:96:47:13:85:e4:b8:81:dd:7c:
07:b1:8b:0f:ff:86:bf:19:27:1e:7a:6c:4b:a1:4e:36:85:70:
99:d2:19:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:41 2025 by rpki-client