Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n5rck3G2Gfc8vXUtgDOVIbl7bik.roa
File: n5rck3G2Gfc8vXUtgDOVIbl7bik.roa (raw, json)
Hash identifier: DxoeAQ1q37yJrAf1Rb/R7IX2omnLJuy4fBudNYIavkY=
Subject key identifier: 9F:9A:DC:93:71:B6:19:F7:3C:BD:75:2D:80:33:95:21:B9:7B:6E:29
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 0190A58DD5B3FA78A94D721AE3B3FDCD905B
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n5rck3G2Gfc8vXUtgDOVIbl7bik.roa
Signing time: Fri 12 Jul 2024 06:07:34 +0000
ROA not before: Fri 12 Jul 2024 06:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 77.246.211.0/24 maxlen: 24
88.80.135.0/24 maxlen: 24
194.79.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 10:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a5:8d:d5:b3:fa:78:a9:4d:72:1a:e3:b3:fd:cd:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 12 06:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f9adc9371b619f73cbd752d80339521b97b6e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:55:5e:13:03:eb:5c:9c:47:fa:f8:b1:40:0f:
e0:55:cd:87:2b:3f:0b:73:17:c9:92:de:91:42:a9:
af:84:58:0d:c5:2a:12:76:5e:67:e2:02:47:92:f2:
f8:a8:35:ea:53:97:23:0d:c5:1c:a2:d9:2b:be:6a:
c5:d2:c0:dc:4c:03:57:d5:31:79:6b:55:de:13:73:
57:49:38:a8:b8:82:af:ab:90:c6:77:47:c6:d1:8f:
eb:0f:3a:65:a6:c1:cb:6d:64:a2:b9:e4:95:4f:3e:
e4:c3:49:75:75:fb:6a:be:70:17:4a:9c:12:38:34:
b4:9b:1d:35:3b:95:93:2f:73:d8:34:de:8c:db:a6:
89:a1:30:34:71:d3:95:47:cc:c7:ef:4f:85:06:62:
42:a4:fd:a2:70:60:b6:56:47:f8:c9:c5:29:16:53:
8a:ba:75:b1:36:0f:92:9b:44:c7:f7:b6:60:52:51:
5b:99:46:66:5f:74:79:7f:73:dc:c2:0d:87:bc:83:
44:01:03:78:8a:4f:7a:83:46:5f:07:cb:52:ab:66:
09:bf:18:57:42:9b:cc:6f:88:e8:01:58:23:0d:31:
e1:84:3c:47:29:8f:c6:c6:d0:0d:79:aa:41:2a:e3:
21:68:d4:df:25:f2:fc:88:44:ca:66:4d:e8:92:14:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9A:DC:93:71:B6:19:F7:3C:BD:75:2D:80:33:95:21:B9:7B:6E:29
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/n5rck3G2Gfc8vXUtgDOVIbl7bik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
88.80.135.0/24
194.79.15.0/24
Signature Algorithm: sha256WithRSAEncryption
23:bb:6d:58:9e:c4:a3:c9:29:ee:6e:e3:45:21:a7:b8:38:2e:
ce:65:a5:fd:49:af:db:49:99:2e:25:af:d0:20:03:62:c4:46:
6b:ef:e4:f0:1e:e4:07:bb:15:fd:c3:d4:b6:df:a9:d5:a6:5d:
1a:ea:4e:f7:3c:4e:55:eb:af:1b:9b:28:ff:a2:bd:d1:88:4f:
f9:84:28:f2:3c:e1:cc:8c:41:01:ae:a3:a7:04:cc:91:77:b3:
5d:d8:cb:63:0d:53:01:a2:cb:44:7d:02:01:f3:b4:57:cf:73:
be:1e:b7:aa:31:84:a8:d5:24:c1:35:54:72:c9:bc:bc:77:f6:
6a:e7:ed:56:7d:a5:d1:f8:2b:f2:b8:3b:23:7a:f0:00:a2:29:
18:d1:25:4b:3a:b2:61:c1:26:42:b6:cb:49:4d:ca:c7:52:d7:
80:09:c0:db:81:1c:2e:5c:e2:74:5d:78:12:47:95:9a:96:57:
61:42:41:18:69:44:79:03:91:c0:83:27:4a:4c:f3:ad:4b:a5:
5d:9f:9c:c8:ba:30:20:74:d4:39:bf:6d:b5:fe:e6:10:93:5a:
13:6d:ae:54:0e:a8:b3:71:77:e4:0d:a9:b1:7e:a5:9d:88:43:
dd:8d:1f:f0:58:3c:a1:3b:48:07:20:d7:4a:28:f6:97:14:e3:
44:78:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 12:56:43 2024 by rpki-client on console-ams.rpki-client.org