Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0CWM9baCdMBMjw08iStoE4XtwXA.roa
File: 0CWM9baCdMBMjw08iStoE4XtwXA.roa (raw, json)
Hash identifier: hPWlXwt2TQ0EH4Vjmmdn1BeiMdC06+p37sG9QHyzclk=
Subject key identifier: D0:25:8C:F5:B6:82:74:C0:4C:8F:0D:3C:89:2B:68:13:85:ED:C1:70
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018D311FEB7132684B6F521A94B2646E0145
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0CWM9baCdMBMjw08iStoE4XtwXA.roa
Signing time: Mon 22 Jan 2024 12:23:11 +0000
ROA not before: Mon 22 Jan 2024 12:23:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 11:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:1f:eb:71:32:68:4b:6f:52:1a:94:b2:64:6e:01:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 22 12:23:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0258cf5b68274c04c8f0d3c892b681385edc170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:80:38:a5:cd:37:8e:6c:55:17:6c:e6:97:
d5:a3:f6:81:ca:b9:9f:44:85:92:5e:7e:35:50:62:
79:2c:91:99:87:9b:15:20:e0:4a:2f:93:0e:a9:f4:
66:24:1b:a6:45:3d:d5:f4:f9:ca:49:60:83:9a:06:
63:51:41:a5:92:84:3f:a8:51:b5:99:bc:4f:b6:d5:
6f:96:e4:1b:e2:9b:17:40:c9:fc:e8:55:38:7f:4f:
1b:8c:ac:79:3f:34:78:d2:eb:fa:80:20:0a:b7:cb:
47:bd:5b:96:59:36:17:fe:e4:68:f4:34:5a:0a:1d:
fa:36:78:a1:75:1a:d1:d9:55:7f:11:23:78:06:fa:
99:9f:30:b8:f7:68:76:53:37:a9:4f:05:b4:3f:51:
97:a7:a4:e5:bc:ed:75:92:a2:03:f9:af:44:be:a2:
1e:6d:66:50:4d:09:78:65:6a:59:ef:13:f3:36:72:
0e:02:99:f4:30:74:e8:32:f8:a4:e3:24:e3:fc:07:
f0:ce:98:a7:5e:d3:61:29:28:7b:50:db:af:5e:60:
b1:60:c9:cb:44:95:f7:20:73:28:5b:a3:79:31:85:
bd:e4:b6:44:d0:0a:b9:bc:7a:87:0b:de:71:79:71:
30:46:1b:01:d6:3f:d1:20:a6:4d:a1:90:10:71:00:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:25:8C:F5:B6:82:74:C0:4C:8F:0D:3C:89:2B:68:13:85:ED:C1:70
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0CWM9baCdMBMjw08iStoE4XtwXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.34.0-94.154.37.255
Signature Algorithm: sha256WithRSAEncryption
6d:d1:9c:a7:36:15:9a:c8:b3:55:fd:40:55:1c:65:87:8d:38:
48:65:17:cd:bb:f3:75:cd:4f:6e:16:f8:30:52:00:99:14:be:
60:57:9e:ab:1f:16:57:c7:ca:6c:48:e2:ef:7e:a7:c9:95:98:
ad:89:8b:62:42:65:c4:1a:3d:f1:f7:78:09:8f:4d:24:d0:c2:
94:b1:d4:97:c4:6d:d4:5f:73:07:0c:0f:a5:6b:36:ca:74:24:
dc:96:9b:8f:19:a3:d5:3d:7d:6f:87:0b:f9:3d:1b:28:e2:37:
31:92:13:67:ce:0c:fa:f7:fc:9d:6a:12:83:fa:31:8e:90:33:
b4:5b:61:5a:b8:ea:6a:e2:9c:b3:7f:2a:b1:57:cd:bd:a4:e7:
31:c1:c4:a2:15:77:fd:2e:7f:6c:ab:fd:42:ee:95:3e:f9:3d:
d4:fd:49:60:bb:ee:07:3e:38:6c:4f:29:96:d8:81:61:5d:91:
4a:30:1c:25:ad:bb:b6:1f:68:2c:fe:56:14:3a:96:1e:0e:93:
3c:a1:c7:fd:ce:94:95:14:c5:0b:4f:dc:5c:8b:0f:61:05:ec:
ac:d2:40:57:b1:75:af:f1:8b:94:c9:cc:98:ad:71:e7:a8:41:
9b:fb:cd:db:ed:b7:09:f8:f4:3a:8f:47:13:6c:f2:5c:c5:2c:
ae:25:de:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jan 24 16:05:56 2024 by rpki-client on console-fra.rpki-client.org