Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0FxWjGJjUNNGGaIrG8ZaBz-cU5w.roa
File: 0FxWjGJjUNNGGaIrG8ZaBz-cU5w.roa (raw, json)
Hash identifier: ami8bLag9x/pztgHfugkGjmDuQesOEvoXeUxu4KKakA=
Subject key identifier: D0:5C:56:8C:62:63:50:D3:46:19:A2:2B:1B:C6:5A:07:3F:9C:53:9C
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018BBFFDB67C122B75570AC7BD7539ACA2FE
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0FxWjGJjUNNGGaIrG8ZaBz-cU5w.roa
Signing time: Sat 11 Nov 2023 20:05:57 +0000
ROA not before: Sat 11 Nov 2023 20:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44714
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:bf:fd:b6:7c:12:2b:75:57:0a:c7:bd:75:39:ac:a2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 11 20:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d05c568c626350d34619a22b1bc65a073f9c539c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:a9:03:53:4d:9a:b9:ff:4a:99:14:0f:04:
1e:29:c4:10:ff:37:c2:25:b5:60:f3:d3:32:60:a5:
43:04:c0:2d:c1:cc:d2:ce:a9:5a:01:c7:c8:4f:a5:
1f:35:8e:25:e2:24:51:49:ef:d6:06:5b:b6:f4:b2:
fe:e6:63:25:37:44:c6:85:a3:79:36:bf:e2:0b:8f:
ce:03:b4:be:57:c4:76:64:a1:99:58:6e:ed:dc:b4:
ce:60:ac:4b:2a:ed:8b:85:62:2e:9c:c5:98:b8:ff:
2f:7e:75:1d:2f:8f:f8:9c:52:4e:b6:5a:34:a7:60:
04:8f:6b:18:c4:55:6a:e7:bf:7f:8d:e2:f7:62:a2:
4b:bb:e8:fb:39:ce:b5:48:54:b7:36:f5:52:1a:a6:
34:f5:9e:d2:fa:a8:5f:bd:56:55:87:13:ce:ba:ad:
0a:d2:78:6c:00:aa:28:65:58:15:2e:32:5e:7a:44:
39:ca:3f:3d:a5:f3:93:81:7e:08:4b:03:31:78:96:
1a:4f:87:0b:d2:f7:dc:2d:f8:98:9e:5e:3e:e3:f9:
84:c7:71:50:57:71:86:3f:71:4e:02:df:90:f5:05:
89:60:44:b5:b2:0c:8e:6e:c3:2b:77:3b:b1:d9:48:
33:9a:af:d0:c3:b3:74:f5:f3:28:80:bc:66:ec:9b:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5C:56:8C:62:63:50:D3:46:19:A2:2B:1B:C6:5A:07:3F:9C:53:9C
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0FxWjGJjUNNGGaIrG8ZaBz-cU5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
40:7d:29:3d:10:6b:32:3a:8c:49:d5:bd:0f:2d:45:3e:2b:14:
9b:2d:f0:ee:39:3b:d8:2a:8f:f3:76:5d:ee:46:4f:77:f9:ed:
95:7d:df:7d:af:f8:8b:f0:7e:8b:43:d5:8d:06:5f:48:5a:f0:
79:b1:fb:b1:24:6f:7d:c3:c5:18:8a:78:d6:ab:a9:13:4f:90:
7e:6e:24:e5:69:9c:74:e0:e2:11:b6:25:db:0e:54:3a:de:9c:
b3:24:05:3e:bb:67:73:12:af:d9:d9:11:e8:af:1d:17:cd:32:
e4:62:a6:57:87:32:37:a9:97:91:09:6c:14:dd:0f:98:27:b9:
a0:96:c7:2f:f8:2d:13:42:55:86:9b:5f:6a:6e:82:c5:6d:df:
df:8e:97:53:36:44:40:28:30:f9:82:ec:28:9f:ef:e5:b3:54:
52:0c:ba:75:bc:d9:74:0a:60:db:7e:e6:b7:4b:37:75:e9:a7:
f8:a5:ea:3a:17:3c:4d:32:13:40:d9:c8:70:f7:a5:d2:b0:73:
dc:08:d0:9c:5f:23:5a:75:a5:4f:ba:1e:6d:a7:96:e6:06:e4:
da:66:1e:51:9d:e0:7e:ba:03:63:b3:d9:cd:4a:0f:e5:c6:1b:
5b:27:e7:35:a0:a1:b2:32:13:05:b5:6c:eb:54:b6:9c:de:f8:
4e:70:b7:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYu//bZ8Eit1VwrHvXU5rKL+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMTExMjAwNTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDVjNTY4YzYyNjM1MGQzNDYxOWEyMmIxYmM2NWEwNzNmOWM1MzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAypA1NNmrn/SpkUDwQeKcQQ/zfC
JbVg89MyYKVDBMAtwczSzqlaAcfIT6UfNY4l4iRRSe/WBlu29LL+5mMlN0TGhaN5
Nr/iC4/OA7S+V8R2ZKGZWG7t3LTOYKxLKu2LhWIunMWYuP8vfnUdL4/4nFJOtlo0
p2AEj2sYxFVq579/jeL3YqJLu+j7Oc61SFS3NvVSGqY09Z7S+qhfvVZVhxPOuq0K
0nhsAKooZVgVLjJeekQ5yj89pfOTgX4ISwMxeJYaT4cL0vfcLfiYnl4+4/mEx3FQ
V3GGP3FOAt+Q9QWJYES1sgyObsMrdzux2Ugzmq/Qw7N09fMogLxm7Js9uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNBcVoxiY1DTRhmiKxvGWgc/nFOcMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvMEZ4V2pHSmpVTk5HR2FJckc4WmFCei1jVTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+QPMA0G
CSqGSIb3DQEBCwUAA4IBAQBAfSk9EGsyOoxJ1b0PLUU+KxSbLfDuOTvYKo/zdl3u
Rk93+e2Vfd99r/iL8H6LQ9WNBl9IWvB5sfuxJG99w8UYinjWq6kTT5B+biTlaZx0
4OIRtiXbDlQ63pyzJAU+u2dzEq/Z2RHorx0XzTLkYqZXhzI3qZeRCWwU3Q+YJ7mg
lscv+C0TQlWGm19qboLFbd/fjpdTNkRAKDD5guwon+/ls1RSDLp1vNl0CmDbfua3
Szd16af4peo6FzxNMhNA2chw96XSsHPcCNCcXyNadaVPuh5tp5bmBuTaZh5RneB+
ugNjs9nNSg/lxhtbJ+c1oKGyMhMFtWzrVLac3vhOcLee
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:32 2024 by rpki-client on console-fra.rpki-client.org