Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0Hncxsfi5bgHyWRepffZ4liCIDc.roa
File: 0Hncxsfi5bgHyWRepffZ4liCIDc.roa (raw, json)
Hash identifier: NGYKtj4Rok3WK8+okbkSoqE1eX7r/kfY851B+GPywWc=
Subject key identifier: D0:79:DC:C6:C7:E2:E5:B8:07:C9:64:5E:A5:F7:D9:E2:58:82:20:37
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CB231D032ADFEB4B3249C7AFEBE6D2473
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0Hncxsfi5bgHyWRepffZ4liCIDc.roa
Signing time: Thu 28 Dec 2023 20:50:58 +0000
ROA not before: Thu 28 Dec 2023 20:50:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b2:31:d0:32:ad:fe:b4:b3:24:9c:7a:fe:be:6d:24:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Dec 28 20:50:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d079dcc6c7e2e5b807c9645ea5f7d9e258822037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:14:9b:9c:f2:42:09:ce:ed:22:dc:bb:88:
db:d1:be:af:ee:64:f1:88:db:68:fd:24:d4:70:4c:
ea:50:88:fe:f9:7d:85:96:0e:cf:d4:d8:f2:19:d9:
2e:be:5c:0c:91:71:78:a7:d6:57:59:5f:4c:7d:af:
9c:55:57:27:44:8c:46:7a:d1:a8:4f:08:54:33:a8:
22:08:f3:cb:a7:43:80:25:48:3e:0d:02:69:ce:0e:
36:2f:f9:a5:21:a5:2f:77:2d:ae:90:7d:05:ef:4c:
95:c9:01:2d:99:5d:5b:42:fc:90:e3:f8:e9:31:07:
a3:7b:b7:2d:86:26:a7:44:b4:28:29:d0:cf:d9:ad:
1a:1a:d6:4b:99:88:ac:16:ef:4b:72:3f:59:5a:5d:
e0:f3:65:8f:20:bb:ca:3f:00:38:6c:08:e2:e2:1b:
14:3d:f8:ba:de:33:4f:1c:4e:e0:78:ef:bb:26:8a:
28:eb:a0:a6:dd:b1:22:8f:26:0f:de:59:ea:aa:96:
f0:d7:d4:ae:37:54:03:77:78:fc:cd:6e:36:bd:4d:
53:84:0d:83:59:24:07:37:9e:e4:c7:91:13:74:14:
8d:bb:1e:ed:63:d0:2c:fd:bc:f8:83:a2:5a:b2:49:
4e:d1:86:9d:58:08:a4:04:dc:56:bf:eb:e5:24:a5:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:79:DC:C6:C7:E2:E5:B8:07:C9:64:5E:A5:F7:D9:E2:58:82:20:37
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/0Hncxsfi5bgHyWRepffZ4liCIDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
25:3b:2f:2a:ec:a4:80:5e:bd:6d:2d:d3:91:83:d8:23:1e:2e:
cc:d5:25:dd:03:4b:33:2e:58:36:c0:d4:42:d4:84:01:7f:fe:
be:28:22:20:ca:55:25:1c:db:9e:8d:68:dd:6a:ec:bd:74:9d:
f7:1a:28:06:ea:6d:2e:a3:d8:ff:6d:0f:95:d9:ab:15:25:e8:
84:22:d4:49:4b:1e:67:3c:54:5d:d4:ab:24:59:81:2f:fe:db:
cb:62:72:c0:0f:77:21:1b:61:3e:0b:13:63:d8:73:69:3e:29:
98:d4:b3:08:95:d6:f2:60:58:af:a4:7c:5c:d0:c5:df:ea:b1:
23:45:42:d3:0b:6f:38:33:a8:52:5b:e6:19:0b:d0:d9:6e:89:
15:0a:eb:44:63:e5:9f:43:72:92:87:73:62:ac:5e:cd:88:aa:
39:c9:84:7b:0d:61:be:d5:7b:5e:bd:0d:37:c9:d9:30:4e:c1:
ce:b5:57:d1:d9:a6:aa:7b:2b:5f:c0:6b:5d:36:b0:9e:e9:e7:
5c:da:d2:b2:f7:ba:0d:4f:fe:a2:00:59:0a:33:b1:dc:94:10:
03:4a:e2:d0:4f:02:06:54:74:52:66:f0:98:f1:ed:2d:1d:67:
3c:7f:b6:c5:f5:01:b5:d4:b0:dd:1a:e9:29:81:d9:22:4e:ea:
83:c8:84:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:28 2024 by rpki-client on console-ams.rpki-client.org