Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/2jDH6yryXJlZBjWdFBFSOVbxK7U.roa
File: 2jDH6yryXJlZBjWdFBFSOVbxK7U.roa (raw, json)
Hash identifier: DH/f8y8KMsm8anePwWtnZ0DWCy9ZLRluwltDF+ddY6w=
Subject key identifier: DA:30:C7:EB:2A:F2:5C:99:59:06:35:9D:14:11:52:39:56:F1:2B:B5
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018BE1CBA557D8AD4376C20FF5B7E838CF2C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/2jDH6yryXJlZBjWdFBFSOVbxK7U.roa
Signing time: Sat 18 Nov 2023 09:38:21 +0000
ROA not before: Sat 18 Nov 2023 09:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:cb:a5:57:d8:ad:43:76:c2:0f:f5:b7:e8:38:cf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 18 09:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da30c7eb2af25c995906359d1411523956f12bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8d:a3:60:e1:b2:63:ef:0b:5d:2a:c0:37:94:
4b:84:21:14:dd:65:b9:dc:07:6d:e1:68:c3:2f:2c:
cb:b0:e2:9f:c4:0c:8c:6a:4f:9a:84:c2:79:11:f8:
5c:f2:e4:81:c7:fc:3b:37:b8:4f:6e:2e:8a:40:63:
ee:b8:6b:d4:6d:95:61:49:92:4e:a2:b0:4f:71:9f:
ac:68:ef:67:4c:45:13:36:f6:b2:82:cd:ba:54:2c:
1d:e8:81:5e:1f:78:10:ce:f9:27:43:2f:72:d8:f0:
a6:cb:13:a6:50:e1:82:55:b6:51:1a:1f:3b:12:06:
ac:e2:9a:a7:da:82:51:68:26:81:7a:c3:55:24:a1:
10:75:3b:51:5b:8a:3d:da:a1:e0:2e:88:9c:5c:e4:
39:5b:39:58:7c:18:f0:a3:47:81:06:c1:d7:94:bb:
9d:cb:10:70:9a:79:ba:19:7b:e1:75:7d:d5:d4:4a:
61:ab:0e:14:1e:d8:d6:0e:b8:f4:cb:44:a7:e9:62:
b7:cc:31:bb:c1:1f:9b:75:0c:5b:ab:38:c9:36:49:
0f:37:e0:a3:1b:ba:ae:15:d8:86:9c:99:3a:79:9e:
7b:21:ac:14:5b:13:e9:4e:b6:6b:32:41:fc:7b:17:
d4:a6:30:c6:cb:7c:bf:d0:b0:37:64:aa:cc:17:a7:
f3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:30:C7:EB:2A:F2:5C:99:59:06:35:9D:14:11:52:39:56:F1:2B:B5
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/2jDH6yryXJlZBjWdFBFSOVbxK7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
73:d3:40:21:5e:a5:78:f5:ca:d1:b9:37:ff:4f:fb:ba:ec:de:
71:60:39:d3:ef:dc:47:56:56:61:bb:6a:6f:a3:6a:b2:2e:0a:
ae:23:0f:23:9b:26:bf:10:0e:df:e6:2f:ef:b1:aa:b1:cb:d0:
7d:73:d2:7b:fb:51:30:d1:1a:42:9f:93:5a:67:e6:10:46:c2:
2f:c0:8a:b6:71:84:14:1b:74:b7:73:02:b4:6f:c5:3c:7a:ce:
e1:43:9a:1d:19:a7:0e:c8:d1:3d:26:40:26:1f:fa:28:4e:42:
ce:b7:9c:65:b3:35:08:d5:81:74:d4:b8:e5:88:57:28:cc:88:
85:da:99:93:73:94:14:37:c4:c4:95:87:69:fe:81:64:68:fd:
7d:f4:83:df:d5:13:b0:a9:2d:ca:b0:e5:ed:ef:76:ce:92:7d:
56:43:bf:0d:d4:53:55:0a:4e:64:00:36:67:e8:b8:8a:87:c0:
38:84:49:87:30:5a:f3:0e:3c:31:86:20:5a:90:53:81:47:84:
d0:3c:e4:f2:66:4f:ae:c3:62:79:99:76:5b:04:9e:e5:79:02:
f4:ae:6c:a7:3c:31:19:96:6c:2d:0e:aa:1d:2f:2d:e9:b4:c0:
51:bf:b3:4b:21:e3:91:2b:96:d1:4e:c9:50:7d:78:a9:24:fb:
60:45:b5:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvhy6VX2K1DdsIP9bfoOM8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMTE4MDkzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTMwYzdlYjJhZjI1Yzk5NTkwNjM1OWQxNDExNTIzOTU2ZjEyYmI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I2jYOGyY+8LXSrAN5RLhCEU3WW5
3Adt4WjDLyzLsOKfxAyMak+ahMJ5Efhc8uSBx/w7N7hPbi6KQGPuuGvUbZVhSZJO
orBPcZ+saO9nTEUTNvaygs26VCwd6IFeH3gQzvknQy9y2PCmyxOmUOGCVbZRGh87
Egas4pqn2oJRaCaBesNVJKEQdTtRW4o92qHgLoicXOQ5WzlYfBjwo0eBBsHXlLud
yxBwmnm6GXvhdX3V1Ephqw4UHtjWDrj0y0Sn6WK3zDG7wR+bdQxbqzjJNkkPN+Cj
G7quFdiGnJk6eZ57IawUWxPpTrZrMkH8exfUpjDGy3y/0LA3ZKrMF6fzLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNowx+sq8lyZWQY1nRQRUjlW8Su1MB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvMmpESDZ5cnlYSmxaQmpXZEZCRlNPVmJ4SzdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+QOMA0G
CSqGSIb3DQEBCwUAA4IBAQBz00AhXqV49crRuTf/T/u67N5xYDnT79xHVlZhu2pv
o2qyLgquIw8jmya/EA7f5i/vsaqxy9B9c9J7+1Ew0RpCn5NaZ+YQRsIvwIq2cYQU
G3S3cwK0b8U8es7hQ5odGacOyNE9JkAmH/ooTkLOt5xlszUI1YF01LjliFcozIiF
2pmTc5QUN8TElYdp/oFkaP199IPf1ROwqS3KsOXt73bOkn1WQ78N1FNVCk5kADZn
6LiKh8A4hEmHMFrzDjwxhiBakFOBR4TQPOTyZk+uw2J5mXZbBJ7leQL0rmynPDEZ
lmwtDqodLy3ptMBRv7NLIeORK5bRTslQfXipJPtgRbUC
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:28 2024 by rpki-client on console-ams.rpki-client.org