Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3vSox1WLUF2BqjAV1T36ISJGYD4.roa
File: 3vSox1WLUF2BqjAV1T36ISJGYD4.roa (raw, json)
Hash identifier: 54Mvw9sQyOspN+tUaey3Zz0yXxK5abC8VnRTqGfcYzo=
Subject key identifier: DE:F4:A8:C7:55:8B:50:5D:81:AA:30:15:D5:3D:FA:21:22:46:60:3E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018D0E36FB14094F3773889FBD5457297053
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3vSox1WLUF2BqjAV1T36ISJGYD4.roa
Signing time: Mon 15 Jan 2024 17:41:40 +0000
ROA not before: Mon 15 Jan 2024 17:41:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 14:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0e:36:fb:14:09:4f:37:73:88:9f:bd:54:57:29:70:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 15 17:41:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=def4a8c7558b505d81aa3015d53dfa212246603e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:a6:74:9e:bb:ba:48:bd:ca:09:02:ba:bb:
08:eb:4d:0a:6c:28:a6:13:0c:48:fb:8c:01:3a:66:
6c:e3:31:d2:ff:d5:c5:8a:ec:36:6b:e9:97:98:bb:
e2:e7:b4:4b:e0:33:60:58:e2:b9:93:46:f3:62:76:
22:cb:8b:93:16:21:b2:12:69:d7:f2:b3:35:4d:26:
6d:50:8f:4e:e4:ee:81:1b:52:1a:6d:fb:e3:6e:96:
b6:b6:8a:f3:58:8e:20:10:01:db:3f:44:85:b2:74:
04:d0:d7:e0:f9:79:4b:5f:a5:49:58:41:d4:d2:0e:
8f:ce:72:93:ef:ce:37:d8:64:2f:41:4a:fb:19:71:
d1:7a:e8:3f:17:2e:03:6e:a1:a5:6c:d3:52:93:d4:
04:f0:0e:7c:33:87:0c:7d:72:13:02:ae:2d:bb:ff:
e1:b3:f6:13:47:fc:e7:ae:62:53:b4:54:3b:92:47:
d9:c2:57:c1:35:6e:52:24:95:59:1d:e7:f1:e5:ee:
1c:22:74:a8:f7:8a:65:0a:dd:aa:a2:18:2c:e9:38:
82:ac:2f:91:56:cb:3e:ca:83:1e:b7:5e:bc:c7:b8:
60:6f:97:28:3d:29:6d:ec:2f:1c:b3:f0:b7:71:6e:
b1:dd:fa:1d:63:98:77:db:b8:b9:a1:e8:3e:30:75:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:A8:C7:55:8B:50:5D:81:AA:30:15:D5:3D:FA:21:22:46:60:3E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/3vSox1WLUF2BqjAV1T36ISJGYD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:0e:42:eb:1e:1e:8a:73:11:6f:39:bf:66:82:6c:fb:ca:77:
bf:13:90:69:18:10:7d:ed:0f:cf:44:92:3e:86:7e:63:ce:23:
7b:07:ce:d5:40:87:c6:e4:03:f7:38:a9:a0:48:eb:6e:0b:e5:
c9:a4:50:7a:97:b5:db:15:48:2e:c5:91:a7:f1:3f:de:ba:64:
d3:6e:40:bd:24:5d:d9:cd:d3:bf:a4:fc:6b:63:7f:c1:dd:78:
5d:1d:3c:75:22:67:41:62:87:92:a7:9b:8f:a4:ea:4c:5e:5a:
34:83:9f:cc:3c:9e:b5:25:68:f9:a5:66:62:ee:84:4b:79:b3:
e2:b3:f8:76:74:76:8d:e0:67:51:b3:8b:a6:bc:dc:89:72:7d:
87:3e:13:3b:20:b2:95:c1:c2:25:45:37:9a:25:4e:9b:39:98:
25:ad:32:66:61:c5:35:72:90:c2:dd:66:e6:8b:29:1f:67:3f:
b2:26:f1:c4:62:1a:55:f2:e6:9a:9b:cd:b4:6b:89:8f:1b:bb:
c7:95:00:01:65:f4:f1:3b:f5:71:43:06:4e:0a:08:01:30:66:
65:a0:d2:62:f6:02:0d:59:35:08:13:f0:31:a2:8e:de:10:65:
bf:e9:80:a0:29:c8:c0:c5:71:08:24:2b:9e:3a:ad:86:43:45:
36:01:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 16 19:12:48 2024 by rpki-client on console-fra.rpki-client.org