Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4CO5tja5wTvx7AYaTB59nThUJ8A.roa
File: 4CO5tja5wTvx7AYaTB59nThUJ8A.roa (raw, json)
Hash identifier: 1nmFQdeR4IHxf03K8lMtvUKMC90BsmpEv1ndd5l/e30=
Subject key identifier: E0:23:B9:B6:36:B9:C1:3B:F1:EC:06:1A:4C:1E:7D:9D:38:54:27:C0
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019059EA324D0F3D9CCD4AF8CFE01D8EF88A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4CO5tja5wTvx7AYaTB59nThUJ8A.roa
Signing time: Thu 27 Jun 2024 13:37:18 +0000
ROA not before: Thu 27 Jun 2024 13:37:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jun 2024 18:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:59:ea:32:4d:0f:3d:9c:cd:4a:f8:cf:e0:1d:8e:f8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 27 13:37:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e023b9b636b9c13bf1ec061a4c1e7d9d385427c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6d:89:a2:73:6c:1b:7f:6f:78:7e:b6:48:b5:
2c:66:07:2e:56:d6:4b:3f:f9:75:9f:71:d4:3a:0b:
a9:1d:f5:88:7b:cb:84:d0:14:43:0e:66:af:59:9c:
a7:a1:27:8b:17:7d:0d:14:04:59:5d:23:72:ae:13:
e4:6a:47:70:74:e1:07:d5:a1:77:c6:51:cd:7b:1a:
7a:14:a8:05:5b:b6:c9:cd:0e:c6:74:0f:45:74:17:
43:b9:a7:e5:10:15:70:4d:87:a9:7f:4c:36:b7:59:
2e:74:e8:d2:be:80:48:cc:21:ed:61:9a:38:c2:54:
5b:b6:50:2a:f7:10:0a:1b:cf:3c:ba:d4:22:72:8f:
60:9e:b8:38:e7:17:40:80:e6:b6:90:af:a4:e1:dc:
a1:94:49:06:c8:48:50:5a:6e:c0:38:c8:5a:1d:7b:
0a:ef:23:62:2d:67:2e:47:0b:0e:7e:fa:6c:f7:d1:
ab:35:64:da:25:cc:98:0e:0a:0d:91:9a:17:68:8c:
d6:1b:10:57:c9:ef:a1:ca:d6:90:c4:dd:79:6d:db:
9c:fe:7a:d9:56:83:3c:db:60:27:0d:14:66:23:8c:
96:0c:a2:d6:c3:f8:11:29:b6:0c:e8:fb:5e:a5:1c:
2d:05:cf:18:95:8e:77:62:ba:d1:b4:d6:b0:7f:8a:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:B9:B6:36:B9:C1:3B:F1:EC:06:1A:4C:1E:7D:9D:38:54:27:C0
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4CO5tja5wTvx7AYaTB59nThUJ8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
64:43:0d:49:4a:36:e7:2b:d5:d0:a7:b9:a0:f1:5e:6b:6c:87:
84:2b:6a:5a:4e:f7:14:bd:d6:61:0e:fb:5d:07:cb:02:13:79:
c3:80:72:18:21:1a:8f:55:65:84:2e:b4:7d:36:8e:99:fa:38:
71:de:a9:3c:1a:48:48:6e:91:5a:68:79:79:95:ca:ce:7a:e1:
69:69:fd:92:66:24:34:84:01:4e:58:3a:76:38:8c:5b:66:be:
06:c0:fd:c1:ad:84:10:4c:7b:33:db:ea:03:db:2f:05:27:16:
f1:a2:f4:3f:ed:ad:bd:f7:4f:f2:19:be:1f:b7:cc:69:e0:85:
87:27:4a:8a:48:3f:b0:41:a3:20:35:39:b5:18:b0:4e:50:1c:
00:11:dd:6a:10:b9:69:dd:7e:f1:c5:79:69:d7:39:c1:5a:09:
74:72:e1:ef:a0:ed:c5:68:36:1c:b2:5f:09:22:89:9a:01:75:
a1:e3:43:8c:7a:18:1a:c7:61:a2:2e:57:a7:d0:49:40:ec:e9:
8a:56:a7:e9:da:03:98:5b:76:39:5c:dd:70:f2:9f:7e:08:ac:
fd:2f:93:3f:c4:54:a3:d7:95:77:d0:5c:51:bf:aa:19:2b:99:
6f:e7:9f:af:a8:16:ad:e6:67:77:b0:a9:76:fc:b9:02:c6:c4:
1f:a6:e0:30
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZBZ6jJNDz2czUr4z+AdjviKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNjI3MTMzNzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDIzYjliNjM2YjljMTNiZjFlYzA2MWE0YzFlN2Q5ZDM4NTQyN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9G2JonNsG39veH62SLUsZgcuVtZL
P/l1n3HUOgupHfWIe8uE0BRDDmavWZynoSeLF30NFARZXSNyrhPkakdwdOEH1aF3
xlHNexp6FKgFW7bJzQ7GdA9FdBdDuaflEBVwTYepf0w2t1kudOjSvoBIzCHtYZo4
wlRbtlAq9xAKG888utQico9gnrg45xdAgOa2kK+k4dyhlEkGyEhQWm7AOMhaHXsK
7yNiLWcuRwsOfvps99GrNWTaJcyYDgoNkZoXaIzWGxBXye+hytaQxN15bduc/nrZ
VoM822AnDRRmI4yWDKLWw/gRKbYM6PtepRwtBc8YlY53YrrRtNawf4rycwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOAjubY2ucE78ewGGkwefZ04VCfAMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvNENPNXRqYTV3VHZ4N0FZYVRCNTluVGhVSjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+QMAwQA
W+QPAwQAXpokMA0GCSqGSIb3DQEBCwUAA4IBAQBkQw1JSjbnK9XQp7mg8V5rbIeE
K2paTvcUvdZhDvtdB8sCE3nDgHIYIRqPVWWELrR9No6Z+jhx3qk8GkhIbpFaaHl5
lcrOeuFpaf2SZiQ0hAFOWDp2OIxbZr4GwP3BrYQQTHsz2+oD2y8FJxbxovQ/7a29
90/yGb4ft8xp4IWHJ0qKSD+wQaMgNTm1GLBOUBwAEd1qELlp3X7xxXlp1znBWgl0
cuHvoO3FaDYcsl8JIomaAXWh40OMehgax2GiLlen0ElA7OmKVqfp2gOYW3Y5XN1w
8p9+CKz9L5M/xFSj15V30FxRv6oZK5lv55+vqBat5md3sKl2/LkCxsQfpuAw
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:14:49 2024 by rpki-client on console-fra.rpki-client.org