Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4FzcWBMoVbOjbCjZdZPLqidbE2k.roa
File: 4FzcWBMoVbOjbCjZdZPLqidbE2k.roa (raw, json)
Hash identifier: 9ws2rXC1GpE6LPL4Ta9nCRn+k1WmPSNkJYdtS2aJ31A=
Subject key identifier: E0:5C:DC:58:13:28:55:B3:A3:6C:28:D9:75:93:CB:AA:27:5B:13:69
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190A69C0B3EC4A8A26F8B145192329DA42A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4FzcWBMoVbOjbCjZdZPLqidbE2k.roa
Signing time: Fri 12 Jul 2024 11:02:42 +0000
ROA not before: Fri 12 Jul 2024 11:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 12:15:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a6:9c:0b:3e:c4:a8:a2:6f:8b:14:51:92:32:9d:a4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 12 11:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05cdc58132855b3a36c28d97593cbaa275b1369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:41:3e:f1:fd:65:cb:4b:85:f7:a5:cf:8e:
b7:d1:d5:3e:47:02:ed:13:9d:3d:b0:4b:7c:81:af:
2a:c7:29:82:62:ad:2a:76:84:16:60:7b:80:02:21:
7c:1c:2b:21:a4:94:1b:06:c0:54:94:12:e1:b0:6f:
ec:15:aa:81:2f:92:a5:00:eb:52:33:9c:bd:2e:51:
32:b4:0f:86:57:88:58:9e:c8:f5:fa:f9:57:50:1e:
5b:65:eb:be:2b:0a:58:53:00:bd:39:bd:c6:79:c7:
ae:56:c9:ca:ab:98:1d:7b:47:e8:d0:88:5b:a1:60:
54:77:65:a8:a0:60:a9:98:7d:82:99:b4:7a:a5:90:
58:d6:50:01:23:e0:e1:64:76:4f:f4:9b:8d:eb:00:
b4:06:6d:c7:87:1b:8a:da:5c:e5:19:e9:f0:28:25:
86:98:c2:dd:c3:10:62:68:45:74:31:de:46:9a:67:
90:44:01:c9:7d:b6:a0:c2:5d:68:6b:2c:24:3e:b6:
1a:f7:09:b6:60:c5:f8:1b:3e:6a:8b:fb:14:3a:fa:
fb:79:10:2f:fc:51:e6:12:de:e0:8b:af:a6:a0:57:
e1:99:58:f9:a7:c0:05:5a:31:aa:f4:ec:83:b2:3e:
6e:3a:7b:0b:5f:4c:cd:d2:79:47:70:2a:9b:03:8e:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5C:DC:58:13:28:55:B3:A3:6C:28:D9:75:93:CB:AA:27:5B:13:69
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4FzcWBMoVbOjbCjZdZPLqidbE2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:15:18:f6:1d:0f:99:0c:95:b8:4a:c3:3e:53:d1:c2:6c:65:
b6:58:4f:a8:ce:85:bc:5a:81:d7:0f:67:4d:b2:4d:09:c5:f4:
a9:d8:5b:97:54:90:87:43:b9:04:cf:61:86:6a:c9:ae:ec:d1:
a1:6a:bb:7e:70:db:48:34:1f:82:ea:29:41:9c:e9:e3:06:6f:
f5:03:6a:a3:76:47:e1:26:c6:51:b7:d5:af:6c:a8:12:89:02:
98:63:ba:13:61:90:c6:e1:52:ae:ad:d2:59:5d:96:9d:49:dd:
5c:5c:12:04:d0:23:e1:6d:b1:6f:63:06:87:86:ff:c1:68:50:
c6:b1:a4:bc:28:be:72:a8:b0:00:ae:88:ef:1e:20:5b:98:12:
6a:80:14:d1:8b:35:4f:6d:8f:ff:71:a1:46:44:f9:94:69:57:
66:15:a6:20:18:28:be:6e:e9:75:ee:1c:6a:30:05:62:49:9d:
62:c7:2c:c2:a6:4c:95:c8:12:cc:ac:8b:0c:85:8d:2a:9c:2d:
7d:04:6b:79:34:c3:bd:df:41:e1:db:c5:b0:22:a5:0d:42:26:
24:2c:d2:aa:0d:f6:b4:c5:40:8d:be:4d:14:3a:90:94:3e:50:
06:c5:e5:2a:2d:62:23:f8:74:b5:f9:4b:26:81:13:82:cb:99:
2a:ab:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 14:46:33 2024 by rpki-client on console-ams.rpki-client.org