Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4SDZ-VsEeZ2Yw_tncz2Eow5txO4.roa
File: 4SDZ-VsEeZ2Yw_tncz2Eow5txO4.roa (raw, json)
Hash identifier: ASNQrlLx2uISdcEEp9In1V/LXj7Jq/sjPD6Kq2N41iM=
Subject key identifier: E1:20:D9:F9:5B:04:79:9D:98:C3:FB:67:73:3D:84:A3:0E:6D:C4:EE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CCA3B13ACA0454B21CC224EACEDF19782
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4SDZ-VsEeZ2Yw_tncz2Eow5txO4.roa
Signing time: Tue 02 Jan 2024 12:51:58 +0000
ROA not before: Tue 02 Jan 2024 12:51:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:3b:13:ac:a0:45:4b:21:cc:22:4e:ac:ed:f1:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 12:51:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e120d9f95b04799d98c3fb67733d84a30e6dc4ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f0:33:be:46:2e:1a:c5:9e:44:8a:77:68:9c:
b8:fd:1b:90:54:59:36:e3:04:8b:4b:e1:13:40:ca:
89:9a:7b:7d:e6:3c:fb:de:a5:4a:51:aa:37:22:a9:
a2:70:f4:f7:2f:de:39:fb:c3:b5:b3:7f:c0:9f:60:
11:0d:d7:18:b4:5b:a6:dc:bb:a6:3b:ea:9a:a8:03:
ee:3e:c0:4c:56:6b:89:d0:85:ac:f1:c0:69:a7:de:
3c:97:39:d7:c9:ae:f8:b9:1b:24:e0:c0:b1:16:26:
c4:36:7f:1a:2f:59:e9:df:fe:58:7c:1d:36:07:65:
dd:e4:64:8e:5a:67:87:02:07:3e:ad:64:cb:d5:a4:
92:ae:26:0d:ce:75:c7:9b:c6:3d:33:14:07:40:82:
c0:f3:0b:42:e5:91:de:10:83:85:9b:db:d4:09:33:
f1:52:cb:31:ab:4e:c6:21:ed:bf:5a:27:f6:cc:a6:
0b:e0:60:05:f9:97:fd:ee:25:38:84:29:bf:1a:88:
64:df:71:f0:61:d6:02:d4:ed:cd:b0:a9:67:98:58:
eb:51:f8:a0:95:56:62:b0:1b:6b:fa:44:94:4d:0f:
6a:0e:6e:9f:bc:b1:59:dd:f7:cb:d5:7a:82:d5:96:
1a:8f:46:57:fc:8c:70:00:a6:a1:1f:d7:10:ed:f9:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:20:D9:F9:5B:04:79:9D:98:C3:FB:67:73:3D:84:A3:0E:6D:C4:EE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4SDZ-VsEeZ2Yw_tncz2Eow5txO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
af:c3:3b:6c:40:1e:23:e0:67:a8:14:a4:8e:9d:e3:bc:8d:e8:
95:ce:24:f1:ab:36:93:b9:7a:17:6f:db:20:e3:f4:c5:55:d5:
40:60:37:5f:46:13:4c:34:a9:4d:75:1d:8c:1a:22:17:6c:7c:
a2:ac:23:5d:3c:3e:b3:ea:9a:31:75:e2:b6:e9:0d:8f:1d:4d:
80:b7:bb:f8:12:e6:26:94:da:4e:aa:17:ed:10:b5:94:2e:93:
76:d3:72:5b:63:eb:87:7f:e4:80:07:92:b0:10:37:b3:84:c3:
21:f6:36:66:7a:bd:57:de:c4:11:e8:e5:73:c4:7c:25:27:09:
b6:1e:50:54:9d:f4:ab:1b:68:7c:4a:7d:21:af:b9:13:03:29:
d2:88:a6:0e:3e:84:c4:51:c5:de:86:00:84:f0:d7:65:b8:66:
fd:42:ae:60:0b:69:44:5f:a7:3c:98:8e:a3:4e:fb:3b:b2:52:
95:1e:5f:49:2f:40:61:fe:42:14:48:de:f3:89:e5:bb:1f:d3:
79:43:5e:9d:14:ca:bd:81:5a:cc:ea:1e:56:2a:c3:d0:9a:38:
d2:1f:2a:b3:f6:42:e3:b2:2c:3a:7a:87:0e:2a:60:0d:1d:8e:
42:7f:11:87:57:17:b6:5b:e0:2b:5e:24:3f:02:af:07:8c:d7:
4f:33:4e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 23:53:05 2024 by rpki-client on console-ams.rpki-client.org