Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4owlFu0BqzX_fruPdqmu7ooUTLY.roa
File: 4owlFu0BqzX_fruPdqmu7ooUTLY.roa (raw, json)
Hash identifier: yCB74OxuQy1C1ArcTpAFoG3cXCJr/Hsl4rG/SVvkeMM=
Subject key identifier: E2:8C:25:16:ED:01:AB:35:FF:7E:BB:8F:76:A9:AE:EE:8A:14:4C:B6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01856FF02399C9B0AA935727A03E2DB21270
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4owlFu0BqzX_fruPdqmu7ooUTLY.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:23:99:c9:b0:aa:93:57:27:a0:3e:2d:b2:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e28c2516ed01ab35ff7ebb8f76a9aeee8a144cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:48:47:8d:c9:19:31:66:84:6b:84:1a:aa:37:
ee:42:24:b6:71:2e:e6:d3:0d:b6:49:96:bb:93:69:
1c:ae:59:f5:ba:b2:9f:3f:06:4b:85:37:e5:d9:bf:
87:0d:e0:86:4c:97:af:df:d7:a0:0a:6d:f8:33:c7:
a5:57:db:ca:99:8a:10:ea:cc:6e:20:de:d9:be:b8:
84:f4:f2:c0:59:6c:aa:35:d3:85:c7:d8:0f:f8:6f:
9a:99:4f:39:a4:34:b0:f2:19:77:b0:8d:ab:8e:bd:
a0:94:85:66:83:f3:9d:b6:84:2c:fc:33:52:cb:70:
7f:9b:3c:f6:4a:5b:6b:fb:49:52:92:b0:9f:da:1d:
0c:74:d2:37:40:46:5d:04:6f:af:72:d4:d0:03:db:
4e:99:c2:e1:ac:b4:55:1e:d2:7f:18:62:05:7c:ba:
0f:ae:d7:e1:be:6a:18:fa:e2:70:26:bc:4c:72:0b:
52:3b:73:b1:8c:a1:74:d4:6d:82:2a:41:02:0e:70:
15:0b:81:03:5c:ac:ed:0c:bc:b7:42:e1:ba:a6:61:
11:16:f1:44:83:a0:96:44:08:75:b7:3d:45:14:2e:
12:34:70:89:ba:f2:ab:a1:4c:80:65:4f:01:3f:bb:
4f:e5:c4:b5:8c:e8:06:fd:ba:50:ea:97:5e:6d:a5:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:25:16:ED:01:AB:35:FF:7E:BB:8F:76:A9:AE:EE:8A:14:4C:B6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/4owlFu0BqzX_fruPdqmu7ooUTLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a8:56:c9:69:53:0d:6b:9d:21:2b:d0:d5:c2:83:47:bd:7e:
db:62:ba:9d:5f:e1:75:5c:27:e9:89:31:b4:47:c2:d7:49:9f:
fd:34:7e:22:55:75:a5:de:25:af:25:1d:78:67:47:4c:53:92:
f8:36:a9:46:31:14:91:29:a5:f1:2f:04:8a:57:33:dd:53:ea:
bf:f1:5a:34:66:1f:be:15:55:90:69:5a:e7:fa:8f:25:5a:36:
e4:28:b4:89:98:5f:3f:88:7d:87:92:3b:8a:84:18:61:a7:27:
7f:6b:eb:02:7d:e6:9f:7f:24:52:63:df:07:4d:3f:af:cd:9f:
4e:57:6a:3e:e4:5d:f7:04:33:ad:35:47:2b:fd:b4:ea:c3:c0:
cf:97:5e:a4:45:9a:d2:6b:ac:11:14:b6:d2:6c:9b:65:aa:43:
14:1f:a9:c5:27:32:67:96:a7:f8:65:c8:90:1e:06:69:b0:b7:
48:ef:a6:65:3f:86:d9:48:c1:ee:63:16:9e:57:c7:b6:1d:14:
db:1f:e8:71:e8:64:a3:8a:b1:9f:35:9b:9f:07:25:68:65:5e:
e7:aa:b3:4f:92:7d:87:dc:70:bf:1d:fb:ab:80:d8:cc:7f:fc:
a2:35:5a:9f:e7:41:c9:2a:d1:1d:7e:93:a5:a0:45:3d:aa:d1:
9a:18:e3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:52 2023 by rpki-client on console-ams.rpki-client.org