Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5zFM9p3HNZtTwF7PjZZYG6XxlBc.roa
File: 5zFM9p3HNZtTwF7PjZZYG6XxlBc.roa (raw, json)
Hash identifier: NvsWIyNF0GrKKNGZJQJ05GLwzyr8TzMj8Tf4MZuUTyQ=
Subject key identifier: E7:31:4C:F6:9D:C7:35:9B:53:C0:5E:CF:8D:96:58:1B:A5:F1:94:17
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190A7F6E7788FEF4C3FD8C5E86C76B47D70
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5zFM9p3HNZtTwF7PjZZYG6XxlBc.roa
Signing time: Fri 12 Jul 2024 17:21:34 +0000
ROA not before: Fri 12 Jul 2024 17:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 12:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:f6:e7:78:8f:ef:4c:3f:d8:c5:e8:6c:76:b4:7d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 12 17:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7314cf69dc7359b53c05ecf8d96581ba5f19417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:03:57:15:fa:b1:19:c6:84:12:14:07:10:97:
d4:93:1a:ef:3c:58:e2:0b:2f:6c:ff:04:68:b9:f5:
04:35:76:6d:01:c3:66:b3:ba:aa:77:f5:93:99:9d:
40:2d:38:cf:a1:de:c1:23:aa:16:54:27:22:1d:8b:
c3:89:65:32:38:6b:d7:51:60:c9:e6:e6:00:c1:51:
01:27:79:7e:6a:44:f7:a2:22:48:cc:0e:52:c9:57:
46:6b:f0:9d:b0:74:1c:4d:83:0a:53:3b:53:b7:c1:
42:ae:0a:2d:57:d1:1a:c3:09:00:5c:bd:42:f3:54:
f5:a7:7b:dc:22:fb:8f:35:e9:03:ba:9a:2d:73:7a:
a8:99:cc:2c:8c:23:19:dd:f0:1a:3a:ff:e9:4a:be:
b8:00:05:66:b6:fe:1c:82:9b:d9:9f:c0:ac:45:1c:
43:e4:f0:47:15:cd:24:00:af:55:79:05:9a:94:08:
4b:b3:08:bf:6f:6d:a6:05:ef:36:e1:df:35:1f:43:
3e:d3:b6:7f:6e:b3:a7:3a:09:62:f6:cf:f5:30:64:
2d:46:d8:bb:b7:64:e4:53:98:69:b9:fb:62:38:5d:
22:70:9f:4a:72:dd:b5:e9:74:2a:c6:72:d5:85:a7:
6a:8b:bb:c4:d7:be:87:d8:16:9d:01:64:a5:3e:a5:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:31:4C:F6:9D:C7:35:9B:53:C0:5E:CF:8D:96:58:1B:A5:F1:94:17
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5zFM9p3HNZtTwF7PjZZYG6XxlBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:7b:1b:73:09:b2:a5:1a:0d:7f:e7:d6:4a:ea:ae:cd:67:5c:
4b:b2:be:25:67:23:0c:fc:90:9d:a9:14:46:03:2e:7c:bb:42:
6e:85:cf:5e:7a:08:8d:ab:c7:74:8f:94:64:94:0d:f8:b3:11:
15:88:ca:de:26:0f:bc:d8:d6:98:22:b5:84:d8:36:df:5a:2d:
73:06:62:7b:40:4d:8a:3c:59:d7:3c:04:b2:47:26:65:bd:0a:
f7:36:34:ed:67:65:61:64:44:a2:2e:4d:ab:eb:7e:d9:ee:94:
95:2c:15:d6:b5:39:a0:6f:60:d3:45:97:be:af:b1:b5:d4:9b:
08:fe:56:10:e1:f3:9f:5f:ae:4a:0d:9c:1c:d5:c3:d3:bb:4e:
e0:ae:d6:5f:23:f7:b6:cc:0f:85:70:56:3a:2a:08:1d:5e:5a:
6b:bf:b4:4c:16:da:3a:1e:69:aa:98:0f:69:13:d3:ef:3b:4f:
d4:31:20:22:48:ce:aa:ad:88:76:2b:d7:55:2a:70:53:ba:53:
d6:e2:aa:c4:aa:9e:78:45:63:33:da:f4:0d:de:b8:4f:41:6b:
a7:36:a6:b4:bd:cc:29:b0:79:32:1e:83:09:52:80:74:8f:48:
ea:36:bf:86:06:d1:6b:f7:9d:8a:19:d7:50:2f:da:b8:d8:19:
f0:07:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 17:08:46 2024 by rpki-client on console-ams.rpki-client.org