Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/7a6mkysjcVt8FPqOy5L-UGBcEc4.roa
File: 7a6mkysjcVt8FPqOy5L-UGBcEc4.roa (raw, json)
Hash identifier: lPG+s9R4Q4gv5vW0rXOHfV4PUmB3E3YB8sF1ljrAgo0=
Subject key identifier: ED:AE:A6:93:2B:23:71:5B:7C:14:FA:8E:CB:92:FE:50:60:5C:11:CE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B000681B0878DDB2ADD367CCF82354CC5
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/7a6mkysjcVt8FPqOy5L-UGBcEc4.roa
Signing time: Thu 05 Oct 2023 13:28:28 +0000
ROA not before: Thu 05 Oct 2023 13:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:06:81:b0:87:8d:db:2a:dd:36:7c:cf:82:35:4c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 5 13:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edaea6932b23715b7c14fa8ecb92fe50605c11ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:70:f7:b6:4e:a7:e4:a2:95:dd:aa:8e:1e:
c2:eb:56:2e:bb:df:0b:dd:21:db:b3:0b:fd:65:89:
a9:2b:8b:de:9c:d5:7f:2f:d3:21:81:ca:70:6d:76:
36:c9:16:64:ae:b4:dd:97:ad:de:0e:5c:04:4f:b1:
19:80:c6:e8:bd:66:8b:98:bd:11:78:8a:b1:63:f4:
c1:c2:e9:bd:f8:77:9b:fd:f2:1f:7c:e2:7f:7c:0e:
65:e2:33:a8:51:ed:06:94:0d:e8:89:cc:43:75:19:
59:b2:3b:b8:f8:ae:75:84:62:b9:89:b5:2f:56:03:
f3:73:07:ca:f6:9f:49:8f:0d:36:bc:f4:87:d2:3a:
3f:e7:93:2a:8c:cf:02:61:be:5a:8d:cc:2c:9b:30:
2c:01:dd:7a:68:7b:b1:cf:ea:b0:e0:81:5e:8b:55:
10:61:b8:0f:7a:a7:46:9e:0c:84:7a:26:cb:36:08:
4e:13:82:d5:f1:a6:ff:c3:f2:4b:c7:36:de:bf:59:
b5:4b:fe:4c:82:15:45:90:f4:a2:b4:06:7d:e5:15:
1b:5d:f2:88:83:84:45:4e:e3:8c:38:8b:26:c4:a1:
6e:f6:5b:4e:c7:8a:a9:fd:0e:f5:9d:98:a9:28:a3:
35:26:9a:92:e9:03:95:30:1c:25:5b:e8:b3:bc:b4:
71:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AE:A6:93:2B:23:71:5B:7C:14:FA:8E:CB:92:FE:50:60:5C:11:CE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/7a6mkysjcVt8FPqOy5L-UGBcEc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.34.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
3d:a8:f7:1a:cf:d4:e6:2e:db:26:13:1e:df:84:97:0f:ad:bb:
7e:3e:c3:a2:a6:0a:a7:9a:85:3d:fc:4d:c1:d3:07:3e:9c:b1:
7c:4c:f5:50:41:53:e2:af:96:d0:e1:52:f3:0d:f9:77:35:18:
5d:a6:0f:61:95:4c:7c:eb:c6:2b:71:25:fd:d8:58:5e:f2:aa:
10:b8:d3:67:b1:42:ad:e0:00:fa:c0:ba:55:d8:5a:5c:17:df:
dd:e5:56:8a:58:ab:0f:f8:19:e8:4d:5d:a8:e1:b1:ec:17:38:
77:9a:bd:a7:74:b7:c4:e0:0e:2b:b3:1f:f4:e7:f8:9c:ec:01:
92:cf:2c:26:66:2b:8a:ba:c7:5f:26:dd:db:d4:81:60:91:b4:
d2:5b:6a:71:71:80:18:60:ce:ba:30:6c:60:5d:72:be:5e:95:
12:2d:4d:bf:fb:83:61:e6:a4:16:58:f7:ee:88:a6:05:e3:f2:
c8:27:e8:ed:1f:3a:73:f1:d5:ce:ba:4c:8f:b4:18:ca:d1:0c:
92:76:f2:4f:e8:79:3b:16:94:4a:14:eb:61:09:d0:69:95:e6:
2e:ff:ca:a8:49:2d:74:83:fe:c3:38:99:c4:a3:d1:ea:bb:15:
85:4f:e8:82:1d:0a:32:1c:7f:8b:67:1a:39:15:48:ad:c2:73:
4f:dc:c8:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 13 13:11:43 2023 by rpki-client on console-fra.rpki-client.org