Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/84ZTvv3mhfHn8jx0VzvPuH_grr8.roa
File: 84ZTvv3mhfHn8jx0VzvPuH_grr8.roa (raw, json)
Hash identifier: 8xrrh7u5fJ3IjpyRJVatbJujg3N4lNGQd/wiEfY23IE=
Subject key identifier: F3:86:53:BE:FD:E6:85:F1:E7:F2:3C:74:57:3B:CF:B8:7F:E0:AE:BF
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190A7F6E71B1103D56D25919DDADB2BA71E
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/84ZTvv3mhfHn8jx0VzvPuH_grr8.roa
Signing time: Fri 12 Jul 2024 17:21:34 +0000
ROA not before: Fri 12 Jul 2024 17:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 13:55:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:f6:e7:1b:11:03:d5:6d:25:91:9d:da:db:2b:a7:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 12 17:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f38653befde685f1e7f23c74573bcfb87fe0aebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:16:43:07:b1:76:47:3a:5f:12:c9:5f:02:
e7:13:0d:71:86:be:b7:3b:8f:88:24:58:fc:12:c2:
05:e9:3f:c4:91:91:f8:43:50:4a:67:b3:32:3a:3e:
c9:59:e5:25:55:11:75:59:6f:0f:4a:4a:79:51:5b:
7d:4d:48:1b:9b:81:34:8d:67:04:53:d6:31:60:50:
75:40:d6:34:46:e5:2c:83:fb:a3:21:15:55:88:75:
42:9c:42:95:72:e4:d4:ea:03:45:dc:f7:95:dc:4f:
70:cf:86:03:f6:eb:8a:6d:bf:86:6b:50:21:ff:54:
84:29:d1:65:7d:e7:1e:99:12:3c:96:39:73:0d:8d:
13:fa:90:65:03:9b:22:d3:1b:13:17:46:7b:9b:68:
36:9f:43:27:16:fe:52:1d:d5:b0:ef:ae:bb:f2:54:
03:ff:7d:ae:15:89:ca:ec:65:b4:18:84:b7:35:ac:
af:d0:e4:8f:9d:b1:47:9c:b3:74:64:be:9c:bc:83:
fd:d0:c0:dd:c1:bb:51:0b:56:93:d9:50:d8:23:98:
bb:14:36:89:e3:aa:1e:89:86:21:5b:8c:93:c4:14:
b2:23:ea:64:10:fb:ce:6a:f5:da:88:78:28:19:0a:
0e:9f:bc:f1:1d:96:60:d0:db:91:2a:ff:39:c1:d0:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:86:53:BE:FD:E6:85:F1:E7:F2:3C:74:57:3B:CF:B8:7F:E0:AE:BF
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/84ZTvv3mhfHn8jx0VzvPuH_grr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0/24
94.154.35.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
03:97:a5:ee:2c:11:ef:65:4a:fb:ff:57:a1:05:e9:20:d3:42:
5b:48:37:e4:4d:7a:b7:22:8b:63:7b:87:e9:cf:ac:27:c7:3d:
17:66:bf:dd:84:c7:47:f8:c6:65:75:27:fa:54:1a:47:38:67:
3c:04:f4:3c:01:ba:7f:32:a5:98:dd:c3:01:72:b4:0f:cf:2f:
1e:a2:9a:bc:f7:3c:34:59:a7:4b:8e:5f:ed:3a:62:52:b1:d6:
39:4f:8d:a0:45:83:ef:1e:0a:57:93:37:eb:15:76:2c:1b:20:
4a:67:83:1d:22:50:c4:92:c5:43:05:4a:b0:07:f0:d1:b1:7b:
f8:73:4f:0e:e7:c9:bd:67:6d:db:71:2d:d2:94:a3:ed:74:d7:
fb:6d:b6:28:0e:f7:d2:d6:49:c1:ff:85:37:e1:c5:71:3b:a9:
8f:61:bc:e8:5e:ce:9f:0c:7d:c2:82:f9:ee:9a:9f:16:3b:0b:
df:83:9a:11:9b:fe:6c:3f:ae:88:7c:73:f9:3f:2e:24:16:c1:
7f:d5:47:67:ca:ba:cd:c5:57:c5:a8:1a:f3:29:13:6b:27:6e:
ec:55:06:6a:8e:a5:57:a8:5b:ee:38:3a:0b:9a:5d:63:26:94:
b6:a1:d5:c8:30:e1:36:bc:dc:38:a2:e2:5e:eb:4a:b7:1e:0c:
03:b4:99:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 17:49:48 2024 by rpki-client on console-ams.rpki-client.org