Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/868z79CjV2XNfTHYPgyX2QOUPuw.roa
File: 868z79CjV2XNfTHYPgyX2QOUPuw.roa (raw, json)
Hash identifier: zsMVjx2aRMyiIgEvQWwiBcPoAtFRDLOw2zG9//eCNNg=
Subject key identifier: F3:AF:33:EF:D0:A3:57:65:CD:7D:31:D8:3E:0C:97:D9:03:94:3E:EC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018EAA7899A22EBF194C890B682DC35F17E5
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/868z79CjV2XNfTHYPgyX2QOUPuw.roa
Signing time: Thu 04 Apr 2024 18:56:54 +0000
ROA not before: Thu 04 Apr 2024 18:56:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 09:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:aa:78:99:a2:2e:bf:19:4c:89:0b:68:2d:c3:5f:17:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 4 18:56:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3af33efd0a35765cd7d31d83e0c97d903943eec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:5a:46:fb:c5:5e:07:02:33:00:df:4f:07:
55:d2:9b:4b:c3:21:3e:94:c5:d9:fa:f5:ff:dd:78:
57:cd:36:95:59:e3:06:01:cb:e9:1c:ef:10:f0:18:
95:88:21:18:e0:66:7d:e9:1d:80:ac:6e:81:61:44:
2b:02:f8:f7:0c:64:51:d2:d6:51:1e:83:d1:8d:0c:
29:c1:93:be:56:35:61:c1:ea:57:3a:73:e2:6f:51:
69:72:da:1f:d7:7a:ee:bd:de:ea:bf:50:f7:ae:8f:
66:4a:37:39:dc:1f:cd:59:ef:c6:74:0b:24:f6:7e:
d0:47:76:22:bc:0a:a4:1b:df:5f:47:db:0c:05:d3:
fc:4b:8e:60:96:65:a5:4e:20:b0:61:ff:8f:6e:f1:
be:b2:ab:e8:bf:a2:af:3e:98:ce:af:83:39:3e:20:
39:2b:03:50:85:43:2b:6e:5c:86:be:47:0f:0b:66:
2f:cf:be:55:8d:44:c6:b6:cb:9a:70:f7:17:9c:0b:
11:3b:60:be:1f:c4:f3:35:d1:80:e0:0f:b9:9a:b6:
8c:10:11:9f:7d:3b:52:22:5b:67:c6:fe:65:7c:c2:
3e:bb:bb:4b:16:59:76:1f:c0:42:14:60:6d:db:86:
b1:34:f4:1f:35:65:3b:01:b2:98:e4:74:0d:e6:ca:
08:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AF:33:EF:D0:A3:57:65:CD:7D:31:D8:3E:0C:97:D9:03:94:3E:EC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/868z79CjV2XNfTHYPgyX2QOUPuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
8a:e0:91:25:58:9b:20:55:64:51:ca:9f:35:17:08:fc:37:44:
ee:2a:8d:3a:99:ef:60:11:e4:e7:e3:39:5f:2f:fb:90:5b:0c:
21:c4:26:e0:d5:aa:e0:41:1f:6e:dc:c6:fc:cf:ca:94:36:f5:
b0:cc:f4:1c:32:49:da:27:a8:39:d9:5c:fc:b7:20:c3:91:3c:
29:9e:f1:3b:41:a5:c6:07:61:5e:ed:fa:18:94:63:32:e7:b9:
41:09:91:59:0a:6c:f9:c8:f8:de:78:0e:9a:29:8e:89:4c:d0:
7c:3e:14:c3:ff:3e:81:3a:c0:e7:9a:0b:85:01:30:69:48:d7:
71:84:be:06:29:3e:ea:67:96:13:f7:39:dd:a1:e9:6e:77:bb:
80:cb:8c:f1:48:8e:45:80:21:c7:67:f8:bb:3d:1e:75:6c:bb:
85:98:1a:be:54:0d:3a:4a:19:84:a5:45:d6:e7:0a:75:2f:3e:
8b:bd:b2:93:1e:88:05:47:db:b9:25:1b:49:28:22:b8:83:07:
a6:bf:b6:d7:69:cf:16:d5:f1:62:48:8f:c8:cc:5a:63:37:2d:
f9:b7:0a:9f:69:bc:0c:84:97:76:96:ca:d7:53:48:97:da:3d:
26:95:39:56:19:cf:2e:66:21:08:28:f3:01:dd:d0:fa:a6:87:
46:88:a8:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 5 13:05:19 2024 by rpki-client on console-fra.rpki-client.org