Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8GC6W1wpb8f9u50jrbhheF4xZ2g.roa
File: 8GC6W1wpb8f9u50jrbhheF4xZ2g.roa (raw, json)
Hash identifier: 9LriQMp7Dsq/NSlguAg0s31aekLgtbgk8dFW30lmAmM=
Subject key identifier: F0:60:BA:5B:5C:29:6F:C7:FD:BB:9D:23:AD:B8:61:78:5E:31:67:68
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A75F089B8DED66727ADC7C9F3D8AD05C4
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8GC6W1wpb8f9u50jrbhheF4xZ2g.roa
Signing time: Fri 08 Sep 2023 17:56:52 +0000
ROA not before: Fri 08 Sep 2023 17:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:f0:89:b8:de:d6:67:27:ad:c7:c9:f3:d8:ad:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 8 17:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f060ba5b5c296fc7fdbb9d23adb861785e316768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:69:53:95:7a:8e:bf:44:72:75:5e:8f:3e:
64:2c:ce:18:6e:86:a6:a7:9c:5e:cb:46:dd:de:d3:
03:bb:dc:8f:c0:32:5a:9a:31:55:25:9c:22:7b:4f:
08:75:18:05:d6:af:af:c1:86:df:47:3f:79:92:6f:
46:5b:5e:16:b0:78:ac:9c:20:bb:7d:09:c5:9f:ae:
e0:65:8c:9f:f8:25:2e:fb:76:d7:35:0b:a1:d6:08:
d2:48:04:16:45:17:38:3b:54:03:58:93:3f:a2:1f:
a6:21:30:17:f9:9c:1c:32:35:62:41:6a:2d:97:a5:
9f:92:80:02:ae:85:83:8d:40:00:c6:2b:44:6c:ec:
bf:33:f0:a1:da:2e:57:44:9e:df:12:e0:79:08:29:
39:49:43:f7:9c:50:41:6b:51:b2:ac:6b:eb:6d:26:
57:26:b8:a1:04:c3:fa:78:96:bc:1f:a5:d2:96:0a:
01:54:d1:18:2d:ed:aa:98:1a:34:b2:3a:3a:f8:27:
38:31:59:c9:21:30:50:fc:b6:ac:0a:8a:e0:6e:0c:
7f:5c:34:5a:27:8d:17:24:36:05:b1:d1:67:df:d3:
1f:cf:20:13:0c:bf:5e:96:e6:1a:ea:5e:d4:66:3d:
9c:e8:c2:e7:29:11:8c:0f:fb:39:c7:34:83:68:7d:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:60:BA:5B:5C:29:6F:C7:FD:BB:9D:23:AD:B8:61:78:5E:31:67:68
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8GC6W1wpb8f9u50jrbhheF4xZ2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:0f:4c:17:6b:33:b9:15:b0:b5:03:9c:a6:bd:f0:64:16:92:
c7:aa:0e:af:26:59:bb:3f:82:0e:d8:2e:42:f3:36:51:b5:f9:
7b:b8:d3:ab:ba:b7:6f:7a:5b:53:d8:30:ed:fc:46:69:77:88:
4d:89:e7:c0:20:65:77:6c:92:85:b4:ce:30:57:98:43:39:80:
cb:21:96:ab:1e:97:9f:5b:6a:f9:79:ba:d1:9b:d1:a1:e9:9a:
e5:b2:92:32:aa:85:6f:1b:3f:cc:b4:1b:6e:d5:c2:58:ff:a7:
21:14:5b:b5:76:d6:0a:2a:05:bf:ed:4a:d2:f6:29:ad:de:0f:
10:b6:a5:ac:f9:25:c0:7e:7c:c6:4c:16:d5:b5:df:78:3d:4b:
cf:b0:0a:06:e3:88:9b:a3:67:22:16:06:50:08:19:0b:ca:6a:
a8:f4:b8:01:be:28:9a:5c:70:9e:cc:04:2b:83:29:eb:88:2b:
50:be:de:60:5f:34:61:2d:c8:f3:2d:bc:11:09:90:d8:26:e7:
de:9f:a0:3b:32:bd:8d:76:33:f2:92:d2:41:a5:b1:46:74:f3:
82:d6:24:ed:df:dd:82:90:93:4f:f3:89:c4:6f:38:eb:6e:d8:
58:46:85:bd:b7:7a:40:a4:4f:7c:47:f9:c8:53:82:09:42:61:
b6:d8:bb:22
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYp18Im43tZnJ63HyfPYrQXEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMwOTA4MTc1NjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDYwYmE1YjVjMjk2ZmM3ZmRiYjlkMjNhZGI4NjE3ODVlMzE2NzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhENpU5V6jr9EcnVejz5kLM4Yboam
p5xey0bd3tMDu9yPwDJamjFVJZwie08IdRgF1q+vwYbfRz95km9GW14WsHisnCC7
fQnFn67gZYyf+CUu+3bXNQuh1gjSSAQWRRc4O1QDWJM/oh+mITAX+ZwcMjViQWot
l6WfkoACroWDjUAAxitEbOy/M/Ch2i5XRJ7fEuB5CCk5SUP3nFBBa1GyrGvrbSZX
JrihBMP6eJa8H6XSlgoBVNEYLe2qmBo0sjo6+Cc4MVnJITBQ/LasCorgbgx/XDRa
J40XJDYFsdFn39MfzyATDL9eluYa6l7UZj2c6MLnKRGMD/s5xzSDaH1C9wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFPBgultcKW/H/budI624YXheMWdoMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvOEdDNlcxd3BiOGY5dTUwanJiaGhlRjR4WjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABb5A0D
BARb5AADBAJemiADBABemiYwDQYJKoZIhvcNAQELBQADggEBAI8PTBdrM7kVsLUD
nKa98GQWkseqDq8mWbs/gg7YLkLzNlG1+Xu406u6t296W1PYMO38Rml3iE2J58Ag
ZXdskoW0zjBXmEM5gMshlqsel59bavl5utGb0aHpmuWykjKqhW8bP8y0G27Vwlj/
pyEUW7V21goqBb/tStL2Ka3eDxC2paz5JcB+fMZMFtW133g9S8+wCgbjiJujZyIW
BlAIGQvKaqj0uAG+KJpccJ7MBCuDKeuIK1C+3mBfNGEtyPMtvBEJkNgm596foDsy
vY12M/KS0kGlsUZ084LWJO3f3YKQk0/zicRvOOtu2FhGhb23ekCkT3xH+chTgglC
YbbYuyI=
-----END CERTIFICATE-----
Generated at Sun Sep 10 17:38:56 2023 by rpki-client on console-fra.rpki-client.org