Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tnYKHa1AAkucumXANvi0lj9Caw.roa
File: 8tnYKHa1AAkucumXANvi0lj9Caw.roa (raw, json)
Hash identifier: a2f4I6q5AkubS9DHHY/XAmWQ0AeRhwjGhq20CFQG3/E=
Subject key identifier: F2:D9:D8:28:76:B5:00:09:2E:72:E9:97:00:DB:E2:D2:58:FD:09:AC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CAD501F4926A66E1DE4DD68677FA2C327
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tnYKHa1AAkucumXANvi0lj9Caw.roa
Signing time: Wed 27 Dec 2023 22:05:58 +0000
ROA not before: Wed 27 Dec 2023 22:05:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:50:1f:49:26:a6:6e:1d:e4:dd:68:67:7f:a2:c3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Dec 27 22:05:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2d9d82876b500092e72e99700dbe2d258fd09ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:08:aa:16:c1:96:25:0a:94:6e:42:39:f1:
9f:bb:8a:b6:0a:19:11:1d:c6:88:2b:99:cb:ce:af:
fc:69:3e:a9:8f:6d:32:ae:77:b9:f6:e8:f5:9f:f7:
4f:fc:8b:eb:23:d4:4f:e7:14:08:0c:c5:68:ab:28:
be:c5:97:0f:fc:5e:90:7c:e7:57:7a:ce:0f:1c:89:
0f:b5:06:c2:9b:89:50:9c:b7:9e:f0:e0:97:51:3c:
cd:0b:e1:00:c4:6d:a0:79:f8:e4:68:7b:d0:12:16:
3f:56:ba:c6:4c:02:7f:5c:56:f5:ee:65:e7:8e:d2:
dd:8f:cf:40:34:63:19:6b:7b:eb:05:1c:4b:2f:f7:
95:36:a6:00:0f:85:25:d2:bd:ee:10:81:13:1e:44:
cc:5a:7e:23:25:57:c1:2d:e6:43:eb:40:3a:b8:7f:
97:47:94:65:bd:b5:2a:76:e0:0f:50:a2:88:0e:55:
3e:e7:7c:b8:cb:1a:29:0c:b3:bf:7d:84:a9:5c:2c:
19:0a:64:a5:ae:4d:39:d8:41:25:05:46:42:ed:6f:
cc:94:11:06:63:99:d6:9d:07:bb:a2:0f:d5:ff:57:
0e:28:fe:87:83:50:3f:c2:7f:e9:39:6f:42:69:a4:
bf:ab:e7:87:3c:49:4c:78:1c:68:48:f3:bc:34:b3:
5c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:D8:28:76:B5:00:09:2E:72:E9:97:00:DB:E2:D2:58:FD:09:AC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8tnYKHa1AAkucumXANvi0lj9Caw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
98:77:13:88:44:b6:cc:20:5e:01:3f:47:aa:db:2f:86:82:3c:
f8:64:95:f3:5b:a3:cf:d0:15:42:7f:6d:be:0c:5d:82:5a:b7:
fc:fc:13:ad:67:25:f5:23:ce:20:03:b7:32:24:57:b7:9d:3a:
be:cf:b4:d6:3b:e2:fa:12:39:81:9e:91:6d:ce:0b:3f:96:d1:
c3:0f:88:fd:8d:cd:98:71:1d:15:cc:bf:61:dd:01:c3:0a:43:
65:46:02:ce:a1:ec:d4:7d:04:6b:6f:82:ab:38:db:14:0f:b2:
bc:23:37:44:79:53:16:de:fc:e0:99:93:79:bc:a1:9f:fb:11:
e6:e0:1c:bd:dd:b2:62:84:c4:c5:cf:56:ae:c6:cb:d2:9b:a4:
ee:dc:10:a4:27:b4:46:18:92:e1:f9:e9:6d:f5:51:fe:df:87:
ab:1e:d6:77:47:f5:f9:13:be:e6:e9:a2:6e:d8:eb:66:57:f5:
ef:1f:4b:e9:12:96:3b:f0:41:17:28:3d:13:c4:f8:0b:4b:9f:
a8:32:c0:2a:dd:a9:a8:d0:ff:66:d9:f5:e6:e2:62:a1:85:16:
fd:89:17:52:9b:dc:55:1a:52:1a:5d:fd:e5:4c:9b:66:9f:52:
15:4c:e4:93:a6:63:f8:ac:b4:88:53:90:ba:97:b6:6c:ec:e7:
60:e8:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 22:11:25 2023 by rpki-client on console-fra.rpki-client.org