Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8x24sBefOu5cGxjwqo8PvINedTc.roa
File: 8x24sBefOu5cGxjwqo8PvINedTc.roa (raw, json)
Hash identifier: BXuJ1cNhq9aDZikwFixFjY06WQgqkL8b26rwETw4xSM=
Subject key identifier: F3:1D:B8:B0:17:9F:3A:EE:5C:1B:18:F0:AA:8F:0F:BC:83:5E:75:37
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018FA4BEDC6798BDC8BD7EABC414088AE388
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8x24sBefOu5cGxjwqo8PvINedTc.roa
Signing time: Thu 23 May 2024 09:18:42 +0000
ROA not before: Thu 23 May 2024 09:18:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 May 2024 11:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:be:dc:67:98:bd:c8:bd:7e:ab:c4:14:08:8a:e3:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: May 23 09:18:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f31db8b0179f3aee5c1b18f0aa8f0fbc835e7537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:ba:a9:37:fc:e9:20:7a:03:3a:de:96:1d:
da:3e:3b:24:2c:c6:9d:93:6b:f9:35:94:a4:0c:fe:
3d:e7:02:51:80:c1:95:62:cc:48:0d:94:4a:48:4f:
3f:75:27:5a:c7:8e:c7:ca:fc:2f:9c:53:70:48:1f:
87:10:e1:bc:de:63:42:bb:3d:a4:de:85:4f:37:4d:
3d:86:8d:a9:c8:ca:59:c9:7b:02:b0:9d:d9:1a:7d:
0c:29:d7:4f:f7:c0:a4:01:d2:72:fd:9a:f0:3c:c9:
ad:93:27:76:b7:12:a1:40:b9:b6:51:cd:b9:2e:b6:
70:2f:7d:bd:30:41:e9:72:98:11:03:09:64:e1:a0:
8a:77:c0:05:d6:6e:9a:d5:ca:5d:4c:7a:b4:2c:4f:
ab:7e:31:f7:d9:4a:6c:d9:06:5a:e3:b6:ea:b1:3f:
3c:8a:dc:c1:39:66:9c:13:49:8a:f9:e0:4c:35:1f:
3a:94:ec:5e:61:c1:62:c7:de:84:e1:37:b3:c5:51:
b8:99:39:7a:82:55:07:8b:4c:16:55:a8:57:61:20:
ff:12:eb:1d:7f:bf:d2:87:e6:e8:7a:30:2a:ef:15:
57:0e:90:5b:3c:cc:f6:80:f3:59:23:ef:fc:8a:dd:
09:b3:af:1b:96:9d:e8:9c:b8:39:cd:17:f8:61:a0:
49:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:1D:B8:B0:17:9F:3A:EE:5C:1B:18:F0:AA:8F:0F:BC:83:5E:75:37
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/8x24sBefOu5cGxjwqo8PvINedTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
60:b5:73:45:b9:ec:0b:14:e6:49:6d:7a:62:7d:d6:13:f4:38:
ae:5c:06:18:87:0b:ea:73:39:93:b5:bd:8e:01:5c:d3:7b:1d:
9f:72:f9:0d:be:64:21:a8:35:c6:f3:93:33:f7:49:a3:99:cd:
75:8e:27:cd:23:04:17:c6:d9:df:b9:45:1e:16:da:fd:ff:00:
6b:70:64:1c:77:19:30:ed:c1:31:92:07:27:2c:74:e4:1f:2d:
7d:80:5a:d7:69:75:81:dd:57:b7:45:64:f6:9e:6b:da:49:7f:
1a:bc:0b:f6:8b:57:7f:14:a2:10:b7:9d:f2:e8:a6:52:cd:3d:
ef:7b:18:b7:ae:d3:d4:9c:72:77:3f:8a:60:b4:9f:db:c6:f2:
89:da:ae:32:ed:3d:b6:8d:89:7d:b5:9e:ec:33:74:51:b3:f2:
07:7b:d7:6f:ac:24:b7:4a:62:f5:e6:90:a6:d9:1e:48:99:3b:
c3:f3:04:52:de:a8:97:08:de:c4:56:e4:28:25:db:56:af:e4:
48:27:86:44:a8:85:06:6e:01:40:c9:54:1c:3a:d3:4c:d0:22:
37:8b:bc:53:82:a8:b7:c3:38:ee:84:2e:04:15:cc:aa:5c:86:
d1:5c:c1:87:10:50:80:b6:7f:02:e6:30:ce:86:fa:76:fe:e5:
c7:38:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org