Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EDWsQttMEMT1IKIGXgRNVzYpsuA.roa
File: EDWsQttMEMT1IKIGXgRNVzYpsuA.roa (raw, json)
Hash identifier: TVl4wzgHw3vFd4NtXPa8y94KppO1w28yHM+eFRSHgj8=
Subject key identifier: 10:35:AC:42:DB:4C:10:C4:F5:20:A2:06:5E:04:4D:57:36:29:B2:E0
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018DD1CE34F30940AA981C2ED86B8866270B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EDWsQttMEMT1IKIGXgRNVzYpsuA.roa
Signing time: Thu 22 Feb 2024 17:12:48 +0000
ROA not before: Thu 22 Feb 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 12:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:ce:34:f3:09:40:aa:98:1c:2e:d8:6b:88:66:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 22 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1035ac42db4c10c4f520a2065e044d573629b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:ab:cd:e3:21:99:7e:38:65:dd:22:65:06:
84:0e:97:fd:2b:4a:3e:a5:63:be:4d:17:0c:50:ce:
81:2c:ed:be:b1:dc:a4:ec:11:8e:e7:19:e8:99:6f:
6f:4c:be:37:bd:ff:00:d8:e4:5d:d4:04:7e:c5:33:
f2:5f:59:25:e5:97:37:63:76:94:82:9d:d9:b0:70:
e2:31:19:76:3f:42:0b:ab:2c:8f:5a:34:02:f9:5e:
d2:ec:87:ac:85:43:d6:76:27:2a:3f:f6:f0:d2:db:
6d:68:bb:84:ca:18:a2:b3:8b:3b:e4:b7:cf:4a:57:
af:57:4b:d9:2d:eb:9a:46:47:cf:bc:14:46:2e:d3:
05:ff:25:4d:27:ce:e7:16:e2:68:4a:be:29:ec:a1:
4a:e6:c1:c7:bf:27:77:88:48:0d:0f:7d:7f:04:7c:
79:d4:47:88:a4:5d:01:bf:65:66:e8:3e:11:4a:78:
ba:81:a7:db:03:a1:5d:2b:e0:66:9f:bb:d1:6a:f8:
e8:ee:9d:67:bf:ff:1f:59:04:0f:8f:cf:58:20:17:
fa:8a:9f:db:42:95:4b:c6:f6:cf:bf:d1:40:59:d7:
e9:c0:6a:e1:3a:9c:02:da:af:91:f3:ae:f5:76:a9:
d5:db:70:e6:ca:2f:3c:98:52:8c:f9:97:56:64:99:
57:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:35:AC:42:DB:4C:10:C4:F5:20:A2:06:5E:04:4D:57:36:29:B2:E0
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/EDWsQttMEMT1IKIGXgRNVzYpsuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
61:48:73:33:16:85:4a:c7:f6:20:97:c3:6c:3f:d8:8f:70:d4:
4d:8b:4f:82:cd:d2:26:9f:d3:5f:e1:05:be:ff:c0:a5:35:70:
b1:81:00:44:b7:30:24:79:0c:63:2e:ea:21:10:a0:ac:cd:1c:
88:d0:2c:8f:40:f6:34:93:21:89:26:4f:6d:3f:56:b4:23:47:
65:7d:4d:14:cd:88:4a:39:3e:49:9d:78:2c:82:83:fb:59:e7:
01:46:73:f1:89:89:44:a1:8d:49:ee:e5:46:a6:60:3f:f8:af:
c1:cb:b9:03:ca:94:49:9a:5b:60:90:7f:dc:00:90:23:50:4f:
f7:2e:ea:97:c2:67:64:da:c3:06:59:7f:d9:45:06:ec:1a:cb:
e4:cc:24:bb:8f:4c:46:ef:8c:c0:43:46:33:ae:88:ad:17:f8:
67:c4:9b:58:c2:a2:a6:17:12:16:1e:a5:79:1c:b2:ae:71:92:
90:0c:29:5e:0a:1f:aa:db:0d:32:09:2a:e6:5e:20:82:52:fc:
46:9a:23:77:03:b9:ad:09:71:b4:ec:c7:53:90:9e:16:e9:1e:
17:68:42:2e:be:c2:88:96:d3:5b:22:41:02:e5:97:70:cb:2d:
99:75:0b:18:10:d8:5b:b8:dd:00:16:61:3b:80:5a:8a:7e:e7:
df:c1:4d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 15:39:20 2024 by rpki-client on console-ams.rpki-client.org