Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GfJTUZNnG8CvM7HgPxTSu8XQiUI.roa
File: GfJTUZNnG8CvM7HgPxTSu8XQiUI.roa (raw, json)
Hash identifier: zimYXkhWNtnQ78ZT40S3DC1M/IEoNANdw2ixHbMlwLg=
Subject key identifier: 19:F2:53:51:93:67:1B:C0:AF:33:B1:E0:3F:14:D2:BB:C5:D0:89:42
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018BBE280D295882A417F5C44A86E0B16F13
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GfJTUZNnG8CvM7HgPxTSu8XQiUI.roa
Signing time: Sat 11 Nov 2023 11:32:57 +0000
ROA not before: Sat 11 Nov 2023 11:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:28:0d:29:58:82:a4:17:f5:c4:4a:86:e0:b1:6f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 11 11:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19f2535193671bc0af33b1e03f14d2bbc5d08942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:ac:1a:2a:92:33:ee:fc:0f:1e:4f:f0:ba:
7f:23:3f:e0:98:74:e6:bd:99:45:e6:42:ad:8c:2a:
1e:2e:bf:6c:d9:f4:20:80:a9:9f:e7:00:e5:a6:0e:
5c:a6:79:52:a4:2f:34:48:cf:05:f9:53:0d:d2:9e:
2a:f7:f6:6c:51:b3:ec:bd:b7:44:c3:97:2e:29:98:
91:62:72:ca:5b:20:2a:58:c4:4a:1d:49:49:c6:79:
67:d1:33:c3:f3:de:be:65:1c:be:69:59:4e:40:8b:
ee:e7:15:c1:a4:3c:de:72:62:79:57:3f:dc:ba:82:
4a:68:19:ed:2a:35:ae:e9:ea:fc:49:5f:b0:d2:ac:
72:87:23:75:cc:08:08:f0:6e:b2:bb:c8:53:7f:c9:
65:3c:24:e2:1b:01:c2:e5:05:1f:9e:48:a6:4c:2e:
81:91:e8:c5:95:04:42:2e:3b:46:34:eb:d4:cf:de:
11:0c:ff:9c:fe:7a:b8:27:e6:cc:11:31:f5:51:11:
7f:72:b2:cd:c0:0a:8b:74:5b:bb:6a:54:a7:f3:08:
0b:e3:e8:d1:17:90:b4:eb:0e:ed:c3:5a:52:4b:5c:
24:3f:72:ee:93:b3:b2:40:d2:3a:3e:9b:70:cc:b6:
cf:37:73:d9:f9:d0:8e:5d:e0:02:5f:2a:8a:75:50:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:53:51:93:67:1B:C0:AF:33:B1:E0:3F:14:D2:BB:C5:D0:89:42
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/GfJTUZNnG8CvM7HgPxTSu8XQiUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
20:ad:43:57:81:dc:11:57:a4:10:8d:11:2d:12:db:f3:93:fc:
05:b5:8c:72:da:63:0a:4f:04:94:a8:06:60:52:4c:b3:94:11:
be:dc:48:12:c9:4b:bf:4f:15:6d:67:e4:0e:40:51:06:a7:55:
84:1b:c8:00:b5:17:95:20:ef:a7:b6:f5:0e:2b:1c:b5:44:00:
28:2c:b8:bf:2e:0c:35:11:a7:dd:f3:c2:f7:6d:31:83:08:33:
e7:ee:3b:e0:b6:41:1b:8d:b5:d8:e0:a4:99:3a:98:bf:9f:14:
93:8d:e5:33:15:1c:6e:d2:33:02:2f:2c:1e:58:10:64:8c:58:
ed:65:7c:83:05:9f:b3:44:06:f0:8a:79:13:bc:15:44:33:fc:
9c:24:64:e7:3f:26:ad:bf:e9:59:4d:ca:9e:51:a8:e4:6d:73:
ba:c6:36:54:71:14:b6:3f:79:1d:f5:a6:77:18:db:83:8b:08:
7e:1e:30:f9:0c:e2:5f:ce:38:10:b8:54:d4:1f:d3:dd:ec:8d:
b8:61:c8:35:22:c5:9d:04:c4:80:f5:b1:22:1d:1e:85:eb:6a:
2f:f0:89:c8:23:f8:0f:0f:cd:5d:1d:57:0f:14:2e:bb:95:ac:
2a:c7:46:16:6c:69:25:d8:6c:eb:cf:19:65:03:7f:a7:1f:d8:
b5:3c:76:1f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYu+KA0pWIKkF/XESobgsW8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMTExMTEzMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWYyNTM1MTkzNjcxYmMwYWYzM2IxZTAzZjE0ZDJiYmM1ZDA4OTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb6sGiqSM+78Dx5P8Lp/Iz/gmHTm
vZlF5kKtjCoeLr9s2fQggKmf5wDlpg5cpnlSpC80SM8F+VMN0p4q9/ZsUbPsvbdE
w5cuKZiRYnLKWyAqWMRKHUlJxnln0TPD896+ZRy+aVlOQIvu5xXBpDzecmJ5Vz/c
uoJKaBntKjWu6er8SV+w0qxyhyN1zAgI8G6yu8hTf8llPCTiGwHC5QUfnkimTC6B
kejFlQRCLjtGNOvUz94RDP+c/nq4J+bMETH1URF/crLNwAqLdFu7alSn8wgL4+jR
F5C06w7tw1pSS1wkP3Luk7OyQNI6PptwzLbPN3PZ+dCOXeACXyqKdVDQLwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBnyU1GTZxvArzOx4D8U0rvF0IlCMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvR2ZKVFVaTm5HOEN2TTdIZ1B4VFN1OFhRaVVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+QNAwQA
W+QPAwQCXpogAwQAXpomMA0GCSqGSIb3DQEBCwUAA4IBAQAgrUNXgdwRV6QQjREt
Etvzk/wFtYxy2mMKTwSUqAZgUkyzlBG+3EgSyUu/TxVtZ+QOQFEGp1WEG8gAtReV
IO+ntvUOKxy1RAAoLLi/Lgw1Eafd88L3bTGDCDPn7jvgtkEbjbXY4KSZOpi/nxST
jeUzFRxu0jMCLyweWBBkjFjtZXyDBZ+zRAbwinkTvBVEM/ycJGTnPyatv+lZTcqe
UajkbXO6xjZUcRS2P3kd9aZ3GNuDiwh+HjD5DOJfzjgQuFTUH9Pd7I24Ycg1IsWd
BMSA9bEiHR6F62ov8InII/gPD81dHVcPFC67lawqx0YWbGkl2GzrzxllA3+nH9i1
PHYf
-----END CERTIFICATE-----
Generated at Sun Nov 12 09:53:14 2023 by rpki-client on console-ams.rpki-client.org