Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/IjGxZ3Bd96_Gs5xC8x6F2WJTus8.roa
File: IjGxZ3Bd96_Gs5xC8x6F2WJTus8.roa (raw, json)
Hash identifier: oQ6WF6ULcn13dPTDLCCbZC/pmL7qlkgyTJ/xiEV6O28=
Subject key identifier: 22:31:B1:67:70:5D:F7:AF:C6:B3:9C:42:F3:1E:85:D9:62:53:BA:CF
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A75F08924AFEC964B6F0D40DBCDAF581F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/IjGxZ3Bd96_Gs5xC8x6F2WJTus8.roa
Signing time: Fri 08 Sep 2023 17:56:52 +0000
ROA not before: Fri 08 Sep 2023 17:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:f0:89:24:af:ec:96:4b:6f:0d:40:db:cd:af:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 8 17:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2231b167705df7afc6b39c42f31e85d96253bacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:83:f4:a0:52:82:16:fd:3c:7a:80:f6:30:d2:
4e:14:16:62:c3:e4:0a:91:4e:95:d6:c4:5b:4d:b9:
eb:4b:4b:de:99:8a:9e:52:fb:da:c0:42:0c:0d:2a:
13:55:d6:9a:4e:3e:6b:39:1c:41:54:4f:33:61:b9:
c0:2f:88:03:cf:a3:d3:61:9d:6c:27:51:5e:ec:73:
96:a5:76:8c:b3:e6:d5:90:8f:f2:f1:26:18:01:e1:
06:60:cc:ff:82:6f:98:bb:c9:85:7e:41:30:8f:52:
05:7e:18:5e:31:10:d2:c9:c3:d1:2b:77:a9:5f:2e:
62:e2:09:43:9d:61:9a:94:b1:eb:aa:57:84:49:52:
c4:fa:b4:99:e8:86:9e:b8:5a:40:92:99:4b:2b:c0:
bc:2c:fa:bf:c6:3a:f2:8c:88:f5:3b:1e:43:60:36:
65:e5:5e:66:bb:8d:9b:49:f9:31:98:a1:cf:e2:8a:
78:0b:55:62:c9:cd:17:78:9d:e1:c8:b9:51:e4:2d:
cd:8f:a9:3c:b1:8f:03:c3:1c:6e:9d:ea:17:cc:83:
af:fb:ca:0a:ee:3d:2d:84:60:cd:7d:30:e6:4d:be:
0c:d2:6b:4b:42:63:5e:b9:ef:f4:d4:ea:48:19:1d:
89:e9:4e:99:40:d2:81:ec:35:f4:7d:df:d3:85:0b:
87:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:31:B1:67:70:5D:F7:AF:C6:B3:9C:42:F3:1E:85:D9:62:53:BA:CF
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/IjGxZ3Bd96_Gs5xC8x6F2WJTus8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
20:10:c9:db:5a:6d:f3:8b:0f:1a:42:a1:78:14:07:df:60:bc:
35:11:20:e3:91:df:49:8c:ce:59:c7:cd:83:dd:de:85:87:87:
70:30:82:56:8a:21:ac:cb:b1:df:3a:e4:ef:99:73:56:c6:15:
d3:88:05:06:84:da:f5:49:58:82:ab:2a:95:40:aa:93:b4:92:
17:c4:e6:19:ce:c1:17:f4:93:2f:96:43:eb:8a:1f:e6:4d:2f:
c8:aa:8a:37:08:0e:c5:ae:c7:b9:29:24:26:2e:ad:0e:f1:2e:
fb:00:2c:ab:8a:87:5a:75:b6:01:b0:4f:8d:fc:b0:da:f7:b5:
47:bd:63:8f:29:e1:cf:ac:ca:a4:16:87:04:7e:a7:3e:28:46:
c6:a5:eb:7a:3c:45:81:81:d2:60:e1:72:5b:ef:52:69:05:3b:
55:90:ec:b0:e3:7c:d8:2e:4e:03:b3:90:4a:52:39:ca:a1:f8:
6e:4b:98:3e:7e:6b:14:bb:db:d1:e1:18:1e:74:51:c3:76:49:
61:70:2e:2f:b7:e8:e5:1e:55:9b:63:34:99:84:2e:27:cd:7b:
6c:a9:55:1e:d5:23:fa:be:94:d3:6f:65:74:2a:32:fd:df:88:
3e:94:aa:80:b4:e1:da:4f:85:9b:1e:f8:f8:99:9d:b7:24:c8:
90:3a:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 17:38:56 2023 by rpki-client on console-fra.rpki-client.org