Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ipbnb5XjpjWVZ2gVRDsp1P6_yHE.roa
File: Ipbnb5XjpjWVZ2gVRDsp1P6_yHE.roa (raw, json)
Hash identifier: /Y+hjnM723LLOxAIzW+XPwaZGzZh5aoxBRmiy0rOPEc=
Subject key identifier: 22:96:E7:6F:95:E3:A6:35:95:67:68:15:44:3B:29:D4:FE:BF:C8:71
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018C1ADAE258771F2E09B2FA9F71CF31459E
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ipbnb5XjpjWVZ2gVRDsp1P6_yHE.roa
Signing time: Wed 29 Nov 2023 11:33:21 +0000
ROA not before: Wed 29 Nov 2023 11:33:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:da:e2:58:77:1f:2e:09:b2:fa:9f:71:cf:31:45:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 29 11:33:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2296e76f95e3a63595676815443b29d4febfc871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9a:b9:0b:94:e0:9f:e4:e7:80:ff:27:3b:94:
9d:ad:03:02:90:7e:6b:ce:ed:92:df:6d:84:a3:3d:
d9:8b:36:d0:3b:bd:eb:50:e9:58:1f:1a:76:2d:7a:
5b:f8:6d:0a:64:f6:f9:a4:a4:bf:09:f0:3f:80:a4:
b7:07:ff:fd:0b:3a:ce:f4:92:25:3e:b2:85:67:b3:
07:ad:6d:b4:0d:51:f4:d3:27:9a:30:a0:08:ac:d5:
52:0a:69:2d:b1:04:e7:9a:08:3b:63:f1:c7:e4:2f:
e9:f8:07:5d:ba:c5:fd:25:07:47:53:72:06:15:aa:
6f:a4:d2:ca:8a:cc:07:5c:94:8d:1f:4c:1b:8e:5c:
38:ae:81:72:02:78:f9:eb:53:d6:ee:7f:46:77:c3:
49:03:10:c7:f0:18:9c:e9:cb:3f:f3:44:9b:08:10:
05:6f:12:c3:fc:f4:a3:d7:16:44:d6:14:cf:e8:58:
c7:d0:11:6a:c0:92:a1:f4:18:86:91:2f:fa:3c:81:
e0:1e:47:e9:75:8a:33:81:f2:67:4f:49:85:0a:3f:
45:e2:ac:66:12:69:bf:df:f4:73:d0:70:46:f3:b0:
94:e3:d8:81:03:4e:33:71:7d:2d:7a:6d:9c:e3:7a:
10:b6:91:88:6f:35:fe:92:4f:28:92:d0:7c:2a:f6:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:E7:6F:95:E3:A6:35:95:67:68:15:44:3B:29:D4:FE:BF:C8:71
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Ipbnb5XjpjWVZ2gVRDsp1P6_yHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
33:74:bd:72:a2:5f:48:a0:d7:0a:0a:55:d6:6b:f1:0a:7a:97:
48:6b:c9:85:fd:ac:b5:5e:0f:4f:ba:89:0c:22:fb:6c:ed:4e:
29:f6:5e:6e:71:2b:e7:84:72:4c:19:a9:01:80:34:53:8e:7e:
fc:61:69:e0:8d:ca:28:b9:08:10:e6:73:83:8c:83:9e:fa:a1:
31:20:72:9c:2b:a4:df:bf:16:f9:cb:ec:0c:d2:89:ed:c6:f3:
b0:86:b8:1e:cc:d2:df:34:0b:24:10:7b:32:a0:04:b4:c4:02:
bd:3f:09:66:f8:55:54:e8:71:72:18:d9:f7:d5:bc:3d:f2:aa:
3a:26:38:4d:a9:4d:7a:b4:b8:6c:17:26:57:f8:b3:67:c2:ca:
97:21:74:87:f2:71:0f:19:fa:8c:40:c6:11:ac:a8:d6:22:7d:
29:4f:52:06:7b:99:eb:e6:99:22:a5:73:86:a0:1c:d4:eb:e3:
ce:a0:91:c2:77:23:68:d8:2d:45:b7:74:24:e2:81:26:0f:68:
81:e4:0d:12:67:a4:3d:21:c9:cf:43:cb:e4:8e:47:b3:0d:4c:
ae:d8:32:5c:b3:04:43:42:0a:c0:05:46:33:fa:cd:2d:80:67:
04:d8:ed:26:39:f6:0b:a5:0e:19:ae:61:21:eb:3d:f4:29:70:
ee:e2:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 16 16:31:02 2023 by rpki-client on console-fra.rpki-client.org