Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Jm3xF6DgEod2YZBMOAEorxr_nhQ.roa
File: Jm3xF6DgEod2YZBMOAEorxr_nhQ.roa (raw, json)
Hash identifier: utzN7paKvYQyVj1862hakFJBxMuDuY16L8js/jdlTwE=
Subject key identifier: 26:6D:F1:17:A0:E0:12:87:76:61:90:4C:38:01:28:AF:1A:FF:9E:14
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019175BFFFBC3E9989B36369D58F664BDFDB
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Jm3xF6DgEod2YZBMOAEorxr_nhQ.roa
Signing time: Wed 21 Aug 2024 16:23:22 +0000
ROA not before: Wed 21 Aug 2024 16:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214351
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 10:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:75:bf:ff:bc:3e:99:89:b3:63:69:d5:8f:66:4b:df:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 21 16:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=266df117a0e012877661904c380128af1aff9e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c8:3e:24:fc:ac:c7:49:da:b4:92:b0:6e:d4:
13:e7:e2:8e:52:c4:ca:2a:46:49:2b:35:25:a6:d7:
cd:9f:76:92:fb:be:9c:4b:9f:35:b6:2c:54:ec:bb:
71:a1:43:41:30:ab:90:6c:e1:b9:cd:3e:b5:df:55:
ee:09:74:cf:a7:ed:b2:ed:e8:e0:03:c1:9b:e0:31:
b7:4c:64:16:80:eb:b0:47:28:90:28:7a:d9:83:df:
bb:7b:8c:18:3a:f0:50:ca:58:3b:87:d8:0e:85:82:
2f:09:e3:31:16:22:21:42:a3:05:a2:cd:a5:20:ef:
65:55:d1:4a:6e:95:21:69:aa:52:fd:18:12:7e:21:
a4:1c:d2:fe:71:8a:98:22:ba:e9:9b:60:b8:ff:c0:
48:ea:ff:42:21:e7:b0:0b:10:9c:7b:9e:13:97:3e:
01:95:d5:f8:63:7e:93:2c:e5:d2:2e:c6:8f:8d:e5:
ef:da:8c:46:c1:c3:94:f1:ad:18:89:ba:b9:69:ae:
a1:7d:d9:ed:12:19:88:9f:a1:7e:eb:f9:d2:5a:0b:
00:1c:03:d4:a1:80:16:da:32:83:e5:4f:f1:1c:2e:
eb:c8:f4:70:38:96:50:5a:1c:ea:aa:8d:c6:50:ee:
ad:cf:73:24:b1:ad:d3:c5:28:0a:6e:d4:1e:61:7d:
1d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6D:F1:17:A0:E0:12:87:76:61:90:4C:38:01:28:AF:1A:FF:9E:14
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Jm3xF6DgEod2YZBMOAEorxr_nhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.14.255
94.154.35.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
34:f6:fe:58:b1:f5:55:ad:16:35:c6:a6:a9:4a:4d:eb:05:22:
87:81:30:ef:a9:a2:7d:63:9d:f5:f6:32:72:d4:31:ca:56:97:
aa:7f:76:68:5b:9c:a5:27:0e:74:90:88:e6:49:87:71:8c:cb:
de:72:5c:50:63:82:ef:e2:e2:d8:fd:4d:ff:05:ea:fd:76:94:
8f:68:fa:b2:c6:ec:dd:bd:f6:b0:df:9a:10:3a:e1:ff:19:42:
28:6f:ed:e1:de:c2:d3:84:cd:52:a1:17:2a:4e:9d:a0:35:70:
87:11:33:b5:c3:3b:48:b4:4d:d6:96:78:87:2f:70:93:85:c1:
2f:14:2e:bd:ed:94:3d:31:87:72:ef:94:12:ed:33:71:78:5c:
ca:c4:7e:09:7b:04:98:7b:4e:a4:e1:51:72:c7:db:85:0f:85:
b0:dc:69:5e:6c:60:e1:f0:87:5a:68:0e:ad:85:50:e0:9d:04:
21:d6:62:08:52:eb:cb:9a:82:1f:40:49:84:f8:1a:af:b2:80:
d4:02:91:98:c9:60:72:1c:80:57:1f:79:e2:fd:b8:84:0f:8c:
e1:f7:70:40:d1:0c:3d:2e:8c:dc:f5:be:e0:ec:4d:ce:1b:fa:
88:90:e8:b2:a4:de:06:47:fd:5a:c0:60:62:7a:66:0a:7b:e6:
92:a5:7d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 13:38:18 2024 by rpki-client on console-ams.rpki-client.org