Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L0EplAADSzKpo2NBPqtLSyF1i3U.roa
File: L0EplAADSzKpo2NBPqtLSyF1i3U.roa (raw, json)
Hash identifier: u9Rkoj6R35AjJ+ycFQ19rkn4wN2aeZjEF/o7sUX+ZuA=
Subject key identifier: 2F:41:29:94:00:03:4B:32:A9:A3:63:41:3E:AB:4B:4B:21:75:8B:75
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A46C0559666A3DAEB010033E7F46FC48E
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L0EplAADSzKpo2NBPqtLSyF1i3U.roa
Signing time: Wed 30 Aug 2023 14:02:04 +0000
ROA not before: Wed 30 Aug 2023 14:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:c0:55:96:66:a3:da:eb:01:00:33:e7:f4:6f:c4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 30 14:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f41299400034b32a9a363413eab4b4b21758b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:06:1d:56:8c:e4:c1:a5:a8:5b:f6:1c:cb:
83:8d:28:0b:2e:b2:cb:69:f5:ed:cc:a9:8d:8e:5d:
7d:ba:01:81:ff:17:0e:f5:1c:c2:6d:11:06:d1:35:
d0:10:0d:23:60:27:9e:c7:ec:92:4a:bd:cd:29:b5:
d6:3d:38:65:ab:b7:a2:40:8f:e6:c9:94:bf:3b:67:
c5:c5:44:12:de:57:2f:0f:68:c7:75:2b:97:34:f6:
f4:92:16:f5:c5:68:9f:2a:e4:82:14:dc:b8:1d:f8:
61:10:4c:bb:ea:67:fd:b7:e8:8e:3a:7f:22:e6:97:
11:76:dc:6a:bd:7c:e3:fe:a3:7e:3e:a0:e3:f7:0a:
21:ce:ad:64:0e:e6:2d:8b:27:86:fe:c5:55:69:3a:
6a:62:15:51:dc:b0:34:aa:00:01:cd:85:a2:70:68:
a3:3e:9f:40:20:96:f7:47:e2:8d:f3:af:0c:d7:7f:
a8:d1:29:59:f6:93:61:25:65:bf:62:ae:d8:4a:a3:
a0:2a:bf:bc:9d:5d:db:fe:33:20:f0:23:e1:a8:2b:
5e:80:b4:a2:2c:bd:bb:d8:d1:13:3a:bd:2e:82:37:
d0:74:f8:91:c9:65:8c:bf:05:4e:44:da:8b:30:2a:
f8:3a:6a:e0:28:8f:f4:f1:28:08:a2:c4:d0:39:24:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:41:29:94:00:03:4B:32:A9:A3:63:41:3E:AB:4B:4B:21:75:8B:75
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/L0EplAADSzKpo2NBPqtLSyF1i3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d4:b0:06:07:c8:ac:ee:45:13:a4:70:ae:ce:29:b8:10:d4:
2b:5c:d5:ff:e2:e9:3e:1c:14:33:4b:a8:81:be:f6:a3:69:21:
36:44:97:15:ed:0c:f4:81:6e:eb:e8:54:f0:27:3c:87:77:03:
aa:a9:b5:b9:b4:40:f1:89:c3:4e:69:07:18:fb:0c:7e:b4:aa:
48:dd:ef:51:15:32:17:f1:40:aa:1a:1e:d3:2b:92:1c:83:8e:
43:ea:d1:72:52:2f:f8:e6:5a:a7:76:4d:75:bd:20:b2:e2:ed:
13:40:56:6c:01:cc:38:13:8a:c2:d4:ab:d1:f2:26:2b:d8:8b:
17:af:06:6b:52:91:a2:59:9b:10:ff:62:de:ab:9d:c5:b5:a0:
2c:75:ab:99:8e:4e:4d:30:f2:b1:da:b5:5a:e4:c6:3d:65:c4:
64:1b:cc:8a:22:f1:8a:c8:69:4d:35:41:43:18:2a:24:61:6b:
1b:51:f0:2d:c2:46:08:af:13:54:ec:ad:04:bd:38:b3:3a:22:
67:76:e8:41:0c:2d:3b:79:c9:09:fd:4b:96:b8:82:2f:9b:43:
d4:84:35:d4:bf:fc:10:49:cf:18:6d:85:a7:19:0e:ca:40:d7:
ed:14:48:01:63:07:a5:44:d0:de:db:2c:bf:96:d2:37:39:b5:
08:4e:b4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:11:04 2023 by rpki-client on console-ams.rpki-client.org