Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LPtEstnhKaROqrVerLQkym5PxKE.roa
File: LPtEstnhKaROqrVerLQkym5PxKE.roa (raw, json)
Hash identifier: AIVNpJ7rqZ7eNaCPwGlzdnHS0JU2MVCyT4NZQM5Xuro=
Subject key identifier: 2C:FB:44:B2:D9:E1:29:A4:4E:AA:B5:5E:AC:B4:24:CA:6E:4F:C4:A1
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018E8AE62FD1D2C23315DB7B2DC74083C671
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LPtEstnhKaROqrVerLQkym5PxKE.roa
Signing time: Fri 29 Mar 2024 15:48:45 +0000
ROA not before: Fri 29 Mar 2024 15:48:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 18:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:e6:2f:d1:d2:c2:33:15:db:7b:2d:c7:40:83:c6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 29 15:48:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cfb44b2d9e129a44eaab55eacb424ca6e4fc4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:76:9e:f9:a2:8d:05:4d:c9:81:77:a1:5e:e7:
e8:d6:a8:29:4b:3c:fc:0b:e5:47:f5:71:16:2f:5e:
4e:b6:aa:84:e9:3f:eb:2c:b0:50:46:47:38:aa:90:
7a:4e:88:d0:06:c7:2d:74:ea:aa:1c:e5:6b:e7:bb:
ff:00:f3:f8:87:61:25:8f:1e:68:7c:c0:6b:8a:1e:
7f:b3:4e:fc:74:e0:91:f3:b8:2b:20:65:73:33:7f:
f9:58:73:b7:17:3c:7a:9e:00:03:4b:24:9f:54:37:
57:a8:06:ec:db:9c:7a:57:47:e3:0a:b4:cf:14:2c:
ad:89:2c:7d:31:67:a4:90:e6:22:2a:c9:3d:b8:b9:
c0:31:88:e2:03:88:8d:cc:c2:e2:9a:c9:f2:3e:21:
30:c5:fd:9f:13:48:c9:6b:b2:08:5c:4c:5a:97:b6:
63:30:34:60:7a:0d:67:f1:33:11:0f:87:18:d1:f2:
20:d1:e7:47:92:71:0d:e3:1e:11:0e:40:14:da:0e:
27:ff:5e:95:50:35:25:a4:4a:2e:11:72:b0:62:b7:
ad:e4:09:cc:af:78:49:c7:ea:06:7c:37:c7:04:e3:
b1:b7:c4:58:50:9a:3c:c6:d5:38:fe:82:06:85:3f:
6e:b9:16:6c:91:5d:62:73:a6:87:5e:5c:d2:08:78:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FB:44:B2:D9:E1:29:A4:4E:AA:B5:5E:AC:B4:24:CA:6E:4F:C4:A1
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LPtEstnhKaROqrVerLQkym5PxKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.14.255
94.154.32.0/24
94.154.34.0/24
94.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:19:88:58:34:06:7d:5b:7d:5a:c1:a3:06:86:d0:17:1d:20:
8b:ea:7c:49:2c:1b:49:54:b1:39:7e:60:54:30:64:b2:db:90:
c0:33:fa:6c:7f:41:5a:0d:c6:49:0c:47:ee:eb:27:31:7d:9a:
a9:63:e0:5c:47:43:64:55:ac:d4:d1:bd:c8:2c:bf:00:6d:76:
3d:0b:e8:b1:d6:12:d0:0a:1c:e2:e8:9e:9f:3e:a9:48:08:2d:
61:47:28:9a:3e:1e:21:82:1d:d8:b6:15:bb:50:1e:5c:6c:8b:
ee:4b:ae:f1:86:df:20:6e:52:63:ec:83:69:30:07:93:a1:e0:
43:ca:c4:ab:e1:35:d8:28:9d:78:f7:e7:64:35:ec:bf:59:5f:
e9:3e:1b:f7:ac:fa:ae:f0:03:a3:0e:c8:b7:19:3b:ed:a7:42:
07:64:c7:b7:41:48:8d:6b:3e:3b:79:d0:c3:f6:ef:02:24:c5:
d8:34:32:da:ea:a1:70:7c:e0:16:4b:48:53:02:71:35:fa:b6:
d3:62:75:fb:83:42:8a:64:21:cf:17:84:5e:4a:32:26:51:bc:
e5:55:f5:58:88:42:25:73:00:84:63:7a:cd:b9:8b:74:64:21:
de:f0:6e:ae:c2:09:c7:6b:6f:24:40:3c:2b:1f:66:d0:03:79:
db:90:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 23:02:45 2024 by rpki-client on console-ams.rpki-client.org