Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LUVP4H_m7R9A0gOksdb9_GHd2kw.roa
File: LUVP4H_m7R9A0gOksdb9_GHd2kw.roa (raw, json)
Hash identifier: iS9BeXNQRYvqAqluP/B6aHMpG5fcCfsth17F2BeMQ8Y=
Subject key identifier: 2D:45:4F:E0:7F:E6:ED:1F:40:D2:03:A4:B1:D6:FD:FC:61:DD:DA:4C
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018C154EE776EB6B14BEC7AC2DA09019185F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LUVP4H_m7R9A0gOksdb9_GHd2kw.roa
Signing time: Tue 28 Nov 2023 09:42:21 +0000
ROA not before: Tue 28 Nov 2023 09:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 91.228.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:4e:e7:76:eb:6b:14:be:c7:ac:2d:a0:90:19:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 28 09:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d454fe07fe6ed1f40d203a4b1d6fdfc61ddda4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:2a:de:60:43:00:69:b2:8d:0c:3c:0b:c7:
b9:83:3d:a5:55:00:31:46:99:3f:aa:14:87:a6:59:
c1:b5:99:e8:52:44:8b:a0:61:24:26:fb:83:70:ae:
bd:b5:b5:bf:98:e9:9f:1a:e9:0d:2f:0c:bd:ca:d8:
5b:2b:34:35:b4:a0:da:55:b1:86:f1:a2:ba:b5:c2:
77:9a:3f:aa:8a:b3:4b:42:47:10:4b:bc:60:fe:a2:
26:07:df:55:82:2b:2d:79:c9:d9:cf:e6:07:b3:4e:
92:69:3d:23:2e:10:dd:f6:fb:d0:e3:b5:97:80:d2:
2a:2e:3a:52:f2:6b:0a:18:0a:08:e3:bb:b2:66:da:
09:8f:3e:42:0d:23:ec:c2:42:2f:e6:74:46:31:94:
8e:19:67:36:d1:cb:46:be:0c:d3:df:ea:71:65:0c:
a2:c7:2e:5c:03:40:09:e0:a9:d6:6d:a1:67:eb:b5:
e8:3c:f9:74:83:67:ad:ec:0c:8d:b4:df:4c:4d:32:
79:c3:7e:d8:3c:91:31:99:97:fa:d5:a9:18:49:57:
36:79:60:08:5a:a9:c7:a3:f8:cc:2a:8e:93:af:2f:
52:1e:4f:63:c9:0a:4a:20:f9:f6:11:a2:54:83:d8:
0d:95:13:4c:9d:18:3d:11:3b:cc:d3:e6:27:1d:3a:
44:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:4F:E0:7F:E6:ED:1F:40:D2:03:A4:B1:D6:FD:FC:61:DD:DA:4C
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/LUVP4H_m7R9A0gOksdb9_GHd2kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e7:a4:db:ef:f9:10:34:4e:a1:a4:a1:30:e8:03:e8:ee:0d:
fe:01:29:94:82:ad:0b:c2:c2:32:75:42:4f:c9:6a:cb:0f:03:
2f:32:93:c6:82:a4:fb:2c:65:f9:d8:89:a0:99:c4:03:87:2f:
88:eb:93:ee:27:86:58:6b:18:ae:65:dd:72:2a:bc:cf:5d:81:
60:34:a0:73:fa:43:ce:36:47:5f:81:e5:7c:b2:01:f3:a5:ca:
a1:e2:b2:ca:7b:30:34:b3:d8:c3:c0:21:d5:93:ab:dc:0d:84:
39:e2:68:29:b8:37:0b:a8:78:28:ff:5a:e9:e3:9c:76:ef:60:
1f:47:e4:f1:ed:cb:b1:f4:84:47:f9:30:bf:42:e2:93:b8:27:
68:3d:1d:a9:6a:8d:b3:24:43:f5:d5:dd:60:66:d7:a2:5e:fd:
3f:0d:d4:43:dd:e7:66:03:f9:49:81:bf:dd:f2:18:41:1d:96:
99:4c:aa:6e:3b:51:77:3c:59:32:a9:9d:7d:26:6a:4c:87:ef:
42:20:a5:0d:92:f7:b5:84:6a:44:27:7b:1e:09:e4:a6:b8:2d:
0b:5e:10:de:33:40:1e:f7:fb:85:e7:fc:dd:20:bc:47:13:b3:
9a:7d:27:c8:28:2d:9b:f3:39:7b:73:11:50:37:ea:ee:12:1a:
a9:13:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 16:56:10 2023 by rpki-client on console-fra.rpki-client.org