Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MD54Z9pKIka7fTRGN2qb0FNxPCU.roa
File: MD54Z9pKIka7fTRGN2qb0FNxPCU.roa (raw, json)
Hash identifier: XV6cRfocNZtr7BZ+idJv5OqZJVxnbrpgv3+x7qWWvP8=
Subject key identifier: 30:3E:78:67:DA:4A:22:46:BB:7D:34:46:37:6A:9B:D0:53:71:3C:25
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01912D686F5AE2F0ED3D6EF457F8252D07E4
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MD54Z9pKIka7fTRGN2qb0FNxPCU.roa
Signing time: Wed 07 Aug 2024 15:15:04 +0000
ROA not before: Wed 07 Aug 2024 15:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 13:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2d:68:6f:5a:e2:f0:ed:3d:6e:f4:57:f8:25:2d:07:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 7 15:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=303e7867da4a2246bb7d3446376a9bd053713c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:7c:7e:e4:70:5d:fb:a5:87:3f:3f:3d:c4:
53:ca:80:55:1d:a0:8f:94:32:c6:f4:0b:5c:af:21:
02:09:fe:87:0a:af:1b:4a:8c:64:7b:71:f1:f4:f6:
7c:2d:76:f5:46:ae:00:96:7c:50:4b:b5:d0:9a:94:
20:29:da:40:a9:2d:6a:1d:b5:70:81:ec:2c:bc:02:
e8:73:4c:c4:f2:30:aa:bd:6b:6f:98:1a:b1:2d:0d:
de:ac:9d:2f:f6:18:1d:37:57:f3:ed:b3:be:07:aa:
27:12:18:7d:0e:7b:1b:7a:e6:83:2f:17:34:94:b7:
55:6a:a7:a3:54:71:02:39:d4:6b:1a:9f:23:36:db:
3f:bc:c1:bb:5c:45:5b:fd:f9:c8:12:f4:3b:42:38:
d4:31:6f:d3:25:e5:df:15:de:92:3d:6f:eb:0f:a3:
1b:f6:0a:c9:5a:8b:31:c8:29:c4:8d:fb:ad:d9:c9:
37:d8:78:d2:1d:17:e8:ae:13:f2:a7:f5:3c:34:30:
7f:51:d0:3c:15:60:9a:0c:d6:36:ac:87:8b:9c:38:
e7:0d:f6:17:13:47:2c:46:f6:20:28:38:ac:17:07:
6f:64:66:5d:52:06:53:a1:c1:20:7f:28:8b:e8:5d:
92:5c:97:7f:7b:f8:c6:93:d6:7b:32:19:61:30:68:
18:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:3E:78:67:DA:4A:22:46:BB:7D:34:46:37:6A:9B:D0:53:71:3C:25
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/MD54Z9pKIka7fTRGN2qb0FNxPCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bc:f6:f2:d8:e9:50:21:91:a1:ec:07:d5:94:3b:d2:3c:eb:
bd:4b:8c:b0:4b:21:c3:db:b9:81:5e:55:c2:79:53:91:d3:45:
b4:a6:e1:d9:bb:53:ff:6e:56:ea:67:71:94:7a:9c:0d:be:9b:
66:af:d0:43:b3:52:bf:a1:dd:5d:7c:66:6e:a2:58:65:bc:91:
94:47:5e:a8:6d:5f:84:a6:a9:aa:8c:a7:db:8d:24:ec:fd:8e:
27:22:49:6b:49:e4:81:e8:60:85:f4:48:ed:81:91:c6:23:7f:
a8:71:ad:39:a3:d0:fc:1f:fb:ca:2f:44:86:d4:c1:c8:4d:07:
16:03:10:99:2f:67:ff:f8:b1:22:f7:ba:af:89:bc:fc:75:65:
50:c3:37:7c:c1:2f:c9:44:f7:a8:3f:7a:96:c3:0b:75:da:79:
0d:0f:7b:9b:24:17:de:99:01:ee:83:79:84:0e:ce:13:2d:2e:
7b:f3:5c:2e:bc:ee:af:05:01:5a:42:2a:eb:f3:52:01:57:c4:
b5:6b:65:e1:1e:6d:a7:16:8e:b6:6c:cd:95:91:21:66:b1:ec:
e4:8f:61:fb:9c:8b:df:01:37:0a:a8:5a:54:2b:43:d1:f0:97:
2c:ff:c6:f4:48:29:58:ce:39:e4:ba:55:2a:44:8c:0c:31:59:
67:a5:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 17:33:28 2024 by rpki-client on console-ams.rpki-client.org