Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NYLuFLydJjrd9t1ZP7B_QaWI_KM.roa
File: NYLuFLydJjrd9t1ZP7B_QaWI_KM.roa (raw, json)
Hash identifier: bWjs12Bw/uAMDGDTQhR7g3DHI2TwlyzZb4X+N2A2swE=
Subject key identifier: 35:82:EE:14:BC:9D:26:3A:DD:F6:DD:59:3F:B0:7F:41:A5:88:FC:A3
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CF499FA03656EEF5F66F544E993D0F9E8
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NYLuFLydJjrd9t1ZP7B_QaWI_KM.roa
Signing time: Wed 10 Jan 2024 18:19:40 +0000
ROA not before: Wed 10 Jan 2024 18:19:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:07:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:99:fa:03:65:6e:ef:5f:66:f5:44:e9:93:d0:f9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 10 18:19:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3582ee14bc9d263addf6dd593fb07f41a588fca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:ff:48:3e:55:b0:30:82:6c:6b:58:97:b6:
4d:be:08:87:06:c7:1d:b3:ed:bb:cc:f9:5e:70:fb:
fa:65:8c:02:bc:a0:ca:35:d4:68:16:24:ce:bd:a3:
a3:a0:0c:3c:e8:d5:97:73:24:6f:77:81:f7:42:c7:
3a:f4:6a:12:b2:9c:27:f4:63:fe:b7:31:15:dd:91:
3f:30:bf:8f:f2:ac:35:4e:e9:95:99:a8:1c:43:be:
75:57:0d:18:f6:46:8d:89:73:ee:ed:5e:8f:6a:77:
ad:d1:54:dd:70:96:e5:53:46:78:cb:0c:a8:49:26:
d8:8c:46:5d:db:72:c7:7f:95:52:5e:5b:6a:7b:51:
a1:e2:01:a1:ff:54:ea:79:00:01:c9:85:f3:c7:4c:
6b:eb:12:d9:3b:ec:ff:70:e6:db:fe:41:77:30:dd:
ac:5b:21:9e:07:de:be:cf:d5:d2:14:ff:75:36:5d:
10:17:f0:ea:2d:b7:f6:6b:ef:17:ca:49:57:22:9c:
37:6a:d6:57:59:ed:03:40:f9:98:e1:13:49:7c:45:
57:79:a6:df:8a:2b:13:7f:24:8d:f1:18:82:86:23:
cd:2e:8a:89:ef:a1:7f:17:c7:f3:aa:e1:f3:c7:a6:
02:c4:d1:43:93:fb:0c:1d:d5:92:f2:e6:08:3f:13:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:82:EE:14:BC:9D:26:3A:DD:F6:DD:59:3F:B0:7F:41:A5:88:FC:A3
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/NYLuFLydJjrd9t1ZP7B_QaWI_KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
31:1c:53:3d:9e:60:05:13:5c:98:6e:34:f5:dc:aa:3c:45:02:
ec:59:39:a4:c4:b1:91:68:18:30:23:54:5e:f7:22:c8:96:bd:
ca:5e:8d:4f:9e:92:e1:5a:0d:db:47:4e:75:51:fd:cc:0f:48:
4d:52:b7:5f:74:59:73:b7:fb:96:05:95:8c:13:35:8a:d9:69:
69:29:21:64:c0:c3:fc:be:69:f2:97:6f:41:bd:ce:32:31:98:
4d:64:e0:87:e4:16:b4:c2:c9:88:7f:c3:60:51:ea:69:dc:42:
51:30:4e:db:f6:03:c2:13:22:2a:3b:f4:44:c0:a3:a3:76:b4:
d3:de:e1:19:4e:d3:70:be:99:f5:61:96:f3:4f:82:5e:60:4b:
36:35:6e:37:b9:86:a0:27:ef:9f:01:35:d7:7c:f2:19:f8:af:
d3:9f:4e:fa:6f:81:91:db:c3:bf:88:3d:ed:77:62:20:81:d0:
fa:67:21:84:15:e1:65:87:4b:a7:a4:96:a8:6e:9f:e7:eb:5a:
73:ca:d6:02:1f:71:e3:3b:37:10:cf:70:98:b9:cb:32:b5:00:
67:33:17:53:4c:06:4b:82:d0:80:e5:55:62:df:16:3a:16:26:
e4:99:5c:47:1f:7e:71:0b:02:b8:93:c5:5f:08:07:8c:04:77:
6e:53:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:58:29 2024 by rpki-client on console-fra.rpki-client.org