Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OypEqJ0vOI2gI7mitAgdyb9W0Cc.roa
File: OypEqJ0vOI2gI7mitAgdyb9W0Cc.roa (raw, json)
Hash identifier: 2yFuX1b7M7K+/uJ6KWi+oOeZXSNovbjC4taz+BqpkA8=
Subject key identifier: 3B:2A:44:A8:9D:2F:38:8D:A0:23:B9:A2:B4:08:1D:C9:BF:56:D0:27
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019001E83A07C87289B42CD9E8F0A5ADF79F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OypEqJ0vOI2gI7mitAgdyb9W0Cc.roa
Signing time: Mon 10 Jun 2024 11:28:34 +0000
ROA not before: Mon 10 Jun 2024 11:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jun 2024 15:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:e8:3a:07:c8:72:89:b4:2c:d9:e8:f0:a5:ad:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 10 11:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2a44a89d2f388da023b9a2b4081dc9bf56d027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:08:22:13:a4:57:25:02:db:3d:ac:0c:84:
40:18:d8:a8:c9:41:74:8a:ab:ad:01:69:28:d7:82:
5c:3e:e7:b7:aa:5c:9d:02:49:13:16:67:7f:15:68:
48:29:35:9c:c8:f4:fa:80:64:bb:83:0d:28:81:a5:
4d:18:26:97:e0:17:f9:64:52:de:67:1c:d3:17:16:
08:1c:ea:da:34:8b:51:59:62:6b:15:c3:6c:12:ed:
f1:8a:ce:43:93:91:18:86:48:1d:d2:d4:d0:89:6e:
d4:df:f1:5e:92:e2:79:65:0a:57:14:f0:84:8f:49:
9a:e3:35:d7:b6:ab:fe:08:44:f6:0c:72:68:c7:72:
a8:9f:97:f5:93:f2:2c:53:3f:81:8f:48:8a:de:63:
97:00:c7:eb:01:b0:f2:2d:9b:d9:8a:5a:09:fa:fa:
22:1b:a1:e0:e7:61:f3:0b:1d:84:d8:f6:20:0e:58:
69:11:b4:23:fd:8d:a9:13:57:8f:dd:a6:6b:8d:05:
cc:9c:e6:5f:33:f8:fe:e8:fe:b7:eb:51:5c:d7:03:
cc:5b:06:d7:12:54:90:a9:a6:b0:90:b6:12:e0:3e:
01:3b:44:a1:56:b9:7f:34:4f:50:6b:8e:60:81:88:
de:9f:97:aa:0e:5c:37:9e:8d:32:be:d2:87:04:da:
7d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2A:44:A8:9D:2F:38:8D:A0:23:B9:A2:B4:08:1D:C9:BF:56:D0:27
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/OypEqJ0vOI2gI7mitAgdyb9W0Cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
17:5f:95:20:df:a3:44:dd:db:95:44:09:44:31:85:b6:7c:ad:
cb:29:67:d1:77:2d:2f:5b:99:6b:67:ed:05:bc:20:2e:34:a8:
e8:ed:5b:d1:ea:45:bc:02:5c:04:b0:84:27:5e:4e:fd:57:24:
8b:4a:0d:02:55:ee:99:7a:22:f8:dc:06:c3:4a:40:be:61:d7:
f0:c4:0e:a5:9d:27:c5:7f:36:92:4f:5a:6e:25:83:88:46:32:
aa:f0:d2:01:02:73:6e:6d:1f:b3:21:28:01:ad:d0:60:cd:7c:
c0:d7:0e:d6:9a:f8:37:27:52:c9:66:b0:8c:29:c3:e3:d0:07:
53:3f:87:0a:c7:e6:30:c0:8d:31:79:65:c1:8e:57:dc:1c:0f:
9b:55:a7:af:50:6d:53:3c:d9:92:ec:90:31:6b:79:c3:4e:3e:
01:ee:fd:a2:c7:98:7c:e3:25:3b:75:f6:f9:17:a7:65:e8:a2:
3b:93:df:87:4b:b3:4c:4d:b4:15:b9:d5:2b:14:21:a9:da:7a:
a6:b6:8b:96:4b:84:b1:38:04:49:29:36:f9:ef:13:1a:aa:ca:
e9:30:b7:d7:ee:d8:94:92:36:bf:a1:ee:fd:c2:78:92:1c:a0:
5e:91:f8:8d:73:b2:7a:07:73:f8:2f:d7:7f:f8:3f:23:f3:a2:
32:f7:be:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:33:00 2024 by rpki-client on console-ams.rpki-client.org