Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P6CniEPvwDz7eXbowbd-JScQGwM.roa
File: P6CniEPvwDz7eXbowbd-JScQGwM.roa (raw, json)
Hash identifier: 23msa+pt3CxHFpH0OD5WDP45PIgPlKLZzTaXYIgYZZQ=
Subject key identifier: 3F:A0:A7:88:43:EF:C0:3C:FB:79:76:E8:C1:B7:7E:25:27:10:1B:03
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019001E8391B46470B8B2C4FAA031C82E5DC
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P6CniEPvwDz7eXbowbd-JScQGwM.roa
Signing time: Mon 10 Jun 2024 11:28:34 +0000
ROA not before: Mon 10 Jun 2024 11:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:e8:39:1b:46:47:0b:8b:2c:4f:aa:03:1c:82:e5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 10 11:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa0a78843efc03cfb7976e8c1b77e2527101b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:76:d9:87:f9:15:f4:5c:12:f7:3d:8d:5a:
a5:61:fd:e7:a0:a1:e6:ea:4f:03:c7:bd:62:5b:f0:
ea:d6:74:02:61:16:02:81:c0:d2:e5:98:02:81:16:
5d:95:1e:41:b3:66:ae:6b:7e:a1:36:35:e9:09:97:
34:82:2d:55:a9:cd:c1:79:5a:e3:1f:aa:d3:8b:f3:
95:bd:ce:3e:98:82:ed:1f:41:d9:c8:d3:a7:0b:5f:
34:8c:37:95:d3:0b:a3:66:93:02:9f:ca:68:d9:1a:
59:fe:84:e8:3d:2a:10:3a:b2:13:c0:95:b7:68:a0:
81:f5:95:2a:97:85:ba:0b:03:53:95:67:75:6d:ca:
ad:5e:2f:c7:38:41:a4:45:7b:23:35:81:23:3d:9c:
36:6f:97:91:75:40:a7:fe:f8:e6:0c:f7:b5:9e:52:
d9:4a:90:ca:7f:df:91:eb:30:ee:bd:19:bb:8d:21:
60:d2:43:28:a2:c4:5b:20:bf:64:5e:a9:7b:1a:3e:
a2:19:37:d9:82:4c:ed:b5:11:eb:ba:99:6d:d0:8a:
0f:fc:8a:6d:5d:a9:88:3b:65:bd:53:7a:5b:ac:08:
f8:06:4c:3f:a2:cb:47:51:d6:97:2c:fb:82:c8:55:
31:2a:18:d4:2e:be:d0:d4:5e:54:83:cf:b5:fd:4a:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:A7:88:43:EF:C0:3C:FB:79:76:E8:C1:B7:7E:25:27:10:1B:03
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/P6CniEPvwDz7eXbowbd-JScQGwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
0f:25:43:8f:eb:0a:81:16:f5:e3:b6:02:15:ad:71:f1:f5:42:
44:42:c3:20:58:6d:55:3d:c7:22:f2:60:30:37:17:48:a5:01:
e8:d8:a2:80:fb:bf:cc:85:5d:04:a1:25:29:6a:13:03:c3:64:
91:6f:5b:4c:31:0b:7a:bb:d5:4e:76:ad:08:46:5f:cc:9e:6a:
57:b9:d9:04:12:eb:c2:b4:bb:e4:54:5f:ca:5a:48:be:13:1b:
13:27:3c:4b:f5:62:60:2e:88:f3:8e:5c:0a:a7:9e:93:3f:7a:
d5:82:c7:e3:27:81:00:5c:17:10:e3:a0:d9:7c:5c:78:49:88:
d0:4a:9a:ef:13:34:21:44:0b:48:0a:ab:b5:fa:c2:10:be:2d:
f2:78:be:ae:33:95:21:be:37:57:21:5f:0c:14:52:fa:97:60:
94:a0:12:b1:39:05:5a:5f:98:8d:d7:38:98:4a:db:bc:26:43:
fd:fc:bd:03:87:54:dd:79:5a:cf:f4:f0:2a:14:17:1f:53:fd:
c6:71:81:b7:3f:e8:81:93:72:1b:46:3c:1f:5a:10:68:f8:6c:
72:1d:ed:26:7a:ee:5c:d0:47:9c:66:3c:c3:a1:83:3c:92:4c:
a1:0a:fc:bc:d9:e9:c8:07:a5:84:7c:2b:51:0a:3a:1b:b9:b0:
9b:42:7f:e6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZAB6DkbRkcLiyxPqgMcguXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNjEwMTEyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmEwYTc4ODQzZWZjMDNjZmI3OTc2ZThjMWI3N2UyNTI3MTAxYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeh22Yf5FfRcEvc9jVqlYf3noKHm
6k8Dx71iW/Dq1nQCYRYCgcDS5ZgCgRZdlR5Bs2aua36hNjXpCZc0gi1Vqc3BeVrj
H6rTi/OVvc4+mILtH0HZyNOnC180jDeV0wujZpMCn8po2RpZ/oToPSoQOrITwJW3
aKCB9ZUql4W6CwNTlWd1bcqtXi/HOEGkRXsjNYEjPZw2b5eRdUCn/vjmDPe1nlLZ
SpDKf9+R6zDuvRm7jSFg0kMoosRbIL9kXql7Gj6iGTfZgkzttRHruplt0IoP/Ipt
XamIO2W9U3pbrAj4Bkw/ostHUdaXLPuCyFUxKhjULr7Q1F5Ug8+1/Uqv9QIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFD+gp4hD78A8+3l26MG3fiUnEBsDMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvUDZDbmlFUHZ3RHo3ZVhib3diZC1KU2NRR3dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBABb5A0D
BARb5AAwDAMEBV6aIAMEAF6aJjANBgkqhkiG9w0BAQsFAAOCAQEADyVDj+sKgRb1
47YCFa1x8fVCRELDIFhtVT3HIvJgMDcXSKUB6NiigPu/zIVdBKElKWoTA8NkkW9b
TDELervVTnatCEZfzJ5qV7nZBBLrwrS75FRfylpIvhMbEyc8S/ViYC6I845cCqee
kz961YLH4yeBAFwXEOOg2XxceEmI0Eqa7xM0IUQLSAqrtfrCEL4t8ni+rjOVIb43
VyFfDBRS+pdglKASsTkFWl+Yjdc4mErbvCZD/fy9A4dU3Xlaz/TwKhQXH1P9xnGB
tz/ogZNyG0Y8H1oQaPhsch3tJnruXNBHnGY8w6GDPJJMoQr8vNnpyAelhHwrUQo6
G7mwm0J/5g==
-----END CERTIFICATE-----
Generated at Wed Jul 3 09:49:47 2024 by rpki-client on console-ams.rpki-client.org