Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QQ6jB4vB6q13VWJXviS30gc4O_Y.roa
File: QQ6jB4vB6q13VWJXviS30gc4O_Y.roa (raw, json)
Hash identifier: M9w5dAsAYU5Sb7rPunTziauQcs3uT5fs8b8L5UCALns=
Subject key identifier: 41:0E:A3:07:8B:C1:EA:AD:77:55:62:57:BE:24:B7:D2:07:38:3B:F6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CC7257DDDEE76CA4776806904C0E34EEA
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QQ6jB4vB6q13VWJXviS30gc4O_Y.roa
Signing time: Mon 01 Jan 2024 22:29:32 +0000
ROA not before: Mon 01 Jan 2024 22:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212744
IP address blocks: 91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 16:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:7d:dd:ee:76:ca:47:76:80:69:04:c0:e3:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 1 22:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=410ea3078bc1eaad77556257be24b7d207383bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:f7:07:96:e1:8a:43:7c:bf:04:f2:19:a1:db:
84:ee:da:63:0e:67:21:6c:06:96:22:bf:d5:3b:87:
ab:0e:57:f2:16:b7:f1:80:3a:f6:99:cc:c3:53:67:
5a:1f:46:28:b9:73:aa:2f:f0:b2:16:55:74:0a:0d:
44:c0:69:37:e9:ad:83:2a:78:62:0f:bf:43:53:6d:
f1:d0:ec:2b:10:9b:fe:7f:9a:ac:9a:93:8e:3e:ad:
4c:f0:dd:f3:a9:15:d1:eb:26:6c:7f:7c:79:b4:96:
63:0e:d6:30:b9:d0:2d:0c:79:2d:2e:e9:f5:26:1a:
8e:3d:d7:b4:94:d2:3a:da:f5:94:23:f1:3f:d8:72:
c6:99:90:d0:97:53:25:00:a7:48:ea:1a:3c:2d:e3:
a6:15:84:72:68:0a:f3:55:a0:78:7b:3c:73:18:f8:
8a:cb:d9:5f:d3:d4:3b:75:2c:cc:34:30:f7:9a:bf:
3b:d9:e4:30:c4:e9:ba:9d:cf:91:9c:4b:f0:69:76:
9f:71:8e:c0:89:d9:d4:ec:86:e9:7a:11:2c:39:26:
26:f7:dc:b7:22:92:d0:70:fc:4e:45:2a:c3:89:8d:
51:2f:00:82:28:b4:fe:04:24:5c:ea:5b:9a:f7:4e:
78:29:33:ee:57:2b:ef:bf:46:36:c7:bb:c8:e7:5c:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:A3:07:8B:C1:EA:AD:77:55:62:57:BE:24:B7:D2:07:38:3B:F6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/QQ6jB4vB6q13VWJXviS30gc4O_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
75:59:e9:fe:80:5f:29:46:6e:09:a9:54:3f:5d:95:f2:72:1a:
bc:72:91:87:04:39:4d:9b:c9:6d:d1:2c:47:f8:85:f5:93:31:
d2:b0:a9:1c:b4:ad:ac:44:6b:fc:5a:db:7b:39:63:a8:0a:ab:
5f:9d:4d:0e:25:e3:78:15:4b:4d:73:33:c4:73:33:68:43:6d:
51:47:78:4a:d1:b9:f4:d5:dd:35:ae:5b:17:70:44:8d:1b:c2:
22:30:ed:a5:11:bc:51:db:cc:f8:f3:a6:90:4a:53:57:33:27:
9b:68:22:7e:e0:5c:18:25:d4:a4:17:c1:14:f3:8d:83:94:b3:
42:9e:ae:e9:2a:85:9a:79:c0:fc:3c:5a:5a:87:62:78:46:ff:
0d:14:f2:a4:53:f4:bf:62:71:c3:5f:86:9d:a2:02:cc:8f:f3:
8b:24:63:4d:1d:ec:b6:98:f5:8e:ad:6c:4a:ef:c0:9c:80:c3:
fd:5f:2e:28:88:31:a0:b1:e0:fc:6b:fc:b0:07:5b:03:52:23:
4a:9b:7a:bb:b9:a9:bf:77:c4:b9:6e:b9:c9:ae:08:26:fb:63:
22:94:71:83:56:fc:bd:68:36:2c:ce:72:d2:46:fb:48:a4:4f:
d4:10:41:df:81:8e:4c:5c:3c:c3:7c:ec:5a:c0:bc:ef:0d:2d:
45:f0:9b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 20:20:28 2024 by rpki-client on console-fra.rpki-client.org