Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/S6l103KAudmiFKUN7rLzJeiTTpU.roa
File: S6l103KAudmiFKUN7rLzJeiTTpU.roa (raw, json)
Hash identifier: PkMARtKPBKVM/WRjnqTTnu+IrjCzR7jk7rIi0qlnaRE=
Subject key identifier: 4B:A9:75:D3:72:80:B9:D9:A2:14:A5:0D:EE:B2:F3:25:E8:93:4E:95
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018EA34DBFAD095F94D0B72FC722A14DFD94
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/S6l103KAudmiFKUN7rLzJeiTTpU.roa
Signing time: Wed 03 Apr 2024 09:32:45 +0000
ROA not before: Wed 03 Apr 2024 09:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 18:56:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:4d:bf:ad:09:5f:94:d0:b7:2f:c7:22:a1:4d:fd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 3 09:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ba975d37280b9d9a214a50deeb2f325e8934e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1b:b3:41:5a:98:03:5f:bb:4e:0b:be:de:f8:
f3:88:2d:45:77:a6:d1:92:8b:9e:5c:73:09:f2:d8:
dc:d7:72:c0:07:8d:bf:a5:9b:3c:3e:db:4f:18:f8:
35:2b:c5:6f:75:04:46:63:2d:c5:46:b5:25:0b:5b:
5a:97:b9:7e:cb:4b:07:cb:8c:3e:20:46:99:33:34:
94:df:e0:68:a2:0d:79:5e:2d:e5:4e:d8:9e:bf:0e:
7d:1c:a8:bd:71:14:56:0c:55:73:4b:e0:ed:c5:10:
94:90:1b:6f:0e:2e:3c:7d:7f:94:dd:c4:cd:04:bd:
e3:9d:77:7f:92:d6:05:3e:b1:4d:5d:9a:c0:f0:5b:
ff:51:14:75:56:3f:15:da:1b:2d:12:4b:46:d3:5d:
02:5a:a4:a5:dd:22:93:37:5e:bf:83:18:4e:70:1b:
ae:f8:6b:c2:6a:1b:5b:92:e7:92:5a:85:99:ab:19:
bd:9f:43:2f:e2:a5:bc:56:d0:cc:45:3a:7c:98:fd:
a3:c9:94:d3:1b:b7:fb:ad:48:b3:39:b4:3e:cc:e8:
7a:05:f7:67:12:c8:d4:bd:cb:fe:59:5a:3d:07:6c:
12:f5:7d:e9:4f:b3:b7:d7:14:e7:34:5e:13:a4:d2:
f4:a0:50:16:99:aa:6a:0d:dd:36:bf:fe:e8:8b:c2:
d1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A9:75:D3:72:80:B9:D9:A2:14:A5:0D:EE:B2:F3:25:E8:93:4E:95
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/S6l103KAudmiFKUN7rLzJeiTTpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
93:5c:c1:25:2a:39:41:e1:07:be:00:4a:c5:2c:93:b6:aa:0c:
34:d5:07:43:58:d3:67:8f:be:23:ce:59:84:b9:55:d7:8f:5b:
6b:17:07:90:5e:34:29:c2:c3:0d:8b:69:4a:ef:db:88:06:17:
08:90:63:f5:df:d1:38:09:fb:2a:df:4d:bb:56:ae:b2:d6:2c:
41:ac:f1:e5:d9:06:4d:cb:5e:ea:7e:47:3f:e5:aa:6f:25:36:
2f:a4:f1:21:dd:6b:a0:db:5b:3c:91:ef:8c:70:c4:a5:b5:49:
4a:6b:2e:b2:ec:75:56:8c:c7:a7:a4:53:18:9c:42:9c:9b:55:
b5:bc:16:52:c4:22:80:eb:ed:ef:99:7b:38:7e:c1:b3:31:59:
22:e7:9a:69:13:1e:65:f6:2f:74:ac:0e:84:c8:3e:e4:73:ba:
31:78:85:88:82:c9:06:ef:b7:d4:f4:47:2e:86:c4:ce:63:50:
25:15:c2:93:60:66:71:5d:75:68:6b:fb:fc:7f:d9:3a:c8:ec:
5d:93:cd:35:c3:92:a5:6e:16:c2:cf:5c:4e:05:4a:dc:bf:71:
33:0a:ab:08:74:40:4f:d1:53:7b:ee:ab:e3:2a:cf:d2:bc:03:
cc:52:c9:cc:14:c8:23:ac:b6:4f:e8:c7:d0:74:26:bb:13:6c:
4a:e0:f6:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 4 22:58:14 2024 by rpki-client on console-fra.rpki-client.org