Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SGADXuxxi_DRXLn5HLPkW2JOqxo.roa
File: SGADXuxxi_DRXLn5HLPkW2JOqxo.roa (raw, json)
Hash identifier: R+oDr/PuDAzSmTRNc6o4MRwZypNaCF5LfuoFioY3t60=
Subject key identifier: 48:60:03:5E:EC:71:8B:F0:D1:5C:B9:F9:1C:B3:E4:5B:62:4E:AB:1A
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0191C7197F690D4AFD56725DFDD85A2D01A8
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SGADXuxxi_DRXLn5HLPkW2JOqxo.roa
Signing time: Fri 06 Sep 2024 11:30:22 +0000
ROA not before: Fri 06 Sep 2024 11:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149977
IP address blocks: 91.228.13.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 08:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c7:19:7f:69:0d:4a:fd:56:72:5d:fd:d8:5a:2d:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 6 11:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4860035eec718bf0d15cb9f91cb3e45b624eab1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:e8:f6:df:34:8b:dd:60:f4:da:51:8e:4f:
c6:12:37:bc:84:23:8a:21:c6:67:a2:bd:46:b1:8f:
20:2c:21:0d:f7:82:84:8b:bd:6e:73:2d:d2:29:94:
86:51:ba:20:02:ac:3a:74:31:90:ef:e3:06:91:0b:
ab:94:24:8c:a8:fb:f5:48:cb:58:ea:0f:6b:43:7a:
00:6e:52:f7:57:f7:9e:61:2f:e2:71:dd:f1:6e:f7:
7a:b5:83:cd:71:9f:4e:99:58:c2:9a:d7:f1:ad:9e:
9c:ca:1c:4d:c5:46:d3:67:59:9f:0e:3a:81:d3:e8:
2d:c8:19:90:b8:d6:f8:e7:7e:a7:83:6a:5c:01:a5:
43:8a:ee:d6:35:54:cf:63:b8:56:08:f1:73:19:70:
21:69:ff:9c:4c:5b:53:27:f1:f6:d4:42:e6:70:dd:
eb:5b:6c:72:a2:fa:24:07:b1:61:8c:85:3d:40:c3:
90:d7:8a:59:e5:38:20:49:ef:24:24:a6:58:90:4b:
18:49:a6:bd:1b:0f:bd:01:cf:4d:2a:85:79:2a:42:
67:88:99:d6:f3:64:12:f1:9b:9e:e7:f3:df:f7:40:
93:d5:58:39:33:ee:e4:fc:9d:fd:fb:6f:33:df:b1:
26:94:da:2b:10:5e:7a:e4:a6:19:13:6e:a7:fa:9f:
98:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:60:03:5E:EC:71:8B:F0:D1:5C:B9:F9:1C:B3:E4:5B:62:4E:AB:1A
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SGADXuxxi_DRXLn5HLPkW2JOqxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
94.154.35.0-94.154.36.255
Signature Algorithm: sha256WithRSAEncryption
7d:04:9d:ac:f9:13:53:2d:de:02:f0:50:0f:23:38:51:e2:61:
c3:e4:b1:e0:62:e7:92:6c:0b:32:b7:22:ed:ec:d8:17:85:78:
26:5c:5f:5c:e5:8e:97:ac:1f:ff:a3:52:95:5f:61:4f:ed:c1:
98:db:b9:d3:47:ba:3e:fb:e5:f4:4d:96:3b:d3:09:1f:62:d1:
e8:3a:8e:e9:88:a6:28:15:41:56:56:50:86:f2:d6:9d:c2:24:
34:8c:58:2f:65:8f:07:c0:b0:53:aa:76:b6:96:91:8e:dd:8c:
76:8f:3e:26:d8:1e:7f:d8:be:b2:05:5f:57:14:63:00:66:1c:
7b:ff:7b:90:2a:49:78:23:9d:6c:15:fd:d1:ad:e0:db:f6:36:
ce:63:29:5a:74:90:79:70:70:87:fb:1e:c6:c0:ac:e6:8a:03:
02:10:24:57:62:51:7b:e8:bd:f6:b1:08:33:e0:d7:5f:cc:15:
ca:2b:f8:27:2e:56:d5:3d:5f:11:db:1c:4a:7c:7f:c5:76:7f:
f9:da:9d:8e:e3:12:17:c5:88:4e:86:34:71:17:de:97:d8:b9:
83:f6:2c:16:11:84:c9:89:28:85:0a:fe:02:69:e5:02:3a:8b:
a4:a8:8e:5c:d6:46:74:8c:91:03:30:63:65:4d:7b:b9:a9:1a:
af:1e:ab:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 8 11:21:07 2024 by rpki-client on console-ams.rpki-client.org