Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SxwZMj5AmZ_-a3z-a0qfI1_I6e0.roa
File: SxwZMj5AmZ_-a3z-a0qfI1_I6e0.roa (raw, json)
Hash identifier: htQi+SEJ4IBcC9gSN6fjYhkoh3spEftm5MjDBjgYQm0=
Subject key identifier: 4B:1C:19:32:3E:40:99:9F:FE:6B:7C:FE:6B:4A:9F:23:5F:C8:E9:ED
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018EE777698C8E3CFCA804942058C48A6FCB
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SxwZMj5AmZ_-a3z-a0qfI1_I6e0.roa
Signing time: Tue 16 Apr 2024 15:12:26 +0000
ROA not before: Tue 16 Apr 2024 15:12:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 08:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:77:69:8c:8e:3c:fc:a8:04:94:20:58:c4:8a:6f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Apr 16 15:12:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b1c19323e40999ffe6b7cfe6b4a9f235fc8e9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:c8:1a:7e:55:87:88:53:42:41:c5:59:f3:
9e:32:4d:64:46:ae:7a:87:1e:26:99:d6:cd:fc:f5:
32:6a:67:85:45:1f:e7:3f:5a:54:5c:d5:bc:9c:29:
26:47:d1:bd:e5:45:63:7f:03:63:25:fe:f5:79:5c:
59:30:ec:da:29:df:5b:7c:12:72:60:ee:9b:56:6a:
89:29:8f:16:52:c0:9f:36:74:91:7f:00:11:1a:2a:
e5:da:c4:82:a8:d3:48:e6:b6:49:b7:26:73:a6:a7:
f3:aa:18:64:83:59:9f:a1:fc:a8:5b:e5:3b:50:de:
15:04:35:c9:3c:54:98:dc:2b:25:c0:be:3a:e5:46:
a6:65:0a:d6:97:77:41:1a:86:fc:db:3a:b2:3d:4f:
62:ec:7a:56:0f:f0:d6:df:12:f2:78:35:13:1d:d1:
4b:89:41:2d:3b:3c:8a:de:e3:c5:f7:49:77:b1:7a:
01:e3:27:d8:3f:a5:cf:6a:aa:8d:e8:cf:f3:0e:65:
86:50:b2:42:be:a8:b9:71:d5:dd:06:a5:48:2d:cd:
c0:98:74:36:22:57:a3:0f:1c:b8:27:5c:ea:61:0b:
a7:02:13:98:b0:18:b4:30:08:8f:f0:6c:a9:95:4e:
10:3c:5e:8d:bb:e0:b1:a6:83:88:3c:96:f0:2f:06:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:19:32:3E:40:99:9F:FE:6B:7C:FE:6B:4A:9F:23:5F:C8:E9:ED
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/SxwZMj5AmZ_-a3z-a0qfI1_I6e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.32.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:1e:75:1a:15:8d:87:f8:d9:04:9c:a2:d3:4a:87:4f:40:ad:
07:a4:50:1e:55:00:c2:71:2a:1e:e5:90:03:d1:a3:1c:d5:bb:
82:b2:3f:63:8f:c0:ac:97:41:d3:f9:b9:58:cc:1d:60:ee:7c:
e1:8a:8e:b6:40:36:0d:47:8d:f9:79:6f:5c:ec:07:9c:d5:bb:
27:47:a1:ab:64:b2:c8:12:d9:cc:7d:6f:a7:4f:b0:d9:e7:75:
a6:1e:e6:d5:06:ad:ab:d0:c2:6a:fc:2f:99:9a:c6:22:b7:b5:
f2:60:f9:6a:81:f9:d4:f0:bd:c4:6f:8c:da:aa:e3:e5:61:77:
b8:53:be:8b:19:9c:62:20:53:dd:a4:d3:4a:e7:fc:0e:6e:1e:
78:25:5e:7e:75:0f:3d:e9:5b:02:46:fe:a3:59:ee:d1:b6:9e:
41:98:09:de:43:51:02:3f:ca:cb:06:79:fb:dd:75:3f:da:62:
ab:74:1f:b3:86:03:a9:ed:e8:1b:fd:d4:41:bc:65:8d:a9:bc:
87:0e:9c:41:4a:6f:3e:6d:f8:52:22:a4:83:2f:a5:a5:84:d8:
4a:91:7a:c2:83:8b:01:e0:09:0a:38:76:f1:07:e8:16:b5:40:
53:9f:7d:90:c7:15:89:da:84:09:5b:31:d5:24:3c:c4:56:14:
97:9d:40:e0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY7nd2mMjjz8qASUIFjEim/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNDE2MTUxMjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjFjMTkzMjNlNDA5OTlmZmU2YjdjZmU2YjRhOWYyMzVmYzhlOWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojrIGn5Vh4hTQkHFWfOeMk1kRq56
hx4mmdbN/PUyameFRR/nP1pUXNW8nCkmR9G95UVjfwNjJf71eVxZMOzaKd9bfBJy
YO6bVmqJKY8WUsCfNnSRfwARGirl2sSCqNNI5rZJtyZzpqfzqhhkg1mfofyoW+U7
UN4VBDXJPFSY3CslwL465UamZQrWl3dBGob82zqyPU9i7HpWD/DW3xLyeDUTHdFL
iUEtOzyK3uPF90l3sXoB4yfYP6XPaqqN6M/zDmWGULJCvqi5cdXdBqVILc3AmHQ2
IlejDxy4J1zqYQunAhOYsBi0MAiP8GyplU4QPF6Nu+CxpoOIPJbwLwYhvQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEscGTI+QJmf/mt8/mtKnyNfyOntMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvU3h3Wk1qNUFtWl8tYTN6LWEwcWZJMV9JNmUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+QMAwQA
XpogMA0GCSqGSIb3DQEBCwUAA4IBAQCKHnUaFY2H+NkEnKLTSodPQK0HpFAeVQDC
cSoe5ZAD0aMc1buCsj9jj8Csl0HT+blYzB1g7nzhio62QDYNR435eW9c7Aec1bsn
R6GrZLLIEtnMfW+nT7DZ53WmHubVBq2r0MJq/C+ZmsYit7XyYPlqgfnU8L3Eb4za
quPlYXe4U76LGZxiIFPdpNNK5/wObh54JV5+dQ896VsCRv6jWe7Rtp5BmAneQ1EC
P8rLBnn73XU/2mKrdB+zhgOp7egb/dRBvGWNqbyHDpxBSm8+bfhSIqSDL6WlhNhK
kXrCg4sB4AkKOHbxB+gWtUBTn32QxxWJ2oQJWzHVJDzEVhSXnUDg
-----END CERTIFICATE-----
Generated at Thu Apr 18 13:22:57 2024 by rpki-client on console-ams.rpki-client.org