Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/T3YJXrqrVjLmiU8P61cTFlN5Jjs.roa
File: T3YJXrqrVjLmiU8P61cTFlN5Jjs.roa (raw, json)
Hash identifier: K+TSoZD+3Dkog1yhERarGddhcntRBFGSIVFDhNL1q3A=
Subject key identifier: 4F:76:09:5E:BA:AB:56:32:E6:89:4F:0F:EB:57:13:16:53:79:26:3B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A6F702251E3419EC67C48396533831643
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/T3YJXrqrVjLmiU8P61cTFlN5Jjs.roa
Signing time: Thu 07 Sep 2023 11:38:54 +0000
ROA not before: Thu 07 Sep 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208485
IP address blocks: 91.228.14.0/23 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:70:22:51:e3:41:9e:c6:7c:48:39:65:33:83:16:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 7 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f76095ebaab5632e6894f0feb5713165379263b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:f6:67:a5:d1:52:a9:30:40:02:1d:63:6e:
0d:17:4e:52:99:cd:ad:3d:2a:1e:23:53:58:fc:80:
90:ee:11:ae:d8:84:1d:49:4a:1b:46:32:bb:f1:13:
01:71:84:44:cc:8b:bd:50:cd:0c:56:4f:19:89:9f:
20:b1:35:70:85:33:d1:b3:70:5e:4e:92:8d:70:50:
52:0e:10:d9:ce:bc:05:32:68:65:0b:62:4d:42:24:
c8:c4:78:c0:c4:9e:50:cf:d3:b1:05:d9:9b:d8:60:
59:b9:2e:50:c2:59:91:3a:2c:ff:4a:5f:c0:cf:5f:
57:d8:71:68:73:3a:e8:36:52:ad:16:b7:88:9d:71:
ac:d4:42:d3:d3:0b:a5:53:3b:2a:e3:67:14:72:57:
62:aa:8d:d6:39:de:e2:7b:97:3a:c3:fd:a7:33:5b:
c3:39:2e:fe:55:a1:4c:56:e1:ad:ad:c7:b5:6e:df:
94:02:3c:8d:0f:95:cf:eb:f3:10:98:45:82:1b:c1:
d0:3f:79:ff:c6:4d:48:ba:1a:04:0e:d8:b4:dd:1c:
d3:f3:c2:f1:c8:db:4a:74:07:a4:4c:d7:5b:70:c3:
7e:79:7f:71:bc:34:56:52:33:1d:f9:07:ec:44:2b:
18:e1:69:35:24:36:e8:a8:ed:42:82:1a:61:ee:7f:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:76:09:5E:BA:AB:56:32:E6:89:4F:0F:EB:57:13:16:53:79:26:3B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/T3YJXrqrVjLmiU8P61cTFlN5Jjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.33.0/24
94.154.37.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:1b:88:be:5c:52:a1:04:68:20:3f:59:36:76:60:ab:69:b6:
38:50:53:a5:ee:a8:cb:7b:bf:53:fe:60:ad:26:9a:8d:4a:9d:
81:2f:2c:6d:82:0f:90:fe:01:83:68:2a:b7:2e:76:e9:67:5c:
da:ab:a5:1e:8c:d6:4b:a4:68:97:ce:bf:d8:65:6d:e1:1e:c4:
23:c5:58:8a:42:18:7e:bf:c0:22:a8:87:e4:93:8c:74:26:33:
c4:0e:9e:33:39:c9:54:ee:6d:c0:df:19:2a:e9:1d:11:1d:02:
17:1f:91:cc:77:6a:3a:24:5e:b5:fc:68:f0:76:c2:de:c8:a1:
dc:f3:67:b3:97:8e:0c:6c:7a:54:c2:66:e9:7a:2d:82:12:3c:
89:70:ad:4c:d0:c5:97:65:a9:dc:9a:55:93:76:d7:b3:e0:cc:
43:46:b9:38:d2:a4:cb:63:55:0a:09:17:a2:1c:d9:46:e2:20:
63:2b:16:e7:63:31:97:a8:ee:de:8f:42:d9:c3:38:43:0f:da:
0b:b0:aa:ae:a5:c5:6b:82:f2:35:ba:85:9c:76:3f:0e:5c:88:
ef:1f:59:43:63:c4:1d:54:a0:8c:f3:49:e7:2f:0f:91:63:96:
19:e4:a2:c5:81:83:a0:02:fd:ca:ad:da:bd:92:6d:e1:0f:ec:
a9:cc:ae:d1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYpvcCJR40GexnxIOWUzgxZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMwOTA3MTEzODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjc2MDk1ZWJhYWI1NjMyZTY4OTRmMGZlYjU3MTMxNjUzNzkyNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3n2Z6XRUqkwQAIdY24NF05Smc2t
PSoeI1NY/ICQ7hGu2IQdSUobRjK78RMBcYREzIu9UM0MVk8ZiZ8gsTVwhTPRs3Be
TpKNcFBSDhDZzrwFMmhlC2JNQiTIxHjAxJ5Qz9OxBdmb2GBZuS5QwlmROiz/Sl/A
z19X2HFoczroNlKtFreInXGs1ELT0wulUzsq42cUcldiqo3WOd7ie5c6w/2nM1vD
OS7+VaFMVuGtrce1bt+UAjyND5XP6/MQmEWCG8HQP3n/xk1IuhoEDti03RzT88Lx
yNtKdAekTNdbcMN+eX9xvDRWUjMd+QfsRCsY4Wk1JDboqO1Cghph7n95qQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE92CV66q1Yy5olPD+tXExZTeSY7MB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvVDNZSlhycXJWakxtaVU4UDYxY1RGbE41SmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+QOAwQA
XpohAwQAXpolMA0GCSqGSIb3DQEBCwUAA4IBAQBbG4i+XFKhBGggP1k2dmCrabY4
UFOl7qjLe79T/mCtJpqNSp2BLyxtgg+Q/gGDaCq3LnbpZ1zaq6UejNZLpGiXzr/Y
ZW3hHsQjxViKQhh+v8AiqIfkk4x0JjPEDp4zOclU7m3A3xkq6R0RHQIXH5HMd2o6
JF61/GjwdsLeyKHc82ezl44MbHpUwmbpei2CEjyJcK1M0MWXZancmlWTdtez4MxD
Rrk40qTLY1UKCReiHNlG4iBjKxbnYzGXqO7ej0LZwzhDD9oLsKqupcVrgvI1uoWc
dj8OXIjvH1lDY8QdVKCM80nnLw+RY5YZ5KLFgYOgAv3Krdq9km3hD+ypzK7R
-----END CERTIFICATE-----
Generated at Thu Oct 5 13:59:46 2023 by rpki-client on console-fra.rpki-client.org