Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TMb7FXBfatd6SeGIBKsd3xCCGb4.roa
File: TMb7FXBfatd6SeGIBKsd3xCCGb4.roa (raw, json)
Hash identifier: zKp7tzCrZrXdBXIMbIRG4lx/HmmRrOJ17IULGYltX0I=
Subject key identifier: 4C:C6:FB:15:70:5F:6A:D7:7A:49:E1:88:04:AB:1D:DF:10:82:19:BE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018D5BE34D7A1FFD64675301D4BE59739BCC
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TMb7FXBfatd6SeGIBKsd3xCCGb4.roa
Signing time: Tue 30 Jan 2024 19:40:39 +0000
ROA not before: Tue 30 Jan 2024 19:40:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 18:20:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:e3:4d:7a:1f:fd:64:67:53:01:d4:be:59:73:9b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 30 19:40:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cc6fb15705f6ad77a49e18804ab1ddf108219be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d5:8f:4c:1e:fd:9a:88:0f:c0:cc:0c:ee:6b:
ca:82:d7:37:91:18:9f:44:46:68:bd:e3:f3:14:3f:
5c:c6:73:c6:95:73:b9:78:d5:53:77:10:89:86:e9:
82:48:35:4e:b3:33:2d:29:1b:3e:46:24:2f:10:78:
db:7d:dd:63:99:b1:1b:3c:36:38:72:b6:ff:95:b8:
95:0d:6e:2f:7e:ad:64:d7:34:30:02:af:df:e4:92:
5b:a9:5b:75:fa:8b:6d:0c:8f:91:64:4e:d3:11:58:
89:9a:a9:25:8c:61:09:6d:16:b0:b1:bd:e9:2c:ba:
23:7c:32:69:9c:8b:6e:d0:9c:20:88:81:86:87:53:
45:5c:47:80:02:8d:d7:11:5e:43:3d:de:d4:47:23:
1f:3a:6a:c3:57:91:5d:90:e4:07:91:b3:f9:07:d5:
92:d0:ca:c2:42:2e:ec:d4:7b:82:3e:e5:42:fd:db:
73:54:32:52:68:98:c3:95:4e:4e:b9:22:a0:c1:72:
33:18:bb:50:e9:ed:ff:68:6a:3c:0d:c1:61:80:27:
f1:13:32:49:86:d6:58:89:8a:4c:a5:71:83:52:0a:
c3:04:21:86:de:1a:7a:46:8f:3a:bb:b1:95:ca:4b:
73:52:b8:3a:c4:b0:ab:ca:22:e7:48:cf:4d:bd:7b:
3a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:FB:15:70:5F:6A:D7:7A:49:E1:88:04:AB:1D:DF:10:82:19:BE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/TMb7FXBfatd6SeGIBKsd3xCCGb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
94.154.34.0/24
94.154.36.0/23
Signature Algorithm: sha256WithRSAEncryption
83:18:3d:d9:bf:52:2e:22:87:00:a2:91:78:52:64:5b:cd:23:
a8:a4:79:a3:a5:41:a2:85:9a:1a:b5:e9:61:0e:57:c7:2d:34:
c7:51:4e:a5:78:17:d5:da:c4:22:ee:22:2b:64:36:ef:11:e3:
82:b2:07:d3:5b:9b:00:71:5d:e0:3b:88:fa:10:18:6f:ed:9e:
13:74:4b:5a:fc:44:b0:a1:5c:42:ac:14:86:d7:a0:7c:39:4c:
79:65:80:5f:99:73:a3:d6:59:2f:19:cf:af:a4:7c:ce:d9:84:
13:f3:82:31:6f:1d:a6:a4:f9:3f:86:b1:57:94:9e:f0:fa:9e:
f3:be:7e:17:63:28:84:5d:b5:51:65:bd:e9:e7:72:b9:8a:bf:
47:e5:75:a2:8f:9c:77:54:79:4f:2d:4a:55:2d:bc:6d:29:b9:
50:ab:3f:7c:7e:e0:57:db:97:61:aa:a5:8a:80:79:11:af:07:
b0:8d:33:50:d8:a6:56:95:e4:15:4f:40:ec:e4:28:be:de:51:
8a:84:90:0d:b0:cd:f0:be:91:52:0e:7b:b4:2f:3f:40:e8:0d:
a2:14:9f:16:ef:98:8b:f0:32:c7:0e:f0:83:04:08:fe:cd:3a:
0c:7f:e6:27:8d:50:ac:32:85:27:78:dc:25:94:97:fe:79:de:
f2:df:53:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 21:15:55 2024 by rpki-client on console-ams.rpki-client.org