Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UEG9B_Q-EqSdFfBLcVRuN7jPYEc.roa
File: UEG9B_Q-EqSdFfBLcVRuN7jPYEc.roa (raw, json)
Hash identifier: a/S63T9ClLDWcYgsk89NjKlaE3CW6yOrW993GYPkg8o=
Subject key identifier: 50:41:BD:07:F4:3E:12:A4:9D:15:F0:4B:71:54:6E:37:B8:CF:60:47
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190779653561E6E5416B102E091597A64D4
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UEG9B_Q-EqSdFfBLcVRuN7jPYEc.roa
Signing time: Wed 03 Jul 2024 07:54:18 +0000
ROA not before: Wed 03 Jul 2024 07:54:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jul 2024 11:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:77:96:53:56:1e:6e:54:16:b1:02:e0:91:59:7a:64:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 3 07:54:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5041bd07f43e12a49d15f04b71546e37b8cf6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:23:f3:af:06:32:f5:22:77:2c:d0:fa:80:9e:
c2:68:f6:b9:70:f5:d6:97:14:78:f6:d9:2d:67:e4:
2c:f9:77:02:e0:d8:5d:1e:40:0d:01:ba:f5:6d:b0:
de:1c:34:12:b8:27:78:6b:8d:73:bc:eb:44:cb:96:
0b:94:3b:bf:b4:51:ab:9f:6f:db:b6:79:a2:10:e2:
11:85:bc:76:45:e5:3a:be:25:85:4f:19:a7:19:85:
b9:16:e2:c1:64:ab:20:ed:fa:e6:a5:c0:d6:7e:e8:
83:b5:23:e7:21:ef:d6:fa:c4:6b:58:43:9b:b0:c9:
b8:12:64:b3:4c:65:c6:87:74:54:aa:a9:41:60:44:
fc:a1:bf:58:00:52:0f:88:e8:26:cd:a0:fe:85:5b:
96:01:6e:aa:34:67:18:16:42:48:e8:63:c4:ec:de:
53:f7:0d:9c:db:aa:3d:d9:b5:e7:77:1d:af:35:ba:
da:40:6e:72:0c:da:a4:2d:68:c6:b5:23:38:db:1b:
1e:c0:be:0d:c3:a0:fe:81:35:59:1c:de:1e:f6:d6:
bd:79:22:ec:96:6b:ae:3f:5f:0b:92:cc:77:9c:d5:
61:eb:15:fa:f8:b6:02:c1:34:cf:f2:f3:3b:38:03:
a6:ec:dc:63:8e:66:5e:87:85:12:34:95:dc:1a:74:
70:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:41:BD:07:F4:3E:12:A4:9D:15:F0:4B:71:54:6E:37:B8:CF:60:47
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UEG9B_Q-EqSdFfBLcVRuN7jPYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.35.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
91:8b:98:8c:f6:ca:92:c9:63:a6:08:8a:c0:3a:3b:4f:37:78:
4b:89:6c:25:26:28:12:7f:ec:7d:74:4c:0b:3c:4f:18:be:73:
88:c7:5c:c6:10:dc:57:a6:3c:4f:a5:11:4f:8b:9f:11:6d:80:
d0:7f:f8:4e:da:7d:56:29:99:a2:9f:31:ef:59:bf:97:5b:9b:
66:c1:4c:51:fe:4b:e6:2f:f6:7b:de:04:b0:26:7a:49:b7:12:
1f:97:76:d9:6d:3a:6d:ea:56:38:fd:98:52:96:b8:e2:52:1e:
66:90:06:24:99:07:1a:f6:fc:44:2c:e1:de:57:bb:cd:50:80:
3c:d2:39:53:6d:06:a9:5b:0b:30:d3:9c:9c:bc:08:c2:ea:2c:
13:13:2b:03:2a:d7:e9:3a:96:5a:64:30:7f:34:d0:a4:9f:4b:
63:f0:49:9b:2a:1f:b2:3e:b0:06:e9:74:a5:12:cd:a7:ca:bc:
72:88:f6:8e:12:31:6c:64:29:3c:1d:7f:15:2d:fe:f3:81:12:
1e:75:49:6b:e3:ca:cc:8f:22:95:47:b5:4b:9d:37:82:97:97:
fd:65:88:14:1d:11:e1:9b:86:d1:ae:23:8b:ed:ad:1a:8d:3f:
0b:19:bc:a4:a4:39:45:f5:40:d5:ce:01:6a:6c:f7:f7:7f:38:
fa:10:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 13:01:34 2024 by rpki-client on console-fra.rpki-client.org