Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UhPdJ0fcl9d5PtLTpQhzQPt-cVk.roa
File: UhPdJ0fcl9d5PtLTpQhzQPt-cVk.roa (raw, json)
Hash identifier: 05HwE15l+GREeyf6um4BKsxW//vrduVvDVBYrqpA8j0=
Subject key identifier: 52:13:DD:27:47:DC:97:D7:79:3E:D2:D3:A5:08:73:40:FB:7E:71:59
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01901777056CCA558A4614E9A825B35CE574
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UhPdJ0fcl9d5PtLTpQhzQPt-cVk.roa
Signing time: Fri 14 Jun 2024 15:56:34 +0000
ROA not before: Fri 14 Jun 2024 15:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:55:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:77:05:6c:ca:55:8a:46:14:e9:a8:25:b3:5c:e5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 14 15:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5213dd2747dc97d7793ed2d3a5087340fb7e7159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ec:a2:74:ce:1a:16:5e:03:a7:9c:9d:ed:7e:
e6:9f:51:d7:03:9c:61:a8:a9:16:7d:5a:dc:9d:8a:
fd:fc:ef:87:4d:77:20:ff:ec:14:78:39:31:08:52:
18:ff:00:c7:b9:04:ba:9e:51:f0:e4:0b:34:9e:57:
76:af:87:0c:b9:e1:27:ee:98:6c:76:ca:ae:a1:60:
74:ac:7c:c4:48:d3:90:b9:ab:5c:02:7c:c4:4e:b7:
c9:0a:0d:02:1c:e8:6f:49:f1:50:3d:f3:b5:56:75:
f7:9e:c4:83:08:62:03:63:9d:99:89:8e:6d:75:97:
29:95:b6:73:64:2e:5f:de:3e:52:d7:90:01:ff:6a:
42:2f:6e:73:55:43:59:61:6c:4d:bf:d3:6d:19:dc:
c5:39:8e:8b:61:ba:c9:06:81:c9:52:9a:d6:13:64:
24:98:ab:ec:b9:eb:18:36:cd:38:34:23:04:2b:72:
05:ff:87:2d:86:1f:a9:02:b0:ad:d3:eb:12:df:a6:
e5:bb:55:9c:b6:9b:f6:b2:3f:60:f5:45:b6:49:a5:
c7:c2:a6:61:9b:96:55:a9:fa:32:c7:e6:c6:6f:53:
97:43:82:dc:c5:7a:65:0e:14:6f:03:4d:19:63:b1:
9c:ca:8a:f1:0e:f6:fb:0c:66:4f:9b:2a:84:f6:e1:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:DD:27:47:DC:97:D7:79:3E:D2:D3:A5:08:73:40:FB:7E:71:59
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/UhPdJ0fcl9d5PtLTpQhzQPt-cVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
Signature Algorithm: sha256WithRSAEncryption
36:5a:83:30:d5:dd:e7:62:d8:22:e3:0e:98:b4:96:ca:0f:5b:
5c:54:4a:0c:45:2b:4b:80:b9:3a:3e:45:33:7a:b4:59:82:3a:
44:1d:a8:2e:2f:94:4e:36:0e:c4:c0:8c:5d:e1:85:52:6d:35:
7a:da:75:a0:1e:5d:a4:98:51:a0:11:a0:7c:15:61:14:52:c7:
c1:ef:19:77:ee:03:90:0e:8b:d1:38:f2:2e:94:96:68:87:d6:
42:e7:4a:ba:6a:bc:65:c9:45:f6:24:e2:31:ae:e0:97:a2:db:
e7:06:7f:76:94:95:41:74:55:cc:9a:ae:5f:c3:8d:b5:ed:11:
37:a4:6f:d8:e2:17:47:1c:11:f9:8b:d3:52:5a:95:4e:20:b1:
f5:34:84:58:4b:13:1e:87:50:51:37:92:e9:c5:cf:7c:13:e8:
37:c1:aa:ae:2f:0e:f9:60:67:02:c6:4a:03:84:7f:fc:9b:cb:
62:57:de:44:8d:76:f6:26:99:49:24:2c:25:36:1b:f1:e9:aa:
bc:02:ad:38:80:64:a9:a2:9c:e3:47:89:d3:7a:e5:02:ef:a8:
1d:05:04:fe:97:6f:28:24:66:9f:23:79:f6:7b:af:c6:9a:37:
25:76:fc:c1:1d:ef:2b:b0:5f:ee:f2:62:31:ca:75:ed:9e:a9:
09:df:25:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAXdwVsylWKRhTpqCWzXOV0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNjE0MTU1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjEzZGQyNzQ3ZGM5N2Q3NzkzZWQyZDNhNTA4NzM0MGZiN2U3MTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uyidM4aFl4Dp5yd7X7mn1HXA5xh
qKkWfVrcnYr9/O+HTXcg/+wUeDkxCFIY/wDHuQS6nlHw5As0nld2r4cMueEn7phs
dsquoWB0rHzESNOQuatcAnzETrfJCg0CHOhvSfFQPfO1VnX3nsSDCGIDY52ZiY5t
dZcplbZzZC5f3j5S15AB/2pCL25zVUNZYWxNv9NtGdzFOY6LYbrJBoHJUprWE2Qk
mKvsuesYNs04NCMEK3IF/4cthh+pArCt0+sS36blu1Wctpv2sj9g9UW2SaXHwqZh
m5ZVqfoyx+bGb1OXQ4LcxXplDhRvA00ZY7GcyorxDvb7DGZPmyqE9uEi9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIT3SdH3JfXeT7S06UIc0D7fnFZMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvVWhQZEowZmNsOWQ1UHRMVHBRaHpRUHQtY1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+QMMA0G
CSqGSIb3DQEBCwUAA4IBAQA2WoMw1d3nYtgi4w6YtJbKD1tcVEoMRStLgLk6PkUz
erRZgjpEHaguL5RONg7EwIxd4YVSbTV62nWgHl2kmFGgEaB8FWEUUsfB7xl37gOQ
DovROPIulJZoh9ZC50q6arxlyUX2JOIxruCXotvnBn92lJVBdFXMmq5fw4217RE3
pG/Y4hdHHBH5i9NSWpVOILH1NIRYSxMeh1BRN5Lpxc98E+g3waquLw75YGcCxkoD
hH/8m8tiV95EjXb2JplJJCwlNhvx6aq8Aq04gGSpopzjR4nTeuUC76gdBQT+l28o
JGafI3n2e6/GmjcldvzBHe8rsF/u8mIxynXtnqkJ3yXU
-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:46 2024 by rpki-client on console-fra.rpki-client.org