Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VCxxm7wx30dCd3C_7VpEsCqqd20.roa
File: VCxxm7wx30dCd3C_7VpEsCqqd20.roa (raw, json)
Hash identifier: 0pmCDnxH9Iv2xFLGLJfqewDyoRcvdyqvLBrA5Fv0BaU=
Subject key identifier: 54:2C:71:9B:BC:31:DF:47:42:77:70:BF:ED:5A:44:B0:2A:AA:77:6D
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018D12B2F3B7F499DA647E6BC58C25D06686
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VCxxm7wx30dCd3C_7VpEsCqqd20.roa
Signing time: Tue 16 Jan 2024 14:35:34 +0000
ROA not before: Tue 16 Jan 2024 14:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 13:42:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:b2:f3:b7:f4:99:da:64:7e:6b:c5:8c:25:d0:66:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 16 14:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=542c719bbc31df47427770bfed5a44b02aaa776d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:51:46:25:66:a3:5f:7f:62:9c:fe:1e:78:13:
1e:c0:ee:e8:3e:02:de:20:98:ac:e7:56:5b:02:c5:
5f:19:93:37:14:c9:07:e1:0b:f2:23:8e:0f:03:cd:
84:8a:66:43:34:90:05:13:7b:70:c6:0c:cd:f5:8a:
b4:9c:f4:a7:0b:1d:60:03:98:27:a8:e7:1d:c0:0d:
a0:f2:5e:97:73:bd:d0:b9:99:5b:5e:68:eb:98:e6:
cf:fd:ea:46:0d:1a:f2:75:63:9e:bb:26:eb:b6:14:
fd:3a:6d:10:86:b6:2f:8b:f5:7e:74:ed:a9:74:02:
f7:6f:4d:5d:0f:82:85:fa:c8:72:f2:18:35:e7:e7:
6e:ca:01:30:2f:cc:cf:f0:cf:82:e2:6c:89:ab:f4:
52:fc:84:dd:0a:18:9d:01:81:8d:f5:46:f7:8d:65:
0a:c8:23:c1:e1:8c:08:88:7f:8c:d7:9c:e7:ca:ca:
41:07:88:12:98:21:48:67:f2:84:36:97:17:c8:ae:
d2:ac:24:31:7b:9b:56:69:37:88:3e:55:8c:97:56:
2b:72:be:48:ea:93:9a:ae:15:27:3a:66:04:01:78:
11:5c:85:f8:36:a0:7f:38:2f:cb:a6:e8:2e:44:e2:
fb:f7:22:5e:c7:f1:e6:a1:09:75:5c:0d:90:ba:1f:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2C:71:9B:BC:31:DF:47:42:77:70:BF:ED:5A:44:B0:2A:AA:77:6D
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/VCxxm7wx30dCd3C_7VpEsCqqd20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
78:90:4f:4e:66:e1:19:70:65:c3:e8:77:18:49:13:48:51:de:
c8:e3:aa:da:e5:2f:92:ae:c8:e5:18:75:ad:df:23:f0:c8:7f:
84:82:85:81:2a:63:c8:05:b4:09:34:c2:38:c0:54:49:1b:ae:
c2:a2:c2:b5:f5:4b:71:4f:48:3d:af:5d:c2:f7:ab:2a:6c:f0:
68:47:a0:6e:40:2a:a0:a1:3f:00:ec:a9:8e:ed:15:41:c8:52:
36:38:79:4d:f8:8c:cb:33:ad:aa:03:e4:60:b6:26:0d:d5:3a:
f9:45:5d:41:a6:5a:b9:2a:a5:d2:73:87:da:20:41:a6:ec:1d:
22:1d:e5:42:45:89:9c:ec:93:bc:cb:3c:61:6d:6b:6b:f4:04:
0c:d0:d4:da:b6:6a:c4:be:8f:37:62:55:2d:46:42:26:ad:1b:
5b:5f:9a:5b:ab:36:24:90:e9:7f:e2:bd:64:93:c3:19:13:42:
d5:fc:8f:e0:15:3f:ea:e4:37:e7:d6:aa:6f:e5:12:8b:98:24:
e9:b0:6f:6a:3c:9a:da:e8:6e:53:f8:8a:d5:af:05:c5:98:a4:
41:51:cd:4d:d5:cf:53:ea:88:3e:97:23:06:94:70:76:07:0b:
10:1d:19:a6:09:e9:52:53:e7:8a:c9:c7:0b:6c:d9:27:2b:4e:
43:ce:0a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 18:55:36 2024 by rpki-client on console-fra.rpki-client.org