Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/W45RAKQCOryFp86K1EEnCysmksY.roa
File: W45RAKQCOryFp86K1EEnCysmksY.roa (raw, json)
Hash identifier: RI7dMVDCcEy9wry73g5uxqdMnL3XkcygjqUcBezeg/Q=
Subject key identifier: 5B:8E:51:00:A4:02:3A:BC:85:A7:CE:8A:D4:41:27:0B:2B:26:92:C6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019118C98175DE4D84D486AF9A5F0E95F20A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/W45RAKQCOryFp86K1EEnCysmksY.roa
Signing time: Sat 03 Aug 2024 15:09:04 +0000
ROA not before: Sat 03 Aug 2024 15:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44714
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 10:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:c9:81:75:de:4d:84:d4:86:af:9a:5f:0e:95:f2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 3 15:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b8e5100a4023abc85a7ce8ad441270b2b2692c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:97:1a:dc:a1:39:e2:92:0b:52:52:45:c1:
48:98:e7:d2:a8:a7:a1:3c:9f:72:bd:8f:b0:1c:35:
de:7f:c8:f9:1f:ad:d0:99:05:44:93:6a:d6:d9:29:
06:6b:a2:eb:85:d4:1e:a5:ea:12:fe:fa:ba:75:d5:
f0:3c:eb:e0:69:2f:1d:6e:5a:3a:6d:cd:05:84:98:
64:9d:ce:2e:f9:3e:33:85:40:80:2f:5a:5d:04:44:
1a:23:6c:05:00:15:0a:7c:1d:9b:fe:81:6c:b1:32:
1a:e8:79:94:38:f0:3d:d8:91:63:53:a7:5a:95:34:
e7:cb:2a:bc:f0:f0:66:29:ec:33:32:81:42:e2:a0:
42:4c:80:77:64:05:4a:ac:d9:c4:f9:18:5a:8a:f1:
ff:a6:a3:4a:6d:89:65:30:71:df:1b:04:df:e6:4f:
5c:d9:80:13:b4:7d:b3:b7:be:1d:b4:8a:9c:23:88:
bd:44:00:15:0d:8e:ed:2a:25:fa:7b:08:ff:31:ab:
ff:ac:3c:a9:79:7e:3a:c4:23:77:6f:80:e0:b7:8b:
2a:86:3f:4d:39:b1:78:c5:aa:08:c3:33:bc:88:33:
e1:da:51:a6:26:43:d8:ec:1f:be:d4:9b:ed:29:2b:
3d:00:d0:1d:98:c1:09:a2:d3:f5:74:4e:e1:57:56:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8E:51:00:A4:02:3A:BC:85:A7:CE:8A:D4:41:27:0B:2B:26:92:C6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/W45RAKQCOryFp86K1EEnCysmksY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:78:7e:ea:cc:25:1b:68:4a:76:1a:56:01:be:84:ab:2f:a1:
94:03:81:01:f1:36:d7:11:7b:d6:1e:82:f9:c3:ad:6c:82:0f:
0d:bf:84:9e:5b:92:b3:b9:dd:91:08:65:40:5f:03:71:90:ef:
c7:be:c9:56:26:62:4a:3c:64:80:d0:5a:cf:b0:30:34:a6:a7:
54:bf:6a:14:aa:23:e5:b7:c4:5f:4f:f7:48:1f:60:c1:ea:17:
2f:46:fb:fa:2a:93:1f:f4:5d:6c:7d:02:ec:bb:f2:07:ec:77:
c4:d4:3d:bc:02:18:5f:b0:76:fe:52:bb:90:b9:a2:55:f6:ad:
84:5a:cc:2f:34:aa:23:90:6f:dc:f8:c7:02:71:90:d4:9d:ea:
3f:e9:1e:98:37:35:d5:2f:5e:17:3a:2c:f5:dc:9b:52:05:e7:
72:1c:fe:13:02:be:ac:65:0c:5f:5b:fb:6e:41:fa:b6:e2:3d:
3e:f5:23:b3:7b:01:8f:9d:db:d8:fb:0d:24:b1:97:3c:97:12:
ab:a2:05:52:4a:11:f3:9d:9b:2e:e7:ac:0b:e3:ad:a6:80:29:
11:4f:ba:4e:51:26:76:0e:df:eb:53:50:0c:0e:4a:2f:ee:ef:
3a:51:9a:c5:38:f4:22:4d:d2:7c:6d:ca:28:1f:82:4b:73:af:
ff:1d:98:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 12:15:40 2024 by rpki-client on console-fra.rpki-client.org