Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WN8SSSFqeURFeDakyJ9ieTvK4TE.roa
File: WN8SSSFqeURFeDakyJ9ieTvK4TE.roa (raw, json)
Hash identifier: JI5IlZV3Rzc1Kt3GXvLmYeuESrT4vkyhkM0WvoQLEI0=
Subject key identifier: 58:DF:12:49:21:6A:79:44:45:78:36:A4:C8:9F:62:79:3B:CA:E1:31
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018BCD7711BE5CF2E3120DED6A40742BCAB7
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WN8SSSFqeURFeDakyJ9ieTvK4TE.roa
Signing time: Tue 14 Nov 2023 10:53:34 +0000
ROA not before: Tue 14 Nov 2023 10:53:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:77:11:be:5c:f2:e3:12:0d:ed:6a:40:74:2b:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 14 10:53:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58df1249216a7944457836a4c89f62793bcae131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:2e:9c:ca:59:1d:5e:b6:d4:66:3a:1b:07:
41:2a:40:8c:f9:52:bd:59:d0:38:19:c6:67:55:76:
6a:65:b8:41:05:8c:10:44:b8:02:0d:09:2a:09:9c:
97:f2:5e:ca:0b:25:d2:48:25:93:5b:f9:0e:eb:84:
d5:ef:09:60:84:49:dc:4f:00:17:8e:55:d6:5f:15:
bd:66:10:0b:4e:08:59:20:3e:78:00:0b:24:b6:c4:
11:28:ad:43:2c:87:1d:66:bb:02:5b:e0:20:56:4a:
e1:ca:75:30:8d:a3:d0:bc:28:47:95:2e:c4:2f:e0:
71:bb:86:27:d2:4c:7a:a7:ed:27:66:1e:da:5e:c2:
08:3d:d3:f8:ee:53:89:60:a9:b1:bc:2d:3e:56:b6:
76:45:fa:40:14:0d:cf:f5:47:d8:5f:d6:d5:78:83:
69:2a:34:3d:93:0c:2b:c5:82:37:7b:ba:33:41:a0:
fa:fd:93:67:47:ad:42:6e:4d:6b:f7:9c:3d:1e:bb:
f1:e1:4a:43:c5:bf:cd:19:de:2c:9b:16:13:34:a9:
18:f4:22:bf:5b:b9:d5:ef:e4:6e:20:90:0f:30:2d:
e9:67:de:92:bf:63:06:d0:0e:c1:60:00:ff:db:30:
ea:1a:c1:bf:63:7b:28:73:1a:7c:08:dc:72:84:25:
f1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:12:49:21:6A:79:44:45:78:36:A4:C8:9F:62:79:3B:CA:E1:31
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WN8SSSFqeURFeDakyJ9ieTvK4TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
56:ff:8b:7b:54:f1:00:e8:1c:ff:8b:85:55:23:fe:77:b0:d5:
00:d4:cc:fc:be:38:9b:9a:e5:0d:bd:5e:36:83:10:75:01:fe:
53:5c:48:3c:d9:05:00:61:05:16:cc:3b:52:7a:77:cf:d7:56:
a2:b1:46:5f:9a:fe:78:bd:b8:3b:91:4f:6c:4d:c7:cd:d4:be:
4b:22:f6:a5:ba:9d:ff:66:b8:8f:a8:db:0c:ee:8f:72:74:c3:
a0:b4:1f:82:de:e8:91:cb:14:38:25:74:c1:f8:6e:b6:58:c6:
9f:1b:80:5b:36:36:f0:f5:ed:25:24:5f:e5:50:16:ca:cf:ce:
17:e0:9c:d1:88:2d:93:d3:4a:0d:24:61:af:a6:93:c6:fb:b2:
0d:b0:d6:9e:49:e6:11:31:81:49:71:19:d3:ba:f2:8f:b3:5a:
85:dd:4a:ca:1a:2f:36:c9:f3:be:6f:34:bc:bb:7d:66:f5:9e:
43:a7:d9:37:78:91:36:b4:66:2d:c9:14:c3:6a:77:59:7f:ee:
94:1f:bd:32:44:d9:1e:9b:f8:d7:fc:02:d5:44:92:aa:8d:76:
0e:4c:f4:76:1f:9d:20:08:ee:0f:91:72:56:29:17:9f:c2:55:
c5:64:d2:d2:e5:7c:f8:75:d8:cd:d3:b1:ed:0c:ce:1e:30:d5:
98:1a:71:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 18 10:27:35 2023 by rpki-client on console-ams.rpki-client.org