Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/XI5JE6i7pt5T90flcz-8kQuyEOY.roa
File: XI5JE6i7pt5T90flcz-8kQuyEOY.roa (raw, json)
Hash identifier: qVTE/pMHq2U93VoTxrHzpAtdM8k3Cd0Eo4xtR6tcV2Y=
Subject key identifier: 5C:8E:49:13:A8:BB:A6:DE:53:F7:47:E5:73:3F:BC:91:0B:B2:10:E6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01906030F18E6C00F5904F6665DC3F8597EC
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/XI5JE6i7pt5T90flcz-8kQuyEOY.roa
Signing time: Fri 28 Jun 2024 18:52:18 +0000
ROA not before: Fri 28 Jun 2024 18:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 07:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:60:30:f1:8e:6c:00:f5:90:4f:66:65:dc:3f:85:97:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 28 18:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c8e4913a8bba6de53f747e5733fbc910bb210e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:25:8a:2d:fb:f0:64:97:74:21:b3:eb:4c:
ca:16:f8:4e:01:fc:bc:01:b3:cd:18:85:11:cd:1a:
2e:d5:f3:67:5e:b7:0b:7d:5c:30:c1:7f:f8:e7:55:
cc:86:0d:c3:3f:ba:6c:5a:9e:52:27:ca:9e:6e:2b:
31:40:1f:1d:e4:7f:3e:3a:6f:0a:a3:fc:56:0f:53:
06:58:77:34:28:81:d4:f2:9c:f9:e7:4f:20:12:38:
4e:f2:e8:4a:d3:1b:4b:e5:b7:11:59:ed:be:04:87:
0f:89:54:01:b3:89:77:89:d1:44:dc:42:a9:fa:2a:
f6:cd:af:7e:84:81:27:4f:81:63:c7:ee:0c:62:95:
aa:37:a3:19:b3:6b:0b:a3:6e:e0:cd:f1:1f:3d:4c:
db:be:ab:2b:bd:71:22:5b:d9:58:8b:10:56:1e:b4:
35:f6:fe:3e:da:55:a4:0d:00:0d:1c:76:23:1a:f9:
f9:b0:ed:9a:fb:a0:86:7b:84:c6:9c:fd:a8:42:e2:
32:78:77:0c:5b:4f:4b:c0:dc:dd:c1:5f:39:a8:a3:
1d:8c:4d:44:b5:f3:f6:d6:ff:b4:64:f7:7e:89:fc:
2b:ef:76:a8:1f:d0:63:a7:22:9b:e8:9b:dd:4f:99:
90:ee:5b:c9:f6:eb:0d:ea:bb:25:42:5d:66:0f:74:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:49:13:A8:BB:A6:DE:53:F7:47:E5:73:3F:BC:91:0B:B2:10:E6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/XI5JE6i7pt5T90flcz-8kQuyEOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
72:e8:d3:32:ed:8d:63:11:72:ac:cc:43:b4:f4:27:e0:35:ff:
7e:a7:c9:e7:0a:5e:6f:21:d1:f2:47:20:f0:d3:d5:6f:9d:b2:
5c:67:c4:40:1a:fc:d7:7a:16:1c:66:3c:23:e7:21:f5:1a:e5:
d1:3c:f6:1f:47:50:82:1f:49:3d:69:96:1f:f9:7c:9b:71:8a:
5c:2e:59:37:94:e4:3e:f9:69:3b:b0:b0:cf:11:67:ff:b8:11:
d6:23:44:0b:2b:62:7a:7a:02:56:c8:e8:3c:c5:db:76:0b:34:
10:3a:51:b2:be:85:8c:14:d3:c3:9a:0e:ca:3d:13:44:ed:7b:
46:a0:fd:7a:74:29:ee:aa:01:a3:9d:dd:0e:84:b6:1d:7d:1e:
30:57:49:96:3f:3c:01:a7:1b:fc:f2:a1:65:6a:60:6b:96:50:
44:81:4f:f5:65:77:e9:be:7d:74:53:a8:37:18:27:90:04:90:
87:c4:e0:23:2c:72:ee:e7:3f:0d:c7:76:10:06:e5:31:9f:d5:
46:26:d4:5e:8a:8b:59:c6:48:f6:c1:39:e6:87:a7:c0:38:eb:
c0:ae:a5:2b:b9:ef:67:a3:8c:d6:a4:5c:f0:1d:f7:57:bb:34:
4c:2e:dd:bb:4c:a6:ae:3b:ba:9d:6a:20:7e:70:7c:5e:bc:40:
5f:71:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 09:49:47 2024 by rpki-client on console-ams.rpki-client.org