Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zg6_sNq-u4LgdJVpLhqYFPybydI.roa
File: Zg6_sNq-u4LgdJVpLhqYFPybydI.roa (raw, json)
Hash identifier: s2vbNh82I6nrLfTqEQHmPWIe//PSJxETMXKqj8ZbThI=
Subject key identifier: 66:0E:BF:B0:DA:BE:BB:82:E0:74:95:69:2E:1A:98:14:FC:9B:C9:D2
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018FFEF8789BBAE98CE6AA04A6369EB054A6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zg6_sNq-u4LgdJVpLhqYFPybydI.roa
Signing time: Sun 09 Jun 2024 21:47:27 +0000
ROA not before: Sun 09 Jun 2024 21:47:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 11:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:f8:78:9b:ba:e9:8c:e6:aa:04:a6:36:9e:b0:54:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 9 21:47:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660ebfb0dabebb82e07495692e1a9814fc9bc9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:8b:5d:44:ce:f5:b8:3c:8a:4e:75:cc:8e:
89:15:02:7a:af:64:c6:6d:4d:a1:2c:10:60:b2:ca:
37:fd:08:08:b2:45:b5:88:42:2b:77:4c:6d:de:57:
99:f6:bb:a1:3d:6b:8e:16:cc:56:1e:32:52:cd:05:
56:5c:c4:48:6d:52:a8:64:e4:3d:ff:fe:ae:48:d3:
66:04:ae:ba:0b:9e:12:8d:31:6a:51:3a:c8:a7:66:
1e:0f:51:01:bf:a0:1f:39:b8:6d:44:28:f1:95:00:
e1:a6:cd:9c:b4:4d:8b:fd:33:d8:4c:8f:64:2c:95:
d8:47:de:32:75:ff:0b:02:6e:86:42:e8:e7:95:f3:
53:32:3c:6a:cb:76:47:7c:bf:24:47:8d:00:a6:e7:
8f:98:f8:73:e0:5a:a1:17:ee:ee:2a:43:16:b1:14:
41:ae:61:2b:4b:a8:f6:9b:07:38:55:84:61:43:c0:
6f:ae:a9:4f:e2:55:f5:9b:d9:99:6c:9d:cb:73:97:
da:74:0b:12:8b:3b:75:09:02:36:6d:70:b7:09:dd:
a9:79:c2:55:ff:c1:83:a4:17:4f:63:50:c2:c1:3e:
1c:2f:d7:0a:f5:cc:b7:61:48:39:a3:a0:7f:bb:6f:
87:7b:86:58:48:a0:e9:23:a9:72:65:99:89:c5:e4:
35:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:BF:B0:DA:BE:BB:82:E0:74:95:69:2E:1A:98:14:FC:9B:C9:D2
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/Zg6_sNq-u4LgdJVpLhqYFPybydI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
ac:e0:28:4d:48:f9:d0:8f:a1:5c:86:90:af:1b:23:d6:06:c0:
89:6a:e2:ad:8c:a0:f4:3c:e8:2e:a3:9a:8a:1e:5d:89:83:38:
59:99:b4:f6:52:22:ec:c9:65:98:4e:a2:68:3b:c5:59:86:cf:
a3:e4:9f:98:6f:07:f8:12:57:be:30:96:05:73:8d:22:7a:61:
81:10:94:cf:1a:80:b9:b8:06:59:94:84:0c:7d:62:66:67:ce:
8a:0b:dd:a2:b7:e6:91:34:c1:c3:a6:aa:a8:92:61:fd:da:29:
95:ef:1d:be:b4:12:98:82:7c:11:c0:12:20:7e:d2:54:40:27:
42:18:82:b7:be:94:0e:ba:b4:c7:29:68:c2:e4:8b:ce:48:dd:
00:48:03:fb:ed:f7:ad:fb:03:50:e9:29:a9:6c:97:9c:bf:41:
72:47:2a:25:7c:fb:a9:87:cc:2e:84:33:ac:ac:8c:0d:0c:30:
da:40:ea:e2:44:ff:d7:19:9f:5e:dc:6f:5c:2d:25:1a:8b:7c:
ff:f6:8a:17:e8:6c:b7:db:66:cb:a5:b8:17:d1:ae:57:5d:a8:
28:ca:a9:b6:ff:41:42:00:5b:cd:f7:f8:aa:8c:53:2d:59:45:
4e:15:f2:7f:f8:75:1f:0c:c3:5d:7d:de:00:12:74:65:fb:93:
4e:b7:0b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:02:07 2024 by rpki-client on console-fra.rpki-client.org