Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZkyiH-PpJekFdCN-3HQonNH1gfw.roa
File: ZkyiH-PpJekFdCN-3HQonNH1gfw.roa (raw, json)
Hash identifier: GjnlAaAzy9zP27I1jdwtKFaYb/H9qT7LCekAuMx8BJc=
Subject key identifier: 66:4C:A2:1F:E3:E9:25:E9:05:74:23:7E:DC:74:28:9C:D1:F5:81:FC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 019183DBC03ADA6FED8E2388948BDDD8C6C3
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZkyiH-PpJekFdCN-3HQonNH1gfw.roa
Signing time: Sat 24 Aug 2024 10:08:22 +0000
ROA not before: Sat 24 Aug 2024 10:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214351
IP address blocks: 91.228.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 13:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:83:db:c0:3a:da:6f:ed:8e:23:88:94:8b:dd:d8:c6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 24 10:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=664ca21fe3e925e90574237edc74289cd1f581fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:a9:59:85:30:5c:d9:23:1c:f2:c9:d7:aa:
f7:8c:4f:32:c7:c5:ac:7d:8b:7d:65:d1:f6:90:c4:
cc:f6:de:06:68:5c:c5:bf:68:2b:71:db:b0:f3:4e:
9c:e7:45:83:58:f9:84:30:b6:e6:df:69:20:38:70:
88:4e:ba:2b:c5:b6:bc:0c:d8:23:44:1e:e4:0c:fd:
de:40:41:65:b8:7a:84:21:fb:cc:1c:8f:7f:b1:17:
d1:a5:3d:36:26:fa:9c:f8:9f:9f:7a:1f:24:b5:c4:
0c:c4:51:b2:8d:85:45:29:4f:ac:70:a3:34:1f:ce:
1c:18:45:d1:b5:ff:aa:0e:ae:ef:27:e3:04:f8:58:
71:e1:57:a3:3e:0d:0f:da:ff:ca:05:0c:51:26:92:
e0:ce:9d:b9:13:a2:aa:9c:7d:6f:6e:9d:c0:a4:cc:
da:63:00:96:b4:38:64:47:08:d7:f5:96:7e:1a:71:
1d:c9:d3:27:f0:ed:05:fb:69:75:9b:ae:f5:ff:1e:
4b:51:c4:c8:af:91:f0:97:f7:34:b1:42:fd:1f:27:
ff:a1:ed:71:04:56:0e:09:62:02:b4:e5:2e:8e:44:
75:d4:c5:87:24:dd:11:e3:5e:17:ec:84:82:69:1e:
83:41:98:76:65:71:8b:fa:1c:4f:92:62:91:bc:9b:
aa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:A2:1F:E3:E9:25:E9:05:74:23:7E:DC:74:28:9C:D1:F5:81:FC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZkyiH-PpJekFdCN-3HQonNH1gfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
Signature Algorithm: sha256WithRSAEncryption
78:21:14:a2:24:06:2c:2e:f8:ae:2e:86:f8:a0:c0:a1:28:da:
97:2d:f8:c7:89:b8:d4:73:50:99:66:76:8c:df:8a:9a:d0:64:
d0:50:31:e4:36:bc:17:13:0c:38:41:53:51:c6:ca:62:ae:59:
cd:38:21:05:e5:00:8a:51:d0:91:af:82:ee:43:33:5f:13:d9:
59:58:cc:0d:ab:a8:4d:fc:b7:13:b5:60:85:fd:6b:81:01:83:
ac:48:ff:16:d9:ad:2f:44:fd:d5:b1:79:c0:f9:3f:ee:e3:42:
43:ad:41:de:e5:d8:24:4d:be:83:d7:cc:cf:f1:17:44:8c:3d:
d5:fa:bc:4b:82:23:fb:fa:0f:57:e8:d1:76:1b:0d:bc:b7:ba:
41:c7:12:06:c6:a1:34:d7:38:16:85:e8:a0:7c:75:81:ee:6b:
33:47:5c:22:ed:10:a2:57:6f:67:ad:41:04:01:f8:e5:0a:4d:
0f:9d:e8:8e:45:77:f2:71:09:5a:8a:62:e0:d7:51:00:bf:e4:
85:ad:d9:18:4f:a9:39:e3:ba:fc:5d:a6:68:7b:c8:46:98:60:
ac:5e:e8:2a:f2:9c:e2:f6:12:73:c1:ca:f7:6e:39:01:da:ef:
e8:bc:fe:0f:8a:3e:8d:e9:b1:44:d2:f3:60:73:73:44:22:14:
1c:47:8b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 17:23:42 2024 by rpki-client on console-ams.rpki-client.org