Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZsSD06pMsaSM6njR69ZhLHGgLvg.roa
File: ZsSD06pMsaSM6njR69ZhLHGgLvg.roa (raw, json)
Hash identifier: XBOrxHo9uMg26ins4eTDl45dKvhs/KUNG4kjfvDSi6I=
Subject key identifier: 66:C4:83:D3:AA:4C:B1:A4:8C:EA:78:D1:EB:D6:61:2C:71:A0:2E:F8
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A46C056138793343239527E7E7C7BEE53
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZsSD06pMsaSM6njR69ZhLHGgLvg.roa
Signing time: Wed 30 Aug 2023 14:02:04 +0000
ROA not before: Wed 30 Aug 2023 14:02:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:46:c0:56:13:87:93:34:32:39:52:7e:7e:7c:7b:ee:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Aug 30 14:02:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66c483d3aa4cb1a48cea78d1ebd6612c71a02ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:32:02:e1:93:42:81:7f:98:40:86:27:4f:
23:8c:e0:e9:93:3f:93:c2:ac:bc:06:60:21:9e:1a:
61:03:70:cb:7b:92:72:c7:80:ee:2a:28:2c:ca:93:
59:c9:4b:fa:65:80:c5:56:f2:4e:76:24:b3:41:1d:
96:41:84:70:2d:c1:02:cb:86:b3:02:cf:fa:5b:9c:
91:8d:e9:b1:c2:39:e5:b8:f5:1a:68:b9:4b:72:99:
70:f4:bb:b4:86:4c:7b:91:c5:94:3d:0a:57:dc:15:
86:0e:56:1d:90:72:eb:67:f6:f4:7a:b4:7c:8b:8b:
e2:b4:42:52:07:d6:68:ed:bb:03:e3:41:53:5d:16:
c5:95:ee:1e:e4:8b:4d:05:37:41:66:57:97:d8:bc:
95:a7:6e:cf:7e:2f:f9:5d:76:cc:0f:ff:55:8b:d6:
61:ab:0a:36:d7:0d:1a:d9:d8:b5:df:c5:90:06:25:
86:98:15:12:71:e4:38:bf:42:b4:96:92:e4:09:9a:
49:32:09:25:1e:9f:ff:fa:1b:bf:5f:c0:91:05:05:
b6:a3:0a:ce:d1:c9:0c:1e:72:63:1e:de:bb:e7:95:
3c:17:67:ad:bc:2f:5a:ff:a3:3b:40:87:55:ad:ee:
00:e4:a6:f3:f3:5c:e4:c6:55:4a:11:34:5c:ae:fe:
ed:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C4:83:D3:AA:4C:B1:A4:8C:EA:78:D1:EB:D6:61:2C:71:A0:2E:F8
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ZsSD06pMsaSM6njR69ZhLHGgLvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
95:b9:38:b0:d2:bf:00:47:ff:2d:69:9e:96:5a:5f:8e:3a:49:
de:c1:69:b6:5c:33:7f:1a:2c:3e:61:5d:5f:82:e5:45:6c:88:
20:0e:30:fd:8b:db:bd:70:5a:ee:a9:5d:d8:0a:77:fe:87:b8:
bf:25:64:88:59:fd:39:f5:dd:22:2a:9f:6c:84:e5:a9:fa:16:
66:69:62:b4:92:8c:59:5f:46:5d:ab:59:9e:fe:df:26:57:e3:
fb:81:a5:dc:6b:6c:dd:31:0b:12:a9:60:b2:77:26:b3:a8:42:
18:bf:c2:25:e1:cc:54:af:a9:3e:6e:bd:18:d9:05:88:6f:ea:
17:ff:74:8a:0e:b3:c5:d2:f0:78:ac:bf:6a:04:61:1b:aa:c5:
10:b6:cf:f9:43:20:af:4e:32:ba:68:f0:1b:e8:16:b6:6c:44:
a1:f2:3a:53:b0:f2:48:53:0a:f7:fb:cb:21:43:f9:df:4d:0e:
da:8f:d8:b0:d1:2d:41:94:28:d5:ed:ce:8f:32:c8:10:b5:30:
e9:8b:3f:26:3c:e5:b2:a1:86:01:5d:27:cf:29:5e:ff:71:44:
11:9b:d9:4e:f1:1d:13:da:a1:dc:3a:df:a0:be:0e:38:fc:8e:
b6:45:1e:91:88:44:ef:27:f9:1a:74:5e:46:18:f0:12:16:c3:
17:87:6d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 13:00:14 2023 by rpki-client on console-fra.rpki-client.org