Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/_fxr4-i3MS6T_oz94bP3bpVPF1E.roa
File: _fxr4-i3MS6T_oz94bP3bpVPF1E.roa (raw, json)
Hash identifier: 7aGKw9AZ9pADg9zmcQeNpyZW0mWur4t++1wG9uB/aT0=
Subject key identifier: FD:FC:6B:E3:E8:B7:31:2E:93:FE:8C:FD:E1:B3:F7:6E:95:4F:17:51
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018FFEB94C777866EF7F4B4FE7B259525C0A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/_fxr4-i3MS6T_oz94bP3bpVPF1E.roa
Signing time: Sun 09 Jun 2024 20:38:27 +0000
ROA not before: Sun 09 Jun 2024 20:38:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 11:28:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:b9:4c:77:78:66:ef:7f:4b:4f:e7:b2:59:52:5c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 9 20:38:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdfc6be3e8b7312e93fe8cfde1b3f76e954f1751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5b:95:f9:ec:99:38:a4:db:6d:2c:1c:e1:b2:
a0:bb:0c:72:2c:5c:5a:c7:e2:9f:e3:34:d4:68:89:
79:48:4f:d5:b7:3d:2b:e7:57:1e:0e:53:e8:28:6e:
ae:b8:84:96:b7:e8:b1:9f:31:23:38:86:c9:20:3e:
e8:d5:cf:01:43:8b:18:99:0b:75:32:31:b9:96:56:
56:14:d7:10:90:b7:1e:da:70:64:56:5d:e9:12:f8:
88:3f:24:b5:df:fb:67:e3:b7:4e:d3:34:f1:72:dd:
d1:b3:b1:89:4c:bb:54:45:88:8b:17:d8:84:37:66:
b3:b8:62:ee:a3:54:14:c1:2d:97:d8:e4:1d:16:9f:
7c:0e:11:2e:d1:51:b4:40:59:5e:b2:29:11:d6:c1:
dc:6b:3a:97:e9:1f:65:3a:27:8b:a4:96:30:53:ed:
60:c9:19:c8:cd:de:71:eb:7f:27:5d:e9:6b:3c:50:
11:d2:94:b2:70:39:b0:fe:4f:e1:04:d0:4e:08:5d:
79:2c:52:e9:19:45:34:66:99:75:d5:22:dd:27:5e:
77:0c:ae:4a:91:ac:93:90:0b:2c:48:9b:f4:2d:95:
4b:75:19:0a:e5:47:4d:52:dd:bb:18:c4:bd:a7:75:
da:4a:20:36:8b:c3:26:81:83:9c:8c:2b:3f:71:69:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:6B:E3:E8:B7:31:2E:93:FE:8C:FD:E1:B3:F7:6E:95:4F:17:51
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/_fxr4-i3MS6T_oz94bP3bpVPF1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:98:e2:e9:62:6d:f1:df:98:28:e3:f6:91:76:93:57:02:36:
76:03:3d:56:1c:82:17:2f:58:3a:97:43:82:72:b4:06:8b:c3:
f0:ce:71:c4:ed:19:c9:bd:00:7f:91:02:cb:42:a0:39:bf:f7:
8b:18:b0:a2:96:1e:fe:96:42:03:df:27:9a:75:38:dd:0f:38:
e5:a6:42:00:63:10:2e:cc:d8:9f:49:72:b0:61:ad:a6:9c:a3:
c4:93:91:f1:5b:ef:91:64:77:93:4a:80:e8:42:cc:e5:0d:3c:
4a:15:d0:e7:ee:d2:7b:51:10:65:03:c0:c7:6e:6d:81:fa:63:
40:5a:22:89:86:47:00:d3:a1:48:ee:9b:ce:4c:f4:2c:60:f4:
8f:36:b7:26:78:45:55:89:15:c7:ea:3b:35:76:c6:a1:84:20:
ed:d6:f2:12:93:b8:c7:4b:e5:90:e3:8c:32:c3:fb:03:d0:9d:
70:a4:da:0a:25:16:d8:fa:f7:31:ba:9f:b9:6c:a7:a5:a0:f2:
45:5a:db:66:ff:62:92:14:3a:0e:1f:07:07:a3:f8:d6:7d:6c:
94:bb:cb:c7:b1:50:d1:34:d1:ff:87:d7:b7:ab:32:66:03:be:
83:d1:65:b3:54:e7:b1:f6:22:09:d5:07:f5:71:dc:38:8f:f8:
65:2a:c9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 14:02:07 2024 by rpki-client on console-fra.rpki-client.org