Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/cnatSjgfthTWNhnedu9PSBIBD_8.roa
File: cnatSjgfthTWNhnedu9PSBIBD_8.roa (raw, json)
Hash identifier: ATtG0p6LVAIlqMTJILhQDoYqT2a6J6SUFxvgRqAdoGo=
Subject key identifier: 72:76:AD:4A:38:1F:B6:14:D6:36:19:DE:76:EF:4F:48:12:01:0F:FF
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018AE1D9C59664B3AFC8AE9AC7554EBB69D6
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/cnatSjgfthTWNhnedu9PSBIBD_8.roa
Signing time: Fri 29 Sep 2023 16:50:59 +0000
ROA not before: Fri 29 Sep 2023 16:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:d9:c5:96:64:b3:af:c8:ae:9a:c7:55:4e:bb:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 29 16:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7276ad4a381fb614d63619de76ef4f4812010fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:11:00:3f:fe:f0:66:db:7c:e0:71:18:21:
c4:8b:66:89:2b:a1:e9:2a:9d:e2:91:a1:98:ac:95:
9b:19:e7:24:a2:7b:cd:25:76:62:ca:ca:7b:bf:56:
ec:05:2b:7b:f1:fe:fc:8c:34:62:99:43:41:cf:6b:
b8:41:7e:f8:ec:c9:4f:46:66:5d:c1:bd:4b:94:5c:
31:f9:8c:da:d1:f8:4a:4a:16:02:7d:c6:34:c3:f9:
0c:85:81:6b:1c:33:91:aa:d0:2d:a1:d5:fa:46:8c:
9d:3b:71:f3:31:13:64:8e:3e:74:9b:70:e7:78:c3:
69:28:fe:f4:f7:95:ae:ec:7e:1e:62:f7:ed:b8:9b:
e4:56:e3:f3:81:8f:f4:0d:25:24:01:08:61:f1:26:
28:92:75:7e:68:ed:0d:c6:22:04:2e:b8:40:ba:1b:
b2:44:06:a7:9c:47:74:bc:b9:02:52:3e:2a:4d:97:
7d:e4:62:68:90:d1:50:e0:72:c7:9f:e7:d3:d5:5e:
c9:2d:64:e6:99:a9:3a:4b:0f:6d:68:86:3c:fc:8a:
c0:8c:ed:2c:a4:92:ef:42:09:5a:7d:b9:10:98:56:
69:79:b7:46:7f:d9:d3:ab:85:e9:9d:2f:4a:93:21:
5b:c4:6c:08:52:52:77:c9:39:07:a8:b5:d8:32:19:
32:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:76:AD:4A:38:1F:B6:14:D6:36:19:DE:76:EF:4F:48:12:01:0F:FF
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/cnatSjgfthTWNhnedu9PSBIBD_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
28:15:2f:2b:71:91:67:fe:9f:d1:5f:af:76:93:73:13:59:03:
c6:ba:51:97:d9:58:54:76:b4:39:f8:97:f8:b8:d4:fc:30:2b:
a7:70:7f:0a:f2:f3:df:a2:c0:64:57:3b:19:11:cb:a5:25:0a:
fa:2f:21:c5:6b:fa:78:3a:08:81:7d:81:04:5f:7b:25:67:91:
62:a9:ee:97:ed:0d:a4:4c:17:7a:ee:96:3d:9c:84:46:44:bc:
22:7c:f4:03:f0:79:c4:f9:da:61:f3:e9:e2:da:28:f6:86:3d:
0f:c5:0b:3a:10:fe:e3:39:87:35:f1:16:9b:6b:b4:86:e4:77:
98:04:13:37:fe:80:99:d4:45:0a:25:56:ae:19:39:8c:82:72:
c8:4e:76:fc:23:98:8f:67:8a:78:be:08:bf:d0:e2:ab:e1:90:
e2:95:84:41:ed:73:80:c2:ad:b6:7d:47:e0:5e:1f:0c:9c:32:
ac:28:90:21:65:52:10:56:b3:eb:bc:6a:d2:63:01:97:0a:a6:
f8:3a:91:2f:73:1a:3e:77:9f:e3:2a:ab:10:79:5f:83:9c:31:
ef:21:21:99:7f:bf:20:36:24:49:78:4d:88:18:14:a2:00:e3:
a4:1f:ae:32:e0:e7:80:b5:6d:89:fc:7c:7c:8f:58:00:31:66:
b7:f4:05:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 17:27:43 2023 by rpki-client on console-fra.rpki-client.org