Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/d0RQkNQid-zAzuhBerk0xdadMkw.roa
File: d0RQkNQid-zAzuhBerk0xdadMkw.roa (raw, json)
Hash identifier: /11KclfA3cN0qJXS0iVfjVWfy1nAfakHtAQQsWib2lU=
Subject key identifier: 77:44:50:90:D4:22:77:EC:C0:CE:E8:41:7A:B9:34:C5:D6:9D:32:4C
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CF45E76F674AF9E9B92035073FB52E683
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/d0RQkNQid-zAzuhBerk0xdadMkw.roa
Signing time: Wed 10 Jan 2024 17:14:40 +0000
ROA not before: Wed 10 Jan 2024 17:14:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.14.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Jan 2024 06:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:5e:76:f6:74:af:9e:9b:92:03:50:73:fb:52:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 10 17:14:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77445090d42277ecc0cee8417ab934c5d69d324c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:e6:59:9a:b9:cc:58:41:48:89:e9:1a:a3:
fc:99:72:c6:a9:a6:dc:fb:81:c0:65:2f:a6:4c:2a:
8c:ca:47:9c:5b:0a:83:7d:cd:26:77:ad:f9:bb:78:
20:58:b7:90:1c:d9:a5:16:0e:34:9b:f8:c4:24:bc:
9f:d5:f7:2e:8b:3f:64:e0:89:54:da:52:2f:6e:74:
c5:0e:30:ba:35:f4:cd:87:dc:a5:c9:00:06:19:db:
9d:fe:bd:6e:6a:f3:25:eb:b8:08:a6:df:5f:6d:97:
0e:af:2f:6f:12:02:32:87:77:cd:43:49:3e:61:eb:
63:38:c8:e1:f4:6a:86:16:4a:b4:f1:6a:b7:c3:c8:
40:fe:b3:40:33:93:12:68:da:f1:07:6a:14:b2:b9:
cd:c6:db:52:07:f1:f7:5e:0a:90:9f:43:f1:61:d0:
cc:a4:fe:27:2a:26:ab:3e:64:a2:a4:23:e5:64:10:
17:28:dc:85:e8:25:ab:86:be:ee:d6:cd:47:f7:d8:
45:a4:3e:5c:dc:ff:6d:5b:f3:3d:73:b1:f9:47:b4:
0e:59:38:46:42:5b:f2:9e:63:94:36:05:f8:19:d0:
8e:5b:7f:1b:64:d4:c4:a4:8d:62:37:ac:c4:66:62:
8d:79:fa:fb:49:23:0b:23:b3:cf:7e:b8:46:9f:b0:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:44:50:90:D4:22:77:EC:C0:CE:E8:41:7A:B9:34:C5:D6:9D:32:4C
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/d0RQkNQid-zAzuhBerk0xdadMkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/23
Signature Algorithm: sha256WithRSAEncryption
88:68:6a:50:5b:5c:83:a7:53:97:7e:de:86:54:6f:f2:9b:7a:
30:75:10:ea:fd:a5:52:e3:0c:45:d1:a2:50:7f:45:67:d5:47:
d3:3f:9e:32:0c:a7:18:7c:32:48:b0:50:f8:46:90:67:7a:2c:
e1:e8:83:6c:f6:f8:8b:fe:0d:bc:09:07:9f:98:a4:97:8c:11:
a3:99:b7:9b:bc:6a:f6:62:14:4e:ea:2f:cd:44:b5:a5:5b:25:
c9:2c:1f:46:58:b1:89:ea:81:c3:d4:27:32:bc:1c:d9:ed:93:
8f:0a:2c:6f:f6:06:d7:a4:ec:cb:47:3d:97:3c:42:d7:cf:f6:
52:6a:17:f7:ac:7f:7a:18:d7:b1:e3:3a:1e:57:0e:81:ce:e0:
c1:c5:be:07:8b:c8:0d:76:de:19:29:fa:f6:87:0b:78:28:f6:
f6:77:e0:c6:ca:a3:b3:0f:be:61:80:fb:dd:3c:ae:55:67:92:
bb:8c:5c:9d:1f:7a:90:3a:24:a8:1f:37:02:a3:fa:b1:7d:36:
6b:c2:e6:78:10:8f:11:7a:26:65:1f:2e:5b:58:ec:ce:49:0b:
d6:21:66:50:b9:1e:72:7a:7f:8c:2c:6e:dd:f9:10:9f:05:98:
53:d5:a9:7d:f4:05:73:96:4d:15:98:ac:da:98:60:37:a7:6b:
b7:1c:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 08:02:23 2024 by rpki-client on console-ams.rpki-client.org