Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/e6nmJnkmLIw0KBkoNjC8aO4Ga8c.roa
File: e6nmJnkmLIw0KBkoNjC8aO4Ga8c.roa (raw, json)
Hash identifier: rWfFbdEHUeRqzE6EWk/slafNdbQPhvPbzQsdbz5gChI=
Subject key identifier: 7B:A9:E6:26:79:26:2C:8C:34:28:19:28:36:30:BC:68:EE:06:6B:C7
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B24A41983E6C303843D8D3679EE85A55D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/e6nmJnkmLIw0KBkoNjC8aO4Ga8c.roa
Signing time: Thu 12 Oct 2023 16:06:56 +0000
ROA not before: Thu 12 Oct 2023 16:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:a4:19:83:e6:c3:03:84:3d:8d:36:79:ee:85:a5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 12 16:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba9e62679262c8c342819283630bc68ee066bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:b4:21:90:7d:e6:ea:da:9b:09:fb:71:54:
fb:80:2d:63:3f:f1:e0:f8:84:86:e8:7f:24:87:27:
a6:1d:ef:8e:f9:f3:6b:8e:22:bb:4c:85:92:5e:16:
8a:4c:c9:0a:5a:86:5d:35:97:7b:db:49:62:c8:e0:
57:b5:8c:64:6c:33:e4:99:4a:9b:49:03:f9:e9:55:
8e:3e:17:f1:bd:9b:e2:1d:45:d4:27:46:4a:2b:05:
d6:8d:c8:64:88:c2:1c:06:fa:70:78:96:7f:aa:05:
19:7d:92:fd:f2:c3:a1:c2:19:6c:2d:ab:36:83:f4:
fe:42:dc:27:20:4d:0b:e3:03:03:4e:7f:6d:f3:6d:
1c:ab:c6:9d:62:20:46:68:a8:1d:31:22:ad:4d:15:
41:83:5a:a2:b3:23:65:9e:ff:6b:13:9b:a9:b4:62:
a8:54:81:ad:05:d4:dd:cc:95:c1:64:6f:20:ad:4d:
a7:86:2e:cc:ad:a8:71:f4:f9:16:b4:50:83:39:cb:
5c:c5:0d:4e:73:bd:5f:93:ec:31:e4:b1:a4:58:40:
78:21:d1:b3:fe:51:41:01:6a:93:d3:ed:bb:24:eb:
4b:f0:5e:ed:cb:82:33:40:df:d8:61:97:2c:05:5d:
3a:5d:e4:fa:b4:d9:f3:7d:e2:36:9c:19:0b:94:42:
06:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A9:E6:26:79:26:2C:8C:34:28:19:28:36:30:BC:68:EE:06:6B:C7
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/e6nmJnkmLIw0KBkoNjC8aO4Ga8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
89:2e:dc:2a:16:69:29:c8:fd:c0:3b:bd:4a:f1:f7:f4:95:d5:
99:1e:f1:86:6f:d6:c0:68:63:59:38:36:66:4c:4b:2a:08:19:
ce:08:d9:c7:53:36:0f:a1:e2:7e:b5:7b:43:33:1e:4e:c7:b5:
b4:e6:31:64:8e:00:f9:dd:6b:31:4a:88:45:53:fb:5f:bb:90:
d6:29:d1:06:f0:6f:98:82:c0:d1:8e:e5:45:6c:eb:b2:5b:5c:
28:3e:d6:1d:b4:52:e1:cf:5e:dc:53:cf:2b:fd:d8:17:16:9a:
06:96:21:2d:57:4e:7c:9c:db:02:a4:94:45:35:7d:d5:a2:63:
ca:d8:e0:c1:56:e8:28:d1:b1:a2:91:c6:7f:26:43:ce:dd:ee:
50:c2:56:30:23:be:ca:b8:77:c6:61:e9:6e:5e:db:54:0c:16:
96:7f:b0:41:84:b0:15:7b:28:90:a4:70:07:9e:cc:f3:26:52:
68:0f:85:f9:d8:87:9d:bb:1e:d3:9d:4b:f3:10:23:b7:20:d5:
e5:c2:ed:d8:10:8a:47:cf:44:36:c0:e1:dc:8f:80:90:14:76:
fb:01:77:28:60:e2:5a:22:1c:c5:4d:7b:ae:b8:c6:7e:8e:51:
ce:16:09:9b:82:31:0c:ac:fd:c1:2f:90:1b:1a:91:12:c4:ac:
94:a7:a2:c2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYskpBmD5sMDhD2NNnnuhaVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMDEyMTYwNjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE5ZTYyNjc5MjYyYzhjMzQyODE5MjgzNjMwYmM2OGVlMDY2YmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQq0IZB95uramwn7cVT7gC1jP/Hg
+ISG6H8khyemHe+O+fNrjiK7TIWSXhaKTMkKWoZdNZd720liyOBXtYxkbDPkmUqb
SQP56VWOPhfxvZviHUXUJ0ZKKwXWjchkiMIcBvpweJZ/qgUZfZL98sOhwhlsLas2
g/T+QtwnIE0L4wMDTn9t820cq8adYiBGaKgdMSKtTRVBg1qisyNlnv9rE5uptGKo
VIGtBdTdzJXBZG8grU2nhi7Mrahx9PkWtFCDOctcxQ1Oc71fk+wx5LGkWEB4IdGz
/lFBAWqT0+27JOtL8F7ty4IzQN/YYZcsBV06XeT6tNnzfeI2nBkLlEIGfQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHup5iZ5JiyMNCgZKDYwvGjuBmvHMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvZTZubUpua21MSXcwS0Jrb05qQzhhTzRHYThjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+QNAwQA
W+QPAwQCXpogAwQAXpomMA0GCSqGSIb3DQEBCwUAA4IBAQCJLtwqFmkpyP3AO71K
8ff0ldWZHvGGb9bAaGNZODZmTEsqCBnOCNnHUzYPoeJ+tXtDMx5Ox7W05jFkjgD5
3WsxSohFU/tfu5DWKdEG8G+YgsDRjuVFbOuyW1woPtYdtFLhz17cU88r/dgXFpoG
liEtV058nNsCpJRFNX3VomPK2ODBVugo0bGikcZ/JkPO3e5QwlYwI77KuHfGYelu
XttUDBaWf7BBhLAVeyiQpHAHnszzJlJoD4X52Iedux7TnUvzECO3INXlwu3YEIpH
z0Q2wOHcj4CQFHb7AXcoYOJaIhzFTXuuuMZ+jlHOFgmbgjEMrP3BL5AbGpESxKyU
p6LC
-----END CERTIFICATE-----
Generated at Fri Oct 13 12:57:58 2023 by rpki-client on console-ams.rpki-client.org