Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ennYDNpiaqJ4Q0mX7f1jrm1wG5I.roa
File: ennYDNpiaqJ4Q0mX7f1jrm1wG5I.roa (raw, json)
Hash identifier: rNQ3dxLQeGmeoVV6hMCXDDKgm4h3J1rqFlNStqgW6vM=
Subject key identifier: 7A:79:D8:0C:DA:62:6A:A2:78:43:49:97:ED:FD:63:AE:6D:70:1B:92
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0185776CD2AF20343D6B8DD4E5A9FD58E662
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ennYDNpiaqJ4Q0mX7f1jrm1wG5I.roa
Signing time: Tue 03 Jan 2023 11:38:18 +0000
ROA not before: Tue 03 Jan 2023 11:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:6c:d2:af:20:34:3d:6b:8d:d4:e5:a9:fd:58:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 3 11:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a79d80cda626aa278434997edfd63ae6d701b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:61:69:80:1e:49:fb:7d:d9:34:71:bd:9a:6c:
a5:21:b8:01:e9:78:06:dd:0e:15:fa:32:93:75:29:
3a:14:0d:0a:4f:53:33:3f:d3:93:40:1c:b5:72:b2:
9d:96:33:a1:7c:2a:1a:5d:52:bd:03:88:d3:bf:22:
d1:84:a1:cb:c3:cb:35:28:ab:1a:50:ab:43:fa:af:
72:3e:a8:ae:0b:73:95:45:88:65:f2:02:6e:53:f4:
c3:ef:09:9c:e2:19:ea:08:1e:f6:5c:37:89:5e:46:
e0:9c:70:71:0b:03:4e:d1:9f:36:7b:74:7d:ec:7b:
39:a6:25:52:de:f3:ff:3f:6b:d8:5d:04:88:42:2c:
8e:9c:76:0b:cb:9a:aa:66:04:63:ad:11:10:18:19:
51:e6:f5:e3:60:ac:da:19:f1:eb:9d:3f:07:ee:03:
71:2a:33:8b:0a:07:06:ef:81:2e:07:cc:f2:76:42:
47:07:c9:ca:30:b6:40:71:88:1d:a5:68:2b:1e:11:
6d:68:c2:91:cc:bd:e2:9f:65:a1:69:05:bb:39:f6:
65:5f:4a:17:d9:3b:c9:c0:b8:b8:82:46:08:31:20:
48:cc:9d:52:e4:6d:ea:5b:07:2f:99:23:ec:d7:89:
dd:76:0d:58:82:18:a1:2f:98:8d:1f:1c:90:17:b1:
17:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:79:D8:0C:DA:62:6A:A2:78:43:49:97:ED:FD:63:AE:6D:70:1B:92
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/ennYDNpiaqJ4Q0mX7f1jrm1wG5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
94.154.32.0/22
Signature Algorithm: sha256WithRSAEncryption
48:b7:35:12:55:3f:8b:1a:b8:ed:5d:a4:58:ec:8d:db:6a:d3:
52:22:59:15:7e:f9:e2:f9:23:13:37:62:b4:1f:0c:90:45:17:
92:d0:d6:ce:53:de:05:59:2f:b5:16:db:e5:24:4d:72:2a:cc:
24:79:66:16:e7:b9:ea:c3:f6:88:37:bd:10:ed:dc:e5:75:15:
46:e5:ba:b4:00:1a:bc:69:48:9f:3d:ff:09:9f:c3:2e:43:ba:
7b:05:0b:ec:da:2f:84:7e:f0:bf:b4:ee:5f:9d:d0:0e:d5:52:
19:0b:7a:af:50:6f:12:a0:af:ac:61:a3:0c:30:04:f6:5f:35:
1e:fc:7b:e4:a7:a7:76:81:ec:74:dd:d1:96:35:07:31:f0:10:
37:f1:f7:c4:66:02:f4:22:f1:77:83:e9:ad:3e:e1:a6:56:fa:
73:c7:2f:9a:50:45:a7:81:7a:0a:cb:8e:de:26:77:72:0f:c6:
b9:8d:44:66:a7:55:e8:c2:31:23:65:54:94:f7:5d:0f:a2:03:
6e:75:6d:1b:5e:10:a9:18:ad:b4:53:87:d3:d8:ca:38:3e:c0:
09:66:bd:2c:4a:bb:22:d8:5b:a0:7c:36:a2:55:6c:a3:13:1e:
2b:45:18:96:d0:8e:68:d5:5f:81:e1:ba:82:12:85:bd:76:db:
88:2b:fa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org