Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/i5SMi1IaXVxax6WmEb7sAGIzmw4.roa
File: i5SMi1IaXVxax6WmEb7sAGIzmw4.roa (raw, json)
Hash identifier: MUlvmKeKbAJbGiIXgEXts0+XBV862BYx79QQe1m+7lc=
Subject key identifier: 8B:94:8C:8B:52:1A:5D:5C:5A:C7:A5:A6:11:BE:EC:00:62:33:9B:0E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018E6B369DEF17E8218E2E77A6EA778272EE
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/i5SMi1IaXVxax6WmEb7sAGIzmw4.roa
Signing time: Sat 23 Mar 2024 12:08:45 +0000
ROA not before: Sat 23 Mar 2024 12:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 14:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:6b:36:9d:ef:17:e8:21:8e:2e:77:a6:ea:77:82:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 23 12:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b948c8b521a5d5c5ac7a5a611beec0062339b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:69:c7:c9:94:d8:75:da:10:76:32:22:14:84:
2f:1f:15:56:2a:37:2e:bc:de:30:2e:9e:f2:f2:8b:
81:f8:a4:ba:bb:a0:99:47:f3:d9:99:75:0e:81:a1:
0b:3d:c0:92:e1:a4:d3:ad:f1:63:d9:b9:71:53:da:
7d:be:f8:8d:69:34:a6:3d:79:46:3b:50:3a:b7:72:
72:83:7e:38:fd:55:ae:6d:96:45:b9:6a:eb:66:42:
83:df:8c:cb:02:b8:ca:31:bf:04:3a:79:50:6a:19:
e7:aa:60:24:da:9f:d0:d6:11:1b:02:a2:53:4e:23:
d3:92:b0:3f:8c:d7:16:81:ad:dd:2f:02:3f:47:5e:
fe:d4:65:e4:48:d5:61:3a:b0:a9:54:36:d7:24:01:
df:ef:93:34:ef:6a:e0:ec:85:8e:e7:e7:d9:13:22:
59:0a:a3:ab:83:b8:26:ad:0c:44:bc:3f:d7:ed:20:
8b:16:79:eb:f3:f5:43:d0:30:da:75:ec:9b:d7:40:
fe:df:b0:4b:58:5f:06:f3:04:da:12:ed:7f:0c:5f:
1b:ac:e9:ca:d8:69:37:f1:3c:68:e8:3c:de:6c:b4:
bb:a6:a0:65:a5:5b:ed:d4:20:b6:c7:0b:90:0e:b5:
cd:f1:3b:2d:1e:34:44:6d:13:1b:4c:f5:3b:7e:75:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:94:8C:8B:52:1A:5D:5C:5A:C7:A5:A6:11:BE:EC:00:62:33:9B:0E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/i5SMi1IaXVxax6WmEb7sAGIzmw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1c:c0:e1:0a:b1:4e:ea:6b:23:8f:a7:4c:9a:9e:d6:75:76:
c1:60:07:f0:8f:01:22:cc:91:65:69:17:7e:41:8c:e7:30:45:
67:db:79:92:af:e8:30:62:b2:68:26:8b:ad:e0:98:3f:48:bd:
18:47:cc:af:9c:6b:b6:af:49:04:07:c0:76:16:42:36:88:be:
ad:fb:24:40:82:7b:ff:2a:f2:0b:c8:1c:c9:80:dd:a2:24:7f:
06:45:08:ed:1a:99:55:f3:0f:98:78:fe:eb:8a:fd:95:61:0d:
80:7e:46:dc:17:14:55:50:cc:e6:22:4d:5f:ff:e2:95:80:f9:
4d:d7:66:01:f3:54:9f:26:f2:1b:73:43:e9:a5:1f:af:93:af:
4d:ec:b1:f0:07:72:ef:ff:89:42:8f:38:84:c2:2c:df:e5:54:
0b:b8:ca:c9:6e:8a:58:3a:28:df:80:1b:61:8c:dc:45:8c:ad:
b6:1b:4f:c4:3d:3b:49:bb:50:83:2b:2f:1c:e0:98:30:5d:2b:
13:8b:3a:a5:14:03:4e:14:7e:0e:af:1f:e9:41:41:c3:c4:47:
b4:c4:91:99:ae:b8:9e:49:cb:da:3a:f9:3c:cd:b2:fb:73:76:
a0:08:b9:40:59:e9:f9:62:76:f9:b7:09:40:b8:32:29:77:32:
5b:9e:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 17:48:16 2024 by rpki-client on console-ams.rpki-client.org