Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/k0Wa5p864bCLeodbEVqVZrBXjIQ.roa
File: k0Wa5p864bCLeodbEVqVZrBXjIQ.roa (raw, json)
Hash identifier: ZVnl+DAqpEXbBZZiNtA+2t5qOSwmIEllGZ+y1sRwzuM=
Subject key identifier: 93:45:9A:E6:9F:3A:E1:B0:8B:7A:87:5B:11:5A:95:66:B0:57:8C:84
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01932AF4DA5AFE1A9250855D9CD9D5E7990A
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/k0Wa5p864bCLeodbEVqVZrBXjIQ.roa
Signing time: Thu 14 Nov 2024 13:55:09 +0000
ROA not before: Thu 14 Nov 2024 13:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.32.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Dec 2024 14:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:f4:da:5a:fe:1a:92:50:85:5d:9c:d9:d5:e7:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 14 13:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93459ae69f3ae1b08b7a875b115a9566b0578c84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:28:8a:5b:b2:ac:0b:e7:b8:f1:fe:d7:45:
44:cf:59:e7:7a:f4:7e:86:fe:3b:00:ee:08:18:ac:
e0:78:3b:da:ca:92:40:2f:5d:a2:27:a4:89:cb:bb:
dc:32:cd:4f:62:b6:ad:36:de:52:42:e8:22:7c:ef:
a1:0c:f3:b0:f7:c3:d7:ea:0d:c2:43:1f:2f:60:d3:
f3:5f:01:68:6c:9e:99:79:d6:c6:cd:94:9c:f8:8b:
a9:37:90:06:aa:13:3e:5d:17:6e:fe:3b:83:63:7b:
83:93:26:3e:76:83:e7:c6:05:4f:53:39:c4:ba:cd:
db:68:72:f3:c4:e5:29:56:d6:82:b1:8a:06:0e:9b:
a3:d9:5f:76:cf:7d:31:6f:09:99:07:83:ac:84:6e:
d7:2c:06:99:fa:fa:88:96:5a:75:ec:77:ae:f8:b1:
cc:a1:d3:cf:b0:5f:85:c8:33:92:9e:33:ab:c2:9e:
57:f4:7d:dd:52:b2:7a:b5:f6:b5:ca:51:ac:d7:eb:
4f:52:d3:a7:63:f3:19:0f:8f:52:a7:84:c2:65:bf:
19:8d:c3:a8:25:fd:48:c5:cf:ba:5d:f2:1c:74:bf:
96:ef:b3:d3:1c:4e:60:fc:6b:7d:59:5a:46:46:e9:
f1:c9:63:a9:dc:0f:84:f1:34:24:ef:2a:3c:a4:39:
cb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:45:9A:E6:9F:3A:E1:B0:8B:7A:87:5B:11:5A:95:66:B0:57:8C:84
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/k0Wa5p864bCLeodbEVqVZrBXjIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0/24
94.154.35.0/24
94.154.37.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
6d:88:6e:a2:16:b0:6b:ea:ad:38:fc:b7:dd:08:94:4c:d6:7f:
ef:c8:14:58:65:6d:52:90:64:3d:2e:2b:4e:ca:13:a2:db:28:
39:68:08:af:9d:bc:ea:4f:ab:9a:a6:07:e3:38:2c:59:65:0e:
89:49:b4:58:a7:b3:57:6d:68:5e:46:59:be:07:60:bb:6a:7b:
e4:3f:04:8e:46:c7:8b:85:2b:7b:6a:e9:59:8f:8b:48:f8:8e:
37:f9:fd:74:8c:3e:f0:e7:fe:f7:24:17:28:ce:d9:8f:25:e8:
06:4e:11:40:54:c6:26:c6:75:fc:a7:1e:2d:dc:bc:97:b2:d1:
e8:94:a8:26:fc:98:f4:c3:89:f5:0c:c6:7d:b8:4a:b2:b2:8b:
88:ed:0e:33:ee:a4:eb:61:78:81:ca:33:af:bb:67:cc:94:72:
7d:cb:fe:36:e5:c7:46:a3:e2:91:34:49:7b:46:44:98:11:94:
d9:45:4c:63:f3:67:39:ec:46:b9:26:ad:3e:66:71:d6:b8:53:
b3:8e:96:dc:f4:b8:25:bb:e0:e8:b6:c6:fa:39:86:17:b1:2b:
b6:7a:73:ff:93:63:b5:da:55:fd:23:24:b2:88:e2:bb:0f:a4:
79:51:c6:2f:37:12:c0:62:6b:e9:a8:0f:50:d2:28:34:2a:e7:
81:0d:5f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:21 2025 by rpki-client