Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/kJz7UYa3JKVNQwB7VP2CmB2d9hI.roa
File: kJz7UYa3JKVNQwB7VP2CmB2d9hI.roa (raw, json)
Hash identifier: fHw9TuxY/N1WXQ/ThXqWyWrFOm13BnB2stv2Qf39CYM=
Subject key identifier: 90:9C:FB:51:86:B7:24:A5:4D:43:00:7B:54:FD:82:98:1D:9D:F6:12
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190DF84C7D13B1FB88DF65BCA9DDE75B056
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/kJz7UYa3JKVNQwB7VP2CmB2d9hI.roa
Signing time: Tue 23 Jul 2024 12:15:39 +0000
ROA not before: Tue 23 Jul 2024 12:15:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 15:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:84:c7:d1:3b:1f:b8:8d:f6:5b:ca:9d:de:75:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 23 12:15:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=909cfb5186b724a54d43007b54fd82981d9df612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:f4:70:90:80:11:38:8f:c7:9e:cf:7b:87:
ff:03:01:63:41:59:7f:ea:32:9f:3e:28:31:42:c9:
cf:57:e5:89:40:ec:30:83:ae:d7:10:45:bc:c6:9d:
45:df:5f:db:a7:56:3b:97:49:24:99:83:50:1b:c9:
05:88:a4:af:fd:c9:7a:28:75:6a:64:20:73:60:2b:
2c:4d:68:a1:2a:45:ec:20:4d:db:9a:e8:65:1d:6f:
d5:13:22:d9:26:2a:9e:95:e1:88:69:12:9a:b2:d8:
3a:f0:a5:74:56:e0:6b:7a:1a:39:b9:a0:fb:cf:fd:
27:fd:77:d1:2d:dd:4e:3f:8e:ce:5c:a4:2f:c1:1d:
54:3d:b2:03:03:dc:3c:85:9f:bf:cd:7f:15:6e:37:
c6:0c:b5:c1:35:d7:9a:f6:54:9a:0d:8d:4a:7c:df:
a4:68:69:ab:97:9e:16:f1:50:5d:fb:08:cd:50:b0:
cc:5f:50:96:c8:9f:c8:f4:3c:90:b4:af:06:1c:21:
38:d2:8e:27:c8:1e:cb:a4:80:a2:ba:f1:1b:8b:c9:
6e:3d:e9:c1:90:c6:47:48:63:ba:01:67:08:16:8d:
59:03:43:5a:73:21:b0:b1:d5:46:7b:f0:3f:61:ba:
f9:de:20:96:d8:3f:e6:fb:46:b4:73:8f:ff:f6:d1:
e9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9C:FB:51:86:B7:24:A5:4D:43:00:7B:54:FD:82:98:1D:9D:F6:12
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/kJz7UYa3JKVNQwB7VP2CmB2d9hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9e:27:d3:91:96:ed:7a:d4:6c:3c:44:6a:05:53:d7:e8:f3:
10:93:21:a8:32:2e:45:f6:09:b7:05:66:2f:26:5d:49:6d:95:
c5:b4:7c:00:5a:d6:0c:e7:ee:e2:69:ca:45:ba:b4:f3:23:30:
84:29:d9:6d:95:14:2d:3f:ca:8a:bb:1c:4c:83:75:2c:3f:ca:
19:c1:b3:92:06:c5:0c:0f:2f:75:4d:8e:33:8f:60:55:53:b4:
ca:d5:a3:73:a6:1c:d4:bf:d0:23:27:30:f6:c8:bd:63:c9:94:
76:0c:5f:14:2e:6d:27:8e:48:d9:7e:cd:4e:b2:01:cb:f2:0e:
89:fe:c9:19:81:bc:7b:9b:0d:b4:c9:a4:af:8a:1f:3d:86:5c:
89:a3:77:77:b2:64:26:f1:f7:1a:34:c4:3e:43:a8:5a:a7:40:
73:50:06:2e:1d:c3:01:a8:2e:18:a6:12:95:d1:63:6d:9e:44:
6e:87:f2:35:23:21:1a:42:ac:37:07:d3:fd:58:80:ae:45:43:
92:ff:c4:7b:5e:f5:6d:4c:58:52:c0:ef:22:64:a8:3b:d3:73:
bc:d2:40:4d:67:3a:5e:1b:e6:20:79:55:b4:99:dc:22:2f:87:
76:03:81:91:8e:2b:0a:9c:46:67:0e:03:ea:33:45:8a:e1:97:
75:7b:fc:f1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDfhMfROx+4jfZbyp3edbBWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNzIzMTIxNTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDljZmI1MTg2YjcyNGE1NGQ0MzAwN2I1NGZkODI5ODFkOWRmNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRD0cJCAETiPx57Pe4f/AwFjQVl/
6jKfPigxQsnPV+WJQOwwg67XEEW8xp1F31/bp1Y7l0kkmYNQG8kFiKSv/cl6KHVq
ZCBzYCssTWihKkXsIE3bmuhlHW/VEyLZJiqeleGIaRKastg68KV0VuBreho5uaD7
z/0n/XfRLd1OP47OXKQvwR1UPbIDA9w8hZ+/zX8VbjfGDLXBNdea9lSaDY1KfN+k
aGmrl54W8VBd+wjNULDMX1CWyJ/I9DyQtK8GHCE40o4nyB7LpICiuvEbi8luPenB
kMZHSGO6AWcIFo1ZA0NacyGwsdVGe/A/Ybr53iCW2D/m+0a0c4//9tHpVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJCc+1GGtySlTUMAe1T9gpgdnfYSMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEva0p6N1VZYTNKS1ZOUXdCN1ZQMkNtQjJkOWhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+QMAwQA
W+QOMA0GCSqGSIb3DQEBCwUAA4IBAQAhnifTkZbtetRsPERqBVPX6PMQkyGoMi5F
9gm3BWYvJl1JbZXFtHwAWtYM5+7iacpFurTzIzCEKdltlRQtP8qKuxxMg3UsP8oZ
wbOSBsUMDy91TY4zj2BVU7TK1aNzphzUv9AjJzD2yL1jyZR2DF8ULm0njkjZfs1O
sgHL8g6J/skZgbx7mw20yaSvih89hlyJo3d3smQm8fcaNMQ+Q6hap0BzUAYuHcMB
qC4YphKV0WNtnkRuh/I1IyEaQqw3B9P9WICuRUOS/8R7XvVtTFhSwO8iZKg703O8
0kBNZzpeG+YgeVW0mdwiL4d2A4GRjisKnEZnDgPqM0WK4Zd1e/zx
-----END CERTIFICATE-----
Generated at Thu Aug 15 19:31:57 2024 by rpki-client on console-ams.rpki-client.org