Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/l652AP7LBEpGAUi8wvLQX4Bq9fw.roa
File: l652AP7LBEpGAUi8wvLQX4Bq9fw.roa (raw, json)
Hash identifier: 2M+bYcEMa4EY30Dlts8xGp47LqLb7S43QmupgRJ5aaU=
Subject key identifier: 97:AE:76:00:FE:CB:04:4A:46:01:48:BC:C2:F2:D0:5F:80:6A:F5:FC
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A8A855BFAC766BAE5A892D1DBB1406640
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/l652AP7LBEpGAUi8wvLQX4Bq9fw.roa
Signing time: Tue 12 Sep 2023 17:51:50 +0000
ROA not before: Tue 12 Sep 2023 17:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Sep 2023 16:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:85:5b:fa:c7:66:ba:e5:a8:92:d1:db:b1:40:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 12 17:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97ae7600fecb044a460148bcc2f2d05f806af5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:fc:95:62:5e:93:1b:d8:f0:aa:ee:a9:5d:
d7:dd:cf:b7:7b:86:48:fe:3b:ef:32:f0:81:9f:5f:
73:6e:ea:73:05:d1:95:be:7f:71:09:17:66:01:79:
36:8b:7d:98:bf:f8:a0:96:86:dd:fd:5d:e7:2a:34:
ea:9d:36:ce:b1:59:4a:8f:57:14:f8:0a:a6:7c:ac:
8b:51:6c:2a:7f:7d:56:ca:03:dd:1e:06:b3:43:cd:
86:85:65:b5:35:6d:14:25:08:bb:fd:18:8b:00:8f:
78:ba:49:3b:70:43:ee:f7:65:67:c6:a9:a7:b1:77:
5a:4d:cc:fb:c0:ec:6b:ca:a2:28:a6:a2:b0:a0:2a:
55:92:83:9d:97:e4:b0:b0:06:86:a4:97:39:b2:4d:
69:e5:d6:ee:6c:3a:8d:da:cb:84:8d:83:f8:05:7d:
59:d8:14:31:ee:7f:79:d0:c7:ec:96:ac:ba:10:d4:
3d:a9:e6:2a:1a:c9:10:03:24:0f:d9:77:77:d1:cc:
5d:ac:5e:2e:be:2b:8a:2a:5f:76:90:5f:76:80:d3:
c1:ba:69:9a:88:8f:4a:c6:99:75:ca:5b:5f:d7:2f:
a5:a2:42:bb:b9:b9:d7:8f:bd:b3:05:e6:7d:c6:a9:
f2:c2:99:f4:6a:f0:dc:f3:6e:f8:44:f9:4b:f6:76:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AE:76:00:FE:CB:04:4A:46:01:48:BC:C2:F2:D0:5F:80:6A:F5:FC
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/l652AP7LBEpGAUi8wvLQX4Bq9fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0-91.228.15.255
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e5:c7:03:3e:4f:b2:5c:1e:3a:2c:4c:e3:78:4b:7d:97:8b:
ac:81:da:3b:30:7e:43:61:6e:f7:85:56:9e:28:86:9f:34:51:
95:77:0b:68:c7:e6:0f:9b:ef:b5:6c:98:c8:ec:af:71:34:89:
91:ed:8a:65:e0:d5:50:70:00:cf:0c:fe:55:f0:c7:21:8d:9e:
97:a2:7c:9d:e5:5a:3e:80:c4:2c:11:d7:82:05:8a:b0:cd:96:
21:e7:0c:6c:cf:29:90:08:25:62:bc:3c:4a:ca:98:0c:b9:d1:
25:6b:b7:c7:d4:87:f9:6d:92:6f:79:76:77:1b:c5:76:ff:42:
45:ac:6a:85:a7:f6:5b:2f:8f:d2:f5:51:7f:e9:cc:df:2b:7e:
3c:3b:e5:aa:8d:2e:bb:47:28:60:21:5e:1a:cb:2f:03:c9:c3:
fc:b7:23:62:5e:a9:4a:a2:5c:bf:b9:65:a7:86:2d:bb:48:d2:
3e:c5:cd:02:9c:e3:43:07:7b:6b:ce:65:cf:d8:ac:37:86:8a:
cb:f3:23:0a:b5:e0:f5:0b:e5:4c:d7:7c:33:82:53:de:1b:98:
0c:c8:cc:14:c7:df:24:50:83:a5:e3:4e:10:1e:1c:fd:96:91:
8e:40:c9:7e:c0:9a:26:b3:fd:50:42:a4:ae:a8:d5:c1:73:26:
ab:70:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:25 2024 by rpki-client on console-fra.rpki-client.org