Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lPzQvtOZMDuq3XkVsg1r6VgDD4M.roa
File: lPzQvtOZMDuq3XkVsg1r6VgDD4M.roa (raw, json)
Hash identifier: V8znjsge/1RwM+wx0BzcaB7w7LyICKK2nrKx+ih3xpE=
Subject key identifier: 94:FC:D0:BE:D3:99:30:3B:AA:DD:79:15:B2:0D:6B:E9:58:03:0F:83
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01856FF021F4FD207062BC991775689DED13
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lPzQvtOZMDuq3XkVsg1r6VgDD4M.roa
Signing time: Mon 02 Jan 2023 00:44:46 +0000
ROA not before: Mon 02 Jan 2023 00:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.228.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:21:f4:fd:20:70:62:bc:99:17:75:68:9d:ed:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 00:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94fcd0bed399303baadd7915b20d6be958030f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:02:09:49:fc:11:2b:48:10:40:36:27:d9:02:
29:eb:46:56:98:87:6e:26:41:b8:b0:35:12:e3:e0:
97:49:51:a5:9c:dd:60:b6:74:38:8f:5a:6f:78:d3:
12:24:55:8b:1e:71:f4:e7:de:2f:84:a0:4e:39:b1:
c8:4d:eb:f2:ef:40:9b:45:20:79:e6:38:aa:9a:26:
fd:fd:e9:ce:4c:66:e9:a6:70:84:c9:fa:89:1f:fe:
4b:86:95:36:26:2e:d3:87:ba:67:ae:82:c9:ea:73:
64:0a:f9:63:96:7c:64:59:99:0c:52:4a:96:03:04:
09:20:f6:d0:c3:e6:94:84:f6:52:af:27:9f:f3:32:
8d:37:f5:03:09:b6:f1:2c:23:1d:3f:6e:20:b0:b5:
e3:a6:29:a5:6d:42:73:58:54:f5:40:72:3b:15:7e:
d1:a0:f2:9d:fa:5e:15:6e:72:a3:71:d9:7f:33:6c:
a8:17:55:05:1f:3e:09:08:fe:63:70:8f:10:a4:78:
16:9e:4e:c3:b3:e4:0e:4b:c4:16:ae:bb:19:67:1b:
15:e3:51:9d:29:cf:73:92:33:a2:32:0c:e3:bc:a7:
08:08:f0:89:50:9a:39:76:34:aa:35:f7:ff:d6:1b:
db:55:ff:34:08:e6:bc:9e:3c:85:81:73:3c:ec:60:
00:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FC:D0:BE:D3:99:30:3B:AA:DD:79:15:B2:0D:6B:E9:58:03:0F:83
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/lPzQvtOZMDuq3XkVsg1r6VgDD4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:71:1c:9c:ea:4d:51:ad:53:5c:50:28:9d:6e:f5:d7:6f:6c:
00:ac:12:17:ad:e0:17:1b:ea:76:0a:f1:f7:e8:db:67:e5:68:
66:d0:a4:80:2e:c5:bd:59:a9:bd:a4:20:18:dd:06:b6:c6:d0:
5a:aa:ce:72:63:68:91:6f:88:48:c5:da:83:3d:8c:e7:ba:00:
72:49:e9:f7:40:ed:f3:5a:98:c3:75:9a:37:dd:92:a2:b6:e0:
1c:2f:30:2e:a7:d5:f1:63:34:89:f1:c2:21:a4:9b:52:7f:1c:
21:c9:38:f5:d5:cf:f4:3f:c5:60:e6:07:e5:0a:de:d3:84:53:
74:f5:03:5f:52:8e:41:f9:35:a9:7f:81:6c:78:42:ed:e4:d4:
e5:f2:72:8f:d5:25:dd:0c:41:44:4e:32:42:35:5e:77:b8:1f:
77:e4:7f:65:db:c8:45:e5:4f:bf:e5:b6:95:3b:fa:c1:1b:7b:
5b:aa:84:a6:97:f8:97:ac:08:01:a0:59:7d:9a:09:87:af:b7:
78:fa:6d:f8:ab:4e:11:6d:a8:bd:9b:eb:c1:b9:d9:cf:a6:eb:
52:dd:1c:d7:2c:68:dd:f5:a4:6f:da:3b:c6:82:96:e6:8a:f4:
f5:d7:f5:a4:f3:70:42:04:89:41:24:96:d1:41:54:7a:3f:ff:
7a:7c:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-fra.rpki-client.org