Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/mvS0ydKNFZsqKCqkLiqdLXqYuxs.roa
File: mvS0ydKNFZsqKCqkLiqdLXqYuxs.roa (raw, json)
Hash identifier: IbeL3bX4mTECSeUKJzgveLBvWFIbqwXPPSSOLqtXHCA=
Subject key identifier: 9A:F4:B4:C9:D2:8D:15:9B:2A:28:2A:A4:2E:2A:9D:2D:7A:98:BB:1B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B9589C66060EBEC058F9F94DD8DB0A12B
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/mvS0ydKNFZsqKCqkLiqdLXqYuxs.roa
Signing time: Fri 03 Nov 2023 14:15:16 +0000
ROA not before: Fri 03 Nov 2023 14:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:89:c6:60:60:eb:ec:05:8f:9f:94:dd:8d:b0:a1:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 3 14:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9af4b4c9d28d159b2a282aa42e2a9d2d7a98bb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:00:4d:95:11:60:d1:40:10:11:88:2c:48:58:
36:93:8b:50:5d:11:c7:a2:33:a3:b8:11:29:86:25:
53:57:b9:a6:57:4a:2c:4e:2b:6e:b9:5d:96:32:2b:
47:80:f5:4d:f1:82:0c:b4:20:1e:71:9e:11:ef:f5:
ef:1d:3a:e0:5f:65:8a:8f:b9:28:22:90:45:f7:ab:
1e:8e:4c:a7:82:d3:4c:92:6a:a0:76:91:0f:ca:25:
fb:86:d0:d9:c3:21:c7:c4:a9:01:da:14:bc:45:91:
fb:6c:42:8a:1b:a4:d9:5a:5f:ff:00:2c:b3:2a:7a:
29:63:03:d1:c5:7f:e1:45:89:8b:55:1d:b8:c3:e2:
8b:8f:ba:9f:98:9f:82:14:d6:aa:7d:6d:85:78:3c:
c9:72:f3:22:8c:fa:e2:68:89:32:9f:29:d2:01:d6:
e5:56:67:64:81:d0:4d:7d:5f:3a:17:8c:22:05:04:
76:27:be:aa:83:23:a1:82:2b:6a:e4:7d:fc:68:cb:
21:1e:79:e9:29:ba:08:1d:7a:29:36:70:c5:8c:62:
5d:bc:b4:32:85:3f:c1:39:3e:70:47:93:fb:79:7a:
81:35:82:e9:57:06:2c:dc:bd:38:69:f2:88:33:a0:
8e:f2:1a:2e:98:5f:52:4c:39:21:71:b7:49:96:bb:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F4:B4:C9:D2:8D:15:9B:2A:28:2A:A4:2E:2A:9D:2D:7A:98:BB:1B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/mvS0ydKNFZsqKCqkLiqdLXqYuxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3e:8f:cb:78:d1:4c:bf:7f:48:be:2a:7d:6a:b9:a4:2c:2e:
cd:6d:8c:40:aa:20:0c:77:bd:e0:45:79:a1:e0:a3:0c:e5:a6:
35:0c:d0:ba:78:2a:0d:37:3f:26:24:05:5e:8c:41:da:cb:20:
a4:12:e0:15:d4:3a:0f:f5:e2:45:60:57:a5:79:f3:43:7a:17:
60:cb:d0:b0:86:e6:83:a5:eb:ae:8d:3e:72:de:8d:24:5a:4d:
c7:d2:5e:c0:fd:03:12:3f:f9:d5:06:7c:10:1e:7f:87:68:93:
c7:f9:96:11:2c:ae:61:cd:e5:41:f5:b0:1f:37:7f:d7:8a:17:
1f:0e:ce:65:19:26:85:b6:ce:79:25:84:f1:ae:6c:13:90:39:
e0:75:56:90:14:c1:9b:4c:ac:ef:49:f1:c7:1d:bf:e4:7a:c1:
84:a7:b3:70:02:1f:61:f3:56:9c:da:18:bb:ce:d8:a5:0e:01:
b8:33:8f:dc:e2:3a:53:35:41:98:c8:0e:4b:99:c7:15:dc:21:
93:12:13:04:ce:e8:b6:b4:24:08:15:e0:b8:02:b2:66:b8:58:
7f:d5:07:2c:25:45:b0:16:1d:35:8c:c6:f7:9a:22:44:c8:c9:
d8:30:0e:9e:9f:e9:9b:5c:8f:de:c4:e7:62:2a:99:e8:f8:a8:
ef:94:d5:f8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYuVicZgYOvsBY+flN2NsKErMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjMxMTAzMTQxNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWY0YjRjOWQyOGQxNTliMmEyODJhYTQyZTJhOWQyZDdhOThiYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgABNlRFg0UAQEYgsSFg2k4tQXRHH
ojOjuBEphiVTV7mmV0osTituuV2WMitHgPVN8YIMtCAecZ4R7/XvHTrgX2WKj7ko
IpBF96sejkyngtNMkmqgdpEPyiX7htDZwyHHxKkB2hS8RZH7bEKKG6TZWl//ACyz
KnopYwPRxX/hRYmLVR24w+KLj7qfmJ+CFNaqfW2FeDzJcvMijPriaIkynynSAdbl
VmdkgdBNfV86F4wiBQR2J76qgyOhgitq5H38aMshHnnpKboIHXopNnDFjGJdvLQy
hT/BOT5wR5P7eXqBNYLpVwYs3L04afKIM6CO8houmF9STDkhcbdJlrtgRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJr0tMnSjRWbKigqpC4qnS16mLsbMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvbXZTMHlkS05GWnNxS0Nxa0xpcWRMWHFZdXhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW+QNAwQA
W+QPAwQCXpogAwQAXpomMA0GCSqGSIb3DQEBCwUAA4IBAQCdPo/LeNFMv39Ivip9
armkLC7NbYxAqiAMd73gRXmh4KMM5aY1DNC6eCoNNz8mJAVejEHayyCkEuAV1DoP
9eJFYFelefNDehdgy9CwhuaDpeuujT5y3o0kWk3H0l7A/QMSP/nVBnwQHn+HaJPH
+ZYRLK5hzeVB9bAfN3/XihcfDs5lGSaFts55JYTxrmwTkDngdVaQFMGbTKzvSfHH
Hb/kesGEp7NwAh9h81ac2hi7ztilDgG4M4/c4jpTNUGYyA5LmccV3CGTEhMEzui2
tCQIFeC4ArJmuFh/1QcsJUWwFh01jMb3miJEyMnYMA6en+mbXI/exOdiKpno+Kjv
lNX4
-----END CERTIFICATE-----
Generated at Sat Nov 11 12:16:16 2023 by rpki-client on console-fra.rpki-client.org