Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/n4c2lx9P0nFNewEdFm14FzaZZR4.roa
File: n4c2lx9P0nFNewEdFm14FzaZZR4.roa (raw, json)
Hash identifier: rFcWjF4UaTKHqihBmfV2khFNUhAXMtEeTeshu/vuxmk=
Subject key identifier: 9F:87:36:97:1F:4F:D2:71:4D:7B:01:1D:16:6D:78:17:36:99:65:1E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018A6557806EA79CF0A2D2842AC7CF40B576
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/n4c2lx9P0nFNewEdFm14FzaZZR4.roa
Signing time: Tue 05 Sep 2023 12:35:47 +0000
ROA not before: Tue 05 Sep 2023 12:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:57:80:6e:a7:9c:f0:a2:d2:84:2a:c7:cf:40:b5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Sep 5 12:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f8736971f4fd2714d7b011d166d78173699651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e9:21:db:bb:0d:7b:3c:eb:e8:68:98:d7:21:
38:5d:25:17:cc:bd:2b:5d:84:6f:4a:76:c1:fe:09:
3f:48:d8:39:0f:3c:62:7f:7e:0e:17:9d:04:f8:74:
13:7c:89:4c:63:ec:7b:ef:b3:f0:5d:a8:02:e3:f5:
ca:17:b8:12:b3:9a:6b:71:9d:16:32:1d:32:eb:21:
d6:db:c7:69:df:5e:0f:64:cb:39:b9:fa:14:3a:b9:
26:b8:0c:88:0d:25:81:38:17:93:2b:6c:f1:d2:a7:
f3:26:4f:d6:d9:fc:f1:12:37:ee:01:69:29:e7:d7:
a2:5a:98:e0:e7:28:e7:a7:aa:95:ab:ca:32:2b:57:
7a:cb:92:2c:ba:4f:a6:10:55:bb:f1:f1:a7:d3:e9:
a6:8b:91:4e:84:f8:9d:84:a6:8b:e9:7d:2f:17:55:
ae:7f:31:2c:18:3c:b4:6a:a5:fc:9f:aa:bc:d0:80:
89:d0:ff:83:29:d9:87:87:c7:01:cd:d3:d8:70:30:
a9:1d:1e:6c:e5:b2:5a:19:a9:58:c8:98:e3:c2:0f:
b6:0f:09:97:50:ea:21:44:1f:96:ea:4d:2e:75:c1:
31:90:6b:3f:d7:22:0d:a7:e8:34:c9:47:2d:58:24:
ca:90:6b:cc:2d:86:7e:e5:22:bc:64:66:91:94:17:
fa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:87:36:97:1F:4F:D2:71:4D:7B:01:1D:16:6D:78:17:36:99:65:1E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/n4c2lx9P0nFNewEdFm14FzaZZR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/22
94.154.32.0-94.154.36.255
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2d:2e:26:4f:fd:a0:90:fc:5a:bd:fd:6a:a5:8f:89:60:94:
1b:99:a7:cb:fd:6f:d3:02:34:8b:7d:14:b3:9d:6f:6c:10:b7:
55:28:b4:af:b2:0c:ec:7e:49:0f:18:a8:fd:69:f0:93:b1:08:
9e:91:e5:8c:23:41:cc:5d:5a:bf:a8:31:b9:1d:68:56:1c:27:
0a:6b:81:81:94:5b:1c:c8:2e:62:25:c4:05:de:23:88:c1:b6:
e4:5d:64:13:0a:45:86:2c:8d:2f:10:96:2c:32:e0:20:99:ff:
c5:77:b8:e2:53:eb:6e:35:4d:16:19:62:5d:d1:9d:f1:b2:d0:
a9:90:1b:2f:c8:e5:73:bc:ea:49:bf:80:64:fb:5e:90:a6:95:
0b:2f:6b:55:b3:61:65:19:58:f0:37:e0:55:31:90:85:71:db:
d2:10:5a:33:e5:fb:e8:94:21:91:47:68:ed:a8:ed:5d:1f:18:
05:d8:a7:da:85:1c:97:3e:17:a8:0d:ea:9c:a9:ad:a8:e7:8e:
e2:d7:6e:cc:db:99:33:6f:10:79:f5:8a:69:06:95:8d:1d:3d:
d9:26:b2:05:c9:87:2f:5f:4d:c6:51:1c:ec:2a:e5:fe:b2:39:
93:8d:82:11:38:9b:e6:04:77:ef:8b:8e:eb:5b:d8:ad:b9:46:
59:9b:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:10:54 2023 by rpki-client on console-fra.rpki-client.org