Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/nYHEAyJIEq2Q1jnc75EyyUjaK1o.roa
File: nYHEAyJIEq2Q1jnc75EyyUjaK1o.roa (raw, json)
Hash identifier: hOos1idtCSH53ypBAbc+pBg4ooju8Qi8FLIa443Ctd4=
Subject key identifier: 9D:81:C4:03:22:48:12:AD:90:D6:39:DC:EF:91:32:C9:48:DA:2B:5A
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0190C0AFF159BA242EBA121174E7F8CD4B01
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/nYHEAyJIEq2Q1jnc75EyyUjaK1o.roa
Signing time: Wed 17 Jul 2024 12:34:34 +0000
ROA not before: Wed 17 Jul 2024 12:34:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:af:f1:59:ba:24:2e:ba:12:11:74:e7:f8:cd:4b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jul 17 12:34:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d81c403224812ad90d639dcef9132c948da2b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:13:ea:ae:19:6c:bc:5f:04:3f:40:2d:8f:ab:
a2:8e:75:86:6b:6c:45:3d:34:db:9d:b2:7b:a5:e6:
3a:29:3c:f2:76:f8:98:79:73:3a:25:ed:f7:8a:07:
88:5b:7e:d7:ec:a4:c8:67:4e:11:38:1f:60:aa:6d:
6d:02:24:6c:90:7f:ef:26:70:92:95:cd:f5:2a:ef:
31:cc:19:a0:b9:f5:c2:58:c5:b1:29:1a:dd:4c:fe:
5c:ca:b5:3f:55:6a:63:19:36:4c:a1:04:16:c9:e7:
85:25:50:4f:0d:da:69:22:6a:73:d8:66:5d:85:04:
46:39:af:eb:63:67:a3:35:95:dd:7b:30:e6:9f:86:
2f:f9:16:b0:44:a6:15:7a:c2:5c:b7:99:99:a1:cc:
63:b8:ba:49:80:a9:fe:75:9b:53:93:bb:02:0c:ae:
81:3e:65:49:25:dd:c6:a1:db:f1:14:7c:fd:6f:46:
7e:9c:98:0e:bc:61:88:8a:06:18:d0:aa:84:e5:c0:
4c:1b:79:44:d6:f3:63:f6:3a:36:2b:7c:ae:98:27:
6f:6f:e9:f6:04:73:00:e3:82:79:d2:06:51:45:8b:
51:2f:54:52:f2:7a:81:14:13:18:db:c8:f1:ad:d7:
4c:6f:be:85:a3:67:52:d8:88:11:11:9c:97:69:46:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:C4:03:22:48:12:AD:90:D6:39:DC:EF:91:32:C9:48:DA:2B:5A
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/nYHEAyJIEq2Q1jnc75EyyUjaK1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.15.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a2:79:aa:db:a3:9c:de:17:d4:4b:7e:d6:d1:b6:33:60:b9:
3f:63:ea:c2:1f:ba:65:21:e0:12:ba:6a:40:02:1f:ff:ec:d9:
2d:c4:e2:82:ac:d5:ad:0c:d7:2f:91:19:3c:bb:f5:eb:8a:ca:
58:03:3d:f7:30:0e:90:3d:1d:ce:37:31:cf:33:5c:a0:bd:19:
6e:35:52:3b:68:00:c4:7c:d0:5f:f6:13:de:50:c6:a2:51:78:
52:8d:ef:8e:c8:b7:71:c1:78:e3:ab:c0:bf:69:85:a5:72:34:
d1:a8:06:ed:d3:85:4c:08:cf:9f:4c:56:73:20:a0:63:e4:1f:
3e:87:57:30:89:9f:d1:83:0c:9f:10:cd:41:3f:81:f1:b0:94:
b5:f2:58:57:d0:90:e2:fc:59:c2:6d:d9:ff:d2:b6:b0:fd:7b:
8d:c3:da:54:e4:70:fe:36:32:35:3a:e0:95:73:76:8c:b4:0f:
d1:15:be:f1:11:e2:ca:5e:1c:44:48:5a:df:c8:91:fe:be:24:
b8:1b:59:ef:0d:24:f8:45:2b:4a:a0:3e:27:be:c3:3f:fd:6a:
ce:fe:5d:34:e3:57:37:ba:3c:91:43:9f:02:0a:e5:48:89:43:
2a:1a:26:f6:eb:12:0c:60:d1:36:b9:84:8e:1c:55:0e:1f:44:
17:6c:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 19:28:08 2024 by rpki-client on console-ams.rpki-client.org