Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tX0RFwNYPaqALPOGfG9aXZ2narg.roa
File: tX0RFwNYPaqALPOGfG9aXZ2narg.roa (raw, json)
Hash identifier: ht9iwhxD979HEZILtWHlNcUr1Z5YdJJUFfXUdY+d6mI=
Subject key identifier: B5:7D:11:17:03:58:3D:AA:80:2C:F3:86:7C:6F:5A:5D:9D:A7:6A:B8
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018CCFC8BBD59C617C66CBC35CDB44353293
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tX0RFwNYPaqALPOGfG9aXZ2narg.roa
Signing time: Wed 03 Jan 2024 14:44:48 +0000
ROA not before: Wed 03 Jan 2024 14:44:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.37.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 18:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:c8:bb:d5:9c:61:7c:66:cb:c3:5c:db:44:35:32:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 3 14:44:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b57d111703583daa802cf3867c6f5a5d9da76ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:39:7c:7b:9f:a3:b9:c4:09:62:fd:0d:92:
bd:82:dc:39:40:ac:58:9e:8f:a7:9e:90:04:1e:2a:
66:bf:15:35:b6:d2:07:c1:de:6d:3e:1b:aa:b4:c4:
1f:f9:61:9c:f4:bd:b5:2e:2f:b5:47:41:10:0b:84:
73:2d:8d:b7:39:8a:70:0c:68:6a:00:54:ac:2e:3d:
3e:2b:a5:71:ae:4c:40:67:68:d9:e0:66:9c:ee:b4:
ed:42:84:25:88:99:3e:ce:e2:6b:d3:cd:aa:d4:8f:
3c:59:0e:26:cd:3a:c6:a9:00:0a:b9:84:81:38:47:
14:9e:5c:00:58:94:98:55:c8:6c:64:bf:bf:ff:4c:
08:76:b1:83:ca:f7:ff:d0:c0:e0:95:3c:07:30:e3:
a9:71:98:4b:06:31:e9:ce:49:ed:2c:9d:44:18:29:
4e:fd:f7:ad:c2:4c:e8:3f:b6:e3:4b:e4:1d:4f:16:
6d:b6:2f:59:30:a7:17:60:43:39:5f:00:83:92:ba:
63:e4:02:22:d4:64:01:40:d3:66:54:82:c8:0a:67:
f9:68:8e:d6:26:06:b6:4c:9e:ac:16:0d:6a:89:ea:
44:86:d7:b2:4f:ed:ae:39:77:9c:15:f7:4f:1d:38:
ba:5e:5d:73:47:22:e7:9c:44:93:d9:69:cb:52:6c:
60:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7D:11:17:03:58:3D:AA:80:2C:F3:86:7C:6F:5A:5D:9D:A7:6A:B8
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/tX0RFwNYPaqALPOGfG9aXZ2narg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0-94.154.38.255
Signature Algorithm: sha256WithRSAEncryption
06:3c:02:86:63:ab:9b:50:85:a0:f3:70:cf:61:52:58:60:d1:
b5:3f:92:1a:cb:bb:68:e4:81:28:f7:4e:b1:8a:3e:c1:1e:c6:
04:c9:93:19:10:6b:76:e9:fa:81:1a:7b:8e:29:d9:2f:1e:26:
74:58:07:bd:b7:d6:ac:a0:2f:aa:11:7a:7b:b6:47:b0:e3:c7:
42:5c:20:df:97:aa:c3:31:17:9f:54:3a:16:28:7b:ee:b2:35:
8d:24:da:c0:5e:3a:0a:76:13:cf:89:cc:a2:44:f7:8d:4e:a8:
94:f7:4a:a0:8d:27:cd:2f:66:34:3c:1e:73:ec:b2:45:7a:0e:
3f:b6:18:b4:e4:d7:12:b4:2f:3a:af:51:ba:aa:3b:c6:b5:ea:
a5:3d:0c:af:42:e4:50:34:f8:4e:aa:d5:81:dc:db:38:68:ac:
ac:c6:b8:28:80:b4:90:af:64:99:fa:72:06:3f:be:24:af:a3:
98:5b:9d:bf:63:c6:ae:3d:77:7f:cf:13:1b:64:54:08:88:1a:
d2:a2:5d:de:0d:c7:56:c2:4f:27:c2:02:8c:ed:16:f8:7b:ad:
93:cd:23:6e:65:83:59:c6:ad:bc:00:3c:ac:d9:83:53:3b:51:
0d:3b:d3:eb:e6:43:a0:2f:b4:11:d6:bf:5f:12:85:75:57:aa:
3f:26:db:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 22:32:55 2024 by rpki-client on console-ams.rpki-client.org