Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/u6EuOQlAkbbHH-CtBXuOIYnEkd4.roa
File: u6EuOQlAkbbHH-CtBXuOIYnEkd4.roa (raw, json)
Hash identifier: u1bMg8DOD7bsTL9/AfSjH+Gzte6ix4WBa060mKUlHXU=
Subject key identifier: BB:A1:2E:39:09:40:91:B6:C7:1F:E0:AD:05:7B:8E:21:89:C4:91:DE
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B39C09E1324D78B8434E92F666BF1D862
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/u6EuOQlAkbbHH-CtBXuOIYnEkd4.roa
Signing time: Mon 16 Oct 2023 18:30:06 +0000
ROA not before: Mon 16 Oct 2023 18:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.12.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:39:c0:9e:13:24:d7:8b:84:34:e9:2f:66:6b:f1:d8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Oct 16 18:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bba12e39094091b6c71fe0ad057b8e2189c491de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:a0:de:5e:bb:41:ec:83:69:8f:74:0a:cb:
c6:35:31:93:e6:90:b7:ff:5c:22:ad:42:c4:c7:2f:
52:84:99:0b:ea:26:a0:63:21:60:2e:2a:5b:ef:fb:
e6:cb:1f:07:7c:1b:4f:4e:10:8a:e3:f1:ca:3d:bc:
0a:c7:9a:ad:a5:6c:46:c2:7a:b6:e4:3e:21:5a:a8:
c8:5c:33:28:fb:3f:e3:ce:c6:8d:65:02:dd:ce:44:
9c:86:b4:e4:1d:58:0e:27:08:41:38:64:e5:b1:50:
92:fd:1a:b2:be:2b:81:7a:c7:11:46:06:29:af:6a:
c3:2e:fd:7a:fd:f4:f3:1b:2b:a3:cb:8c:a0:91:dd:
42:73:52:fb:b5:16:25:fb:8d:d6:fa:7b:dc:87:27:
68:9c:c7:35:8d:07:ed:9a:95:eb:0c:6b:ed:1d:e7:
b1:80:f8:c8:d9:b4:74:d0:b0:79:3b:a1:64:4e:dc:
17:b1:64:2f:a6:82:e4:25:d4:af:6d:64:0d:72:ca:
de:a7:9e:6b:ff:ed:dc:13:f3:e8:50:92:04:19:a9:
05:cd:ba:c6:07:04:71:97:c8:a3:0b:c4:15:25:53:
64:e0:77:f6:ce:58:76:19:a0:7c:45:f0:d1:dc:24:
46:a9:8a:18:8b:4a:03:40:a0:50:cb:c7:01:59:ce:
23:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A1:2E:39:09:40:91:B6:C7:1F:E0:AD:05:7B:8E:21:89:C4:91:DE
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/u6EuOQlAkbbHH-CtBXuOIYnEkd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:bf:c4:92:c4:69:28:41:e3:a8:4e:b2:58:33:6a:1b:16:6b:
b0:3e:a2:e1:aa:80:f2:06:72:b3:ac:80:a0:90:75:41:81:3a:
37:bd:a0:9c:9d:fc:66:0b:5d:b1:3f:2f:9c:e4:e7:27:53:0f:
40:4c:8c:d9:19:b3:95:4f:0b:79:5c:53:b6:03:61:ca:8d:8b:
f3:d9:d2:54:fa:6c:23:80:ce:71:fb:72:c0:3c:c0:b4:74:4f:
d9:71:10:5e:eb:2a:76:26:c0:a0:e4:9c:69:4a:2a:b5:aa:b7:
96:4a:8f:5d:f5:13:d5:e2:4d:ce:26:fa:20:7c:5f:71:5f:f8:
44:5a:a5:14:8c:dd:d2:d4:89:3c:ae:e2:ed:e1:15:07:4a:f4:
d1:39:a4:7e:22:af:6a:fc:e0:68:96:3a:43:81:72:7d:54:7d:
7c:6c:c3:38:36:69:f2:98:5e:f7:3d:0b:28:c3:1f:a3:77:71:
3b:52:6f:4d:36:72:b1:6f:99:24:4b:b3:c4:a5:cc:74:5f:c0:
91:36:9c:68:d2:f1:b8:b5:98:f8:9a:ac:e0:58:bd:61:a3:27:
8e:88:1b:49:b8:b6:b7:55:60:d6:5e:7f:52:d0:9e:99:3a:e4:
bd:9b:d5:d7:9a:f7:84:e5:0a:80:13:e3:a4:b2:ee:ea:9e:1e:
eb:c0:25:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 08:35:50 2023 by rpki-client on console-ams.rpki-client.org