Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/w-eZOWaBz-Y17YMNAElHdU7Yyn4.roa
File: w-eZOWaBz-Y17YMNAElHdU7Yyn4.roa (raw, json)
Hash identifier: lZrjl98Yicg1Ysk7CG7CnrKBWbP8nNsshNsaNnCjZjE=
Subject key identifier: C3:E7:99:39:66:81:CF:E6:35:ED:83:0D:00:49:47:75:4E:D8:CA:7E
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018B9531E14AEC023457395C4DBD9CD34C65
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/w-eZOWaBz-Y17YMNAElHdU7Yyn4.roa
Signing time: Fri 03 Nov 2023 12:39:16 +0000
ROA not before: Fri 03 Nov 2023 12:39:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 91.228.15.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
94.154.38.0/24 maxlen: 24
94.154.35.0/24 maxlen: 24
94.154.34.0/24 maxlen: 24
94.154.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:31:e1:4a:ec:02:34:57:39:5c:4d:bd:9c:d3:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 3 12:39:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e799396681cfe635ed830d004947754ed8ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4e:f4:3a:cc:86:23:2b:3f:71:6a:05:a5:31:
1f:dd:95:3a:6b:ee:87:00:74:63:ec:c8:5d:31:55:
d5:f0:39:21:55:0b:c4:43:e0:c7:e3:a1:f0:ef:a5:
17:da:c8:ff:f2:82:ce:4d:2b:33:87:37:56:8e:e9:
ce:5f:0d:24:d4:91:83:b4:9d:16:19:08:e6:f1:c0:
c1:91:4b:86:86:1b:c4:1e:96:48:68:da:99:c8:5d:
31:9d:1a:d1:8f:9e:45:0a:2d:65:32:bb:14:25:95:
6e:3c:5a:ac:f5:d5:8a:2e:4a:ca:75:75:ba:2e:99:
3f:14:20:05:22:77:17:6e:8c:b6:3a:61:47:64:b8:
76:b7:09:ff:ed:da:ae:37:9a:69:1c:c1:dc:a1:c5:
fb:20:5c:56:78:1f:1e:a1:ab:78:b1:85:39:bc:f4:
ef:9a:2e:b8:cd:56:ef:6e:c4:a1:8a:5b:b4:5b:65:
28:dc:d9:3b:1d:e2:19:c5:84:71:ed:31:5b:23:a7:
08:2b:1c:23:57:b3:9f:71:f6:83:da:80:d9:78:44:
4a:52:cd:c7:a5:a6:25:d7:fb:66:b5:8d:f1:26:42:
f9:fa:25:14:3c:a5:fe:88:5f:40:61:d7:d3:15:bd:
dd:a5:ae:b4:be:d8:20:45:98:9b:55:2c:39:7a:79:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:99:39:66:81:CF:E6:35:ED:83:0D:00:49:47:75:4E:D8:CA:7E
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/w-eZOWaBz-Y17YMNAElHdU7Yyn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.13.0/24
91.228.15.0/24
94.154.32.0/22
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
09:c9:13:35:6d:68:60:db:c1:8c:74:63:c0:ab:7b:19:6d:db:
65:c2:16:09:fe:41:b8:88:5d:69:48:25:58:9c:83:18:d5:6a:
0d:84:c5:2b:ad:20:5a:5b:23:b7:12:a8:40:b1:bc:b2:23:ae:
01:14:7a:7c:5e:23:df:6d:09:ba:a4:48:d0:21:33:0b:ab:80:
fa:81:5a:04:d2:46:03:b4:cb:09:4f:75:ac:6b:81:d5:ef:0e:
d4:e7:cb:d1:9e:60:dc:4c:34:8a:ce:49:b6:95:67:87:b8:f1:
01:74:3e:90:d5:ce:bd:cf:9e:5b:1c:dd:80:5c:f2:84:b3:4f:
ea:10:50:fe:c3:0d:6b:db:97:e1:3e:f2:47:b8:00:3f:55:40:
70:13:e7:7a:33:81:db:e1:72:4f:56:86:1b:ce:ca:76:f9:3a:
21:9d:e0:5b:73:25:ce:27:d1:89:f1:c2:8f:64:1b:d1:1e:41:
09:1e:92:65:51:c2:32:b3:44:37:bc:29:39:72:10:6f:d3:62:
ae:08:99:7b:30:53:6a:75:7b:bd:a4:bd:84:32:0b:34:f8:2f:
0e:9e:b5:01:52:df:2d:be:c2:9f:be:05:b4:2e:6a:da:cb:93:
71:29:af:31:0a:de:05:cd:70:8c:5b:c4:14:7c:a8:91:d5:bd:
b2:4f:9d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 14:47:26 2023 by rpki-client on console-ams.rpki-client.org