Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/y8Nucay1x_Zm8dps0FWYaR9mCUM.roa
File: y8Nucay1x_Zm8dps0FWYaR9mCUM.roa (raw, json)
Hash identifier: BHosqIZgaGl5og35I/uUDZKhyfpOOSNn9C+CD34Ushg=
Subject key identifier: CB:C3:6E:71:AC:B5:C7:F6:66:F1:DA:6C:D0:55:98:69:1F:66:09:43
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01904A19F8E83C754952EFEA36EA735D827C
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/y8Nucay1x_Zm8dps0FWYaR9mCUM.roa
Signing time: Mon 24 Jun 2024 11:55:34 +0000
ROA not before: Mon 24 Jun 2024 11:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.13.0/24 maxlen: 24
91.228.15.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jun 2024 12:56:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:19:f8:e8:3c:75:49:52:ef:ea:36:ea:73:5d:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jun 24 11:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbc36e71acb5c7f666f1da6cd05598691f660943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:d8:fb:49:f3:3f:91:9b:77:78:bc:00:47:
7a:c5:58:3d:ef:85:63:d3:a8:a9:84:9a:9e:74:8a:
cc:88:9d:e9:e4:47:d6:fc:cf:5e:ca:2e:d3:71:84:
77:c4:14:64:53:6c:c2:1c:e5:31:eb:19:57:32:fb:
36:81:a9:56:d0:6f:95:f0:9e:25:03:14:93:28:fc:
96:ff:f6:88:b2:20:b6:44:99:2f:f9:1c:4e:38:6a:
55:d4:f7:7e:e5:dc:67:f5:70:77:70:98:0d:9f:8f:
2a:ad:22:77:1f:e6:3a:40:f8:62:e9:c6:8a:7b:99:
6e:a5:5d:44:95:db:a4:08:30:60:f3:5e:fc:66:d4:
57:d0:d6:2a:cf:fa:4e:c1:1d:2e:9e:f3:3b:c3:8c:
9d:0d:b4:52:d7:13:22:fd:03:f3:2f:62:d3:ed:5f:
05:80:98:e3:4d:77:3c:f1:9f:c5:55:c6:31:55:ff:
fc:ff:2b:61:01:00:88:2e:8b:48:ca:fb:a3:d6:0a:
aa:56:da:65:50:2f:77:5d:ad:3d:29:6a:f5:cc:f9:
04:e8:73:62:25:98:70:09:03:cb:b9:18:ba:f7:36:
d9:b0:76:5a:c3:fa:3c:3c:75:bf:ef:5f:0e:a6:10:
1d:5c:0f:af:fd:7d:ac:92:5c:f2:58:05:20:90:1c:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C3:6E:71:AC:B5:C7:F6:66:F1:DA:6C:D0:55:98:69:1F:66:09:43
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/y8Nucay1x_Zm8dps0FWYaR9mCUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/23
91.228.15.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d8:8c:b5:7f:62:07:2f:ac:78:e4:60:a5:09:91:46:0c:df:
e8:e3:e3:ee:36:83:5a:a5:82:e9:6f:aa:3c:1b:f6:ea:4c:77:
0a:64:85:f4:43:be:05:e9:c4:8e:31:95:b7:23:14:d7:6c:19:
18:9c:12:72:82:1e:8f:bc:5a:41:df:c6:84:f6:4a:54:99:ef:
0e:bf:48:c8:bd:03:ef:72:a7:b8:11:0c:37:1d:87:19:7e:bd:
12:a4:6f:8e:e4:a4:71:18:99:89:f5:33:d4:48:7d:10:01:05:
d6:fd:b9:b2:d3:89:7c:38:1e:b3:20:a7:18:4b:a8:23:b8:8f:
65:b7:e8:64:cd:bb:7a:2e:41:cc:59:c9:c2:29:dd:84:56:4b:
2e:41:2b:77:16:72:1f:c9:21:5d:17:8e:c3:b7:ba:2e:1d:b3:
78:d9:26:6a:16:22:ce:18:58:e7:c2:c4:08:d5:75:91:da:3d:
a0:25:73:53:b8:81:d1:b4:99:e0:18:0e:a2:c8:52:42:07:0c:
40:4d:9c:73:a9:99:f6:42:60:47:f7:ba:e4:e4:57:28:e3:83:
e0:61:53:67:28:ea:b5:69:b2:e4:96:b3:8d:d9:31:aa:f3:bc:
1b:90:65:be:e9:0c:bf:57:a0:27:87:c3:61:39:9a:dd:23:40:
e9:44:27:19
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZBKGfjoPHVJUu/qNupzXYJ8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwNjI0MTE1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmMzNmU3MWFjYjVjN2Y2NjZmMWRhNmNkMDU1OTg2OTFmNjYwOTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHjY+0nzP5Gbd3i8AEd6xVg974Vj
06iphJqedIrMiJ3p5EfW/M9eyi7TcYR3xBRkU2zCHOUx6xlXMvs2galW0G+V8J4l
AxSTKPyW//aIsiC2RJkv+RxOOGpV1Pd+5dxn9XB3cJgNn48qrSJ3H+Y6QPhi6caK
e5lupV1EldukCDBg8178ZtRX0NYqz/pOwR0unvM7w4ydDbRS1xMi/QPzL2LT7V8F
gJjjTXc88Z/FVcYxVf/8/ythAQCILotIyvuj1gqqVtplUC93Xa09KWr1zPkE6HNi
JZhwCQPLuRi69zbZsHZaw/o8PHW/718OphAdXA+v/X2sklzyWAUgkByzrQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMvDbnGstcf2ZvHabNBVmGkfZglDMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEveThOdWNheTF4X1ptOGRwczBGV1lhUjltQ1VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+QMAwQA
W+QPAwQAXpokMA0GCSqGSIb3DQEBCwUAA4IBAQCn2Iy1f2IHL6x45GClCZFGDN/o
4+PuNoNapYLpb6o8G/bqTHcKZIX0Q74F6cSOMZW3IxTXbBkYnBJygh6PvFpB38aE
9kpUme8Ov0jIvQPvcqe4EQw3HYcZfr0SpG+O5KRxGJmJ9TPUSH0QAQXW/bmy04l8
OB6zIKcYS6gjuI9lt+hkzbt6LkHMWcnCKd2EVksuQSt3FnIfySFdF47Dt7ouHbN4
2SZqFiLOGFjnwsQI1XWR2j2gJXNTuIHRtJngGA6iyFJCBwxATZxzqZn2QmBH97rk
5Fco44PgYVNnKOq1abLklrON2TGq87wbkGW+6Qy/V6Anh8NhOZrdI0DpRCcZ
-----END CERTIFICATE-----
Generated at Tue Jun 25 16:30:43 2024 by rpki-client on console-ams.rpki-client.org