Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yxtwLzvBKiD6h29Z49sRHTnAbuY.roa
File: yxtwLzvBKiD6h29Z49sRHTnAbuY.roa (raw, json)
Hash identifier: WaXO5TUcwkggBqRrv+Tp+7sgWRiuYQhb29KUE4Kv5c4=
Subject key identifier: CB:1B:70:2F:3B:C1:2A:20:FA:87:6F:59:E3:DB:11:1D:39:C0:6E:E6
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018DD1CE359414F4BF1082C42D04435F468F
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yxtwLzvBKiD6h29Z49sRHTnAbuY.roa
Signing time: Thu 22 Feb 2024 17:12:48 +0000
ROA not before: Thu 22 Feb 2024 17:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397563
IP address blocks: 91.228.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Mar 2024 12:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:ce:35:94:14:f4:bf:10:82:c4:2d:04:43:5f:46:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Feb 22 17:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb1b702f3bc12a20fa876f59e3db111d39c06ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:36:e3:30:ee:88:75:6d:5e:47:02:30:12:86:
21:0a:55:72:6e:88:88:72:1d:0c:9e:86:13:3c:bf:
0e:5f:4a:0a:2c:32:62:30:1a:27:28:30:5d:b1:02:
8e:14:aa:de:ed:58:64:56:1d:68:66:24:67:05:d9:
87:12:c4:c9:03:4c:0e:f9:ab:4a:2f:58:1e:82:ef:
91:f4:58:89:0c:64:04:89:4a:68:79:f0:c2:4f:03:
60:b4:b4:d6:dd:22:97:31:05:3e:46:14:a3:b9:ab:
a8:bc:8e:7b:c7:14:37:df:73:f8:50:20:ed:01:c5:
47:09:08:f3:e4:18:db:cc:cd:20:d5:99:64:f7:5f:
a1:ae:dd:d3:ff:b7:5a:37:48:c6:17:84:1e:f8:9a:
0c:1d:64:18:43:a8:f7:1a:05:7c:37:79:39:ea:e8:
2b:ef:0f:f8:b7:4a:7c:df:05:27:e6:a7:f8:9e:77:
01:86:5c:e4:e6:48:56:ee:a5:0d:d1:68:ed:58:4d:
ad:bd:84:94:dc:d6:4c:64:6b:a3:11:5f:0c:ca:c0:
26:28:ae:3e:81:b0:eb:d9:f9:23:90:51:19:2d:91:
29:51:3f:d9:53:95:af:29:b8:9e:04:ea:7f:9e:8d:
88:ac:1c:ca:34:68:cc:67:90:86:fa:e6:a0:c7:60:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:70:2F:3B:C1:2A:20:FA:87:6F:59:E3:DB:11:1D:39:C0:6E:E6
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/yxtwLzvBKiD6h29Z49sRHTnAbuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:49:de:9f:37:5c:05:6e:80:27:58:8d:55:bf:b2:08:b8:5c:
8f:f3:7f:4e:56:d4:1d:54:5a:7f:4c:5a:36:29:ec:f8:dd:b7:
8d:c2:ff:dc:60:6a:82:46:17:83:12:b8:78:09:e0:a2:b7:a3:
ba:30:0f:c8:1a:48:fc:69:2c:a0:42:94:3e:a7:08:1e:95:4c:
ac:02:58:da:9a:f1:eb:b7:12:98:a6:d5:61:8a:74:9d:2d:4a:
d5:32:1b:b6:ee:cc:dd:59:04:65:84:fb:fd:88:12:70:36:44:
ad:95:00:24:99:fe:a8:12:c1:aa:5e:cf:36:f8:7f:47:56:43:
19:b0:3a:da:40:cf:c2:4d:56:ea:fc:7d:44:79:4f:2e:94:b1:
1d:56:d5:0e:08:71:24:c4:7b:6e:4c:d9:f2:40:4a:ac:a9:03:
0d:52:5d:51:d1:1a:8c:f7:4f:99:2e:8e:6b:1a:2a:b0:8e:fc:
46:80:7d:9a:8b:80:ed:d9:ce:20:3c:ab:0f:11:fa:b6:3c:1d:
72:5b:09:ea:07:3c:a8:14:01:9f:5f:68:b6:20:f1:0a:9c:e5:
7a:55:45:f4:f6:c5:4e:bb:61:30:f0:31:e0:b9:4a:e9:d9:e4:
9a:31:97:5a:ad:2b:75:ab:81:35:a0:bb:8a:90:04:32:67:61:
26:a7:23:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 23 15:39:20 2024 by rpki-client on console-ams.rpki-client.org