Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Ctrmo1dqIyn0_91oMSeXrOtBAS8.roa
File: Ctrmo1dqIyn0_91oMSeXrOtBAS8.roa (raw, json)
Hash identifier: Z+WYjNakYGMQRmeFbtA5lyOmrBxYP/+hIUkr+GEUyY8=
Subject key identifier: 0A:DA:E6:A3:57:6A:23:29:F4:FF:DD:68:31:27:97:AC:EB:41:01:2F
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01883E38B9CE60D287E9D2CCE786FFDDE473
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Ctrmo1dqIyn0_91oMSeXrOtBAS8.roa
Signing time: Sun 21 May 2023 12:11:24 +0000
ROA not before: Sun 21 May 2023 12:11:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Aug 2023 19:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:38:b9:ce:60:d2:87:e9:d2:cc:e7:86:ff:dd:e4:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 21 12:11:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0adae6a3576a2329f4ffdd68312797aceb41012f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f4:29:c7:7e:88:ac:7e:99:be:6e:b5:a0:ce:
5e:a9:aa:e6:92:42:2e:ff:78:d1:18:94:f1:5d:be:
26:9b:28:d3:da:ed:8d:fe:1e:41:3c:96:5d:c4:23:
46:ef:72:8e:33:60:81:34:33:0d:b4:8a:b5:a5:59:
df:e0:18:1b:b2:1b:b3:d6:5f:bb:19:f9:d1:0c:f7:
b1:a9:54:b0:66:88:08:f0:08:86:cb:b8:6f:fc:55:
83:0c:02:f9:9b:e4:f0:2d:e9:eb:e0:75:5e:01:78:
4f:71:9f:2d:14:cb:db:55:f2:8b:15:29:5b:1a:a7:
ed:88:02:0b:35:fb:6a:d4:34:0c:b6:87:76:f3:92:
61:10:06:84:93:7b:72:db:2e:d6:88:f4:08:b2:a2:
e9:e3:e2:64:e8:33:16:ba:f0:22:f4:3c:72:9c:c5:
59:54:df:77:df:0b:5f:1f:90:db:a4:41:88:bd:10:
33:5d:88:a5:c5:0f:d5:7a:da:45:de:f0:c1:ee:61:
f2:d3:44:b2:19:21:bc:41:47:8e:b2:ae:94:be:23:
0e:96:ec:a9:b2:a5:53:2f:c6:90:95:23:05:85:80:
08:1f:56:56:e7:62:f5:89:c7:af:52:e1:61:be:53:
25:26:2d:b4:1a:42:93:6a:f4:1d:4e:11:8e:44:e2:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DA:E6:A3:57:6A:23:29:F4:FF:DD:68:31:27:97:AC:EB:41:01:2F
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Ctrmo1dqIyn0_91oMSeXrOtBAS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
178.236.243.0-178.236.244.255
178.236.246.0/23
178.236.253.0-178.236.254.255
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:41:7e:20:8c:ec:36:8a:18:89:b3:66:41:a4:30:8f:1b:4f:
34:c6:0d:1c:38:c8:7c:18:8d:55:28:02:c0:f5:6e:52:00:9b:
a6:f3:97:a5:72:0a:86:fb:37:3a:e8:f8:5f:e8:d6:3e:57:f3:
7b:1f:b4:4b:e8:1c:ce:a7:1d:4b:61:63:62:3e:18:cc:23:23:
8f:35:6b:f4:79:97:e3:a4:a6:ee:ed:48:0c:05:b2:d0:6a:45:
9d:d3:db:c7:1b:e8:ba:f5:c3:9d:33:ac:6c:2b:7a:f7:dd:bb:
f6:9e:51:f2:fb:a0:df:51:73:db:70:c1:e0:b6:33:70:23:98:
10:5c:81:01:98:a1:fc:cf:04:18:2c:27:34:61:56:d3:ce:b8:
1f:36:50:d3:e6:89:3a:ea:a7:eb:75:26:92:d0:de:23:eb:50:
c5:fb:cd:a3:9a:d9:1a:de:21:3b:59:37:95:74:ec:ce:a3:69:
f5:2b:76:da:0f:20:53:b4:d0:97:77:0e:c5:fc:8a:22:34:8e:
d2:57:de:f3:51:1b:a2:49:29:cc:06:07:d6:0a:5d:85:68:29:
6f:7c:33:76:f8:00:6a:a8:42:01:dc:f6:dc:2a:54:cb:fa:d9:
64:b0:34:b2:bc:44:60:2e:b1:7c:03:3a:d7:f2:42:f8:3f:03:
ee:20:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org