Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Dcr-_vs597Ody6usZPfvQbU_Kkk.roa
File: Dcr-_vs597Ody6usZPfvQbU_Kkk.roa (raw, json)
Hash identifier: RFxtz8i56LkcgLl1Kz0WBWcrOOkzfOZIEK1QxEUVryA=
Subject key identifier: 0D:CA:FE:FE:FB:39:F7:B3:9D:CB:AB:AC:64:F7:EF:41:B5:3F:2A:49
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01910CAF5CA3B6CAAAF31CF7799E3EDB0704
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Dcr-_vs597Ody6usZPfvQbU_Kkk.roa
Signing time: Thu 01 Aug 2024 06:45:04 +0000
ROA not before: Thu 01 Aug 2024 06:45:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 94.228.162.0/23 maxlen: 23
94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
178.236.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 30 Sep 2024 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:af:5c:a3:b6:ca:aa:f3:1c:f7:79:9e:3e:db:07:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 1 06:45:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dcafefefb39f7b39dcbabac64f7ef41b53f2a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:e0:09:7a:3c:46:73:2c:09:82:82:7d:c5:
e6:ea:0d:54:41:8a:0c:f4:4b:4e:1c:d8:a2:a5:27:
ba:d4:ee:a8:ba:16:1c:d5:71:69:e7:ea:78:f6:1b:
0a:b8:b9:8a:cd:93:56:c5:72:18:7f:28:30:2a:52:
40:64:1e:19:90:9e:b8:4a:d7:dd:b8:e8:35:8f:8e:
6e:57:f7:c0:d7:08:e5:d0:5e:82:02:0f:01:df:db:
be:be:3e:2a:dd:54:cc:96:3f:bd:9a:f6:8c:74:98:
65:de:30:7b:3c:3d:93:67:1c:05:98:28:65:cc:0e:
82:ee:5b:99:dd:6f:83:56:1f:7a:f9:f3:35:cb:59:
ed:0e:eb:d2:d5:0e:82:ae:3e:8b:02:41:33:31:8a:
14:41:d3:3f:e6:46:f1:50:b7:01:60:ed:26:d0:1f:
1d:79:e9:c5:1d:f2:78:c1:9b:43:f0:fa:85:b5:8d:
b7:6d:49:b7:2d:38:61:a0:e4:47:3a:40:82:41:af:
4b:d7:35:7e:d0:fd:a4:78:6d:cf:d9:0d:a5:b9:69:
4c:d5:55:f7:a5:e4:c6:af:90:46:cf:bb:f6:e9:8a:
34:3c:a3:a8:8b:6c:b0:a9:43:3a:36:2a:55:97:9c:
45:37:69:b4:6f:dd:6b:49:8a:a4:7b:36:b2:f7:10:
28:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CA:FE:FE:FB:39:F7:B3:9D:CB:AB:AC:64:F7:EF:41:B5:3F:2A:49
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Dcr-_vs597Ody6usZPfvQbU_Kkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0/23
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:55:78:09:c7:00:1b:15:6e:b6:9c:3f:ad:1b:47:67:81:d2:
0f:e3:53:12:08:fe:7d:78:4e:08:9c:bf:23:38:8d:f7:8a:20:
cb:7f:b0:48:20:d0:85:50:ea:0e:79:be:9f:00:2c:d5:ab:d9:
ca:03:8e:a3:c5:a4:47:49:8e:d8:ec:0e:0a:38:8b:e0:64:1b:
2c:bd:29:7f:3c:96:fd:8b:ca:5a:73:68:e6:a1:08:3b:e4:c7:
0a:b8:45:31:b2:82:ef:16:c0:46:91:ab:28:51:e4:69:f2:6f:
3b:d4:bf:7d:9c:d5:63:dc:9e:b5:d6:b2:19:ff:f1:e8:5c:9f:
45:c0:10:0d:fe:59:72:d8:ff:6d:86:d5:38:99:fc:a6:d1:27:
78:9a:25:11:44:a9:cb:f1:21:ac:7d:12:af:b0:82:e8:a0:63:
c3:0e:b8:f8:77:e4:1b:2a:14:2c:36:a4:61:d7:24:c7:25:a7:
a6:e6:f0:79:65:ed:10:28:2e:dd:85:50:56:76:e5:4f:ca:6b:
ac:e5:e9:1e:a4:4b:f0:df:b0:85:fc:21:f5:62:0c:6e:e9:d5:
5b:fb:37:c2:a6:b7:06:4e:b0:3f:f3:a5:43:78:49:b3:e7:82:
b5:d4:d4:fb:93:85:dc:c8:76:11:43:a0:52:8e:2a:d1:2e:e6:
e1:60:c1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 08:54:03 2024 by rpki-client on console-ams.rpki-client.org