Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/DodJ8d54WPtp9b0fk2h7kDkjxLk.roa
File: DodJ8d54WPtp9b0fk2h7kDkjxLk.roa (raw, json)
Hash identifier: 0NJiupA1bMS0PQwci7ZTHsdtMtkQjnQfB7s2JJ2SxNk=
Subject key identifier: 0E:87:49:F1:DE:78:58:FB:69:F5:BD:1F:93:68:7B:90:39:23:C4:B9
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0188142CA2982DDA343A0B3E02B0A5C0E8ED
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/DodJ8d54WPtp9b0fk2h7kDkjxLk.roa
Signing time: Sat 13 May 2023 08:14:09 +0000
ROA not before: Sat 13 May 2023 08:14:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.162.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:2c:a2:98:2d:da:34:3a:0b:3e:02:b0:a5:c0:e8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 13 08:14:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e8749f1de7858fb69f5bd1f93687b903923c4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:de:8a:70:1d:95:4a:0f:0b:c5:06:9e:04:
ab:a5:81:3f:73:8e:a0:44:11:12:0e:cf:56:80:7a:
25:63:a3:ea:b3:7e:2f:ab:3f:75:8e:65:21:aa:1b:
b2:5d:a9:ff:92:fd:43:6d:3d:d3:45:2f:72:85:83:
7a:0c:a7:b2:c1:c9:8e:1b:c1:ce:6c:cd:c0:fe:e8:
81:cc:cb:dc:7c:93:be:b8:56:ea:7f:62:c2:b6:31:
d6:45:c8:85:d0:4d:13:de:f1:2d:82:55:4f:5d:f5:
cf:df:20:6c:3f:74:ee:7a:41:17:cb:fd:52:2a:ee:
75:a7:7c:8c:b2:75:10:6e:c8:8e:6c:8f:67:c1:db:
c8:32:4c:c9:2e:4f:07:d3:cf:1c:12:3f:d3:dc:0a:
40:24:59:a1:63:64:7b:16:f7:27:2b:e9:bd:87:95:
17:63:46:44:b9:ae:ba:c1:dd:4a:3b:cf:38:80:03:
9c:d5:88:a9:fc:5d:d3:6d:4c:1f:2a:80:33:fc:8e:
a9:6f:81:b1:6f:93:e8:26:17:e5:a2:6d:26:10:e1:
3d:ca:65:99:3b:64:a4:57:d3:bd:75:56:1a:52:83:
6e:f4:a9:1a:67:72:14:d9:65:d6:43:32:ab:09:4d:
81:53:8b:24:05:69:7e:69:2b:c4:15:2b:91:07:75:
57:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:87:49:F1:DE:78:58:FB:69:F5:BD:1F:93:68:7B:90:39:23:C4:B9
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/DodJ8d54WPtp9b0fk2h7kDkjxLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0-94.228.170.255
178.236.243.0-178.236.244.255
178.236.246.0/23
178.236.253.0-178.236.254.255
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:7f:c4:13:6d:90:bd:f4:1f:e5:99:98:e8:9f:02:cb:78:6b:
19:b3:d8:21:86:b9:d3:cd:b4:b6:27:f2:8c:9f:96:5a:51:a8:
5e:a3:9a:ee:61:a7:03:c9:bf:b4:40:a0:5d:0e:28:53:cc:90:
f7:39:7f:e7:ac:f0:7b:22:fc:fe:60:9b:39:ce:39:b8:61:7a:
65:1c:c9:d0:45:8d:15:d5:64:a4:5d:1a:55:28:a9:6c:12:ab:
0d:e2:52:6f:c5:66:40:98:1c:83:ff:a2:ad:f5:27:fe:93:3a:
76:42:63:0d:d0:6a:ef:af:31:99:c3:d1:97:44:6c:7a:63:8e:
37:93:70:7e:4e:ac:47:73:32:68:46:69:67:24:93:6a:17:60:
24:00:fe:a2:21:0e:dc:50:31:b9:76:1e:39:d6:2d:b1:af:ad:
ff:01:74:0b:49:5c:c2:65:e7:41:37:af:5f:a2:2a:50:2b:ef:
1b:18:03:5a:0f:d0:32:61:fd:ba:eb:fc:ae:4d:55:19:ea:8b:
c7:64:94:38:61:7c:8a:fe:10:f9:f9:b7:81:d4:9c:23:a4:83:
41:d2:b7:03:b7:50:ef:22:e5:e3:9a:ce:3f:3d:e4:da:4c:4a:
03:66:20:d7:df:88:07:b3:a2:dd:39:34:72:9d:70:55:c8:c8:
e3:66:0d:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:11 2023 by rpki-client on console-ams.rpki-client.org