Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E0ZQtgWee5bhIecoS7HeU29iFh8.roa
File: E0ZQtgWee5bhIecoS7HeU29iFh8.roa (raw, json)
Hash identifier: 6GrPBJItG0uaj4g4GnOvUBLu5EGIHD81dNH4BD5yICY=
Subject key identifier: 13:46:50:B6:05:9E:7B:96:E1:21:E7:28:4B:B1:DE:53:6F:62:16:1F
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0189DF24813C5A8CAC91817833A71700C9CE
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E0ZQtgWee5bhIecoS7HeU29iFh8.roa
Signing time: Thu 10 Aug 2023 11:10:58 +0000
ROA not before: Thu 10 Aug 2023 11:10:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 178.236.246.0/23 maxlen: 23
94.228.162.0/23 maxlen: 23
94.228.164.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:24:81:3c:5a:8c:ac:91:81:78:33:a7:17:00:c9:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 10 11:10:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=134650b6059e7b96e121e7284bb1de536f62161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f9:c4:45:55:69:57:e4:47:d0:54:54:e6:2c:
17:7f:19:4f:d2:86:f1:b6:3b:6c:06:fd:da:ec:b2:
70:dc:f2:70:0b:fc:0e:9a:db:22:da:01:4f:a2:2a:
86:57:3f:64:09:5d:3b:13:6b:54:7b:7d:24:7c:da:
3c:a3:9d:f0:ce:48:d1:65:e4:5b:93:27:d3:cd:0a:
6c:9f:68:6d:ff:97:06:90:7c:b9:c2:34:a4:b1:1f:
4f:04:46:5d:5e:8d:be:9c:b8:c5:81:9d:f5:24:88:
f5:2c:29:7a:7f:1e:fa:d9:49:db:52:6f:c8:be:80:
f2:c5:72:3d:dd:8f:d1:75:45:f4:f0:ae:cb:76:d0:
d5:d3:a5:1e:6b:a5:12:5d:b6:64:ff:51:05:50:2c:
d7:87:8b:38:ce:79:c2:b8:74:4e:1d:87:6e:8b:86:
4c:11:d6:79:23:70:40:af:38:da:f4:7c:37:fc:82:
58:40:c8:fc:90:12:79:6a:0a:06:ac:ff:1d:f1:47:
61:9d:93:72:f9:8c:4a:13:53:aa:51:33:dc:75:76:
da:20:38:68:2c:00:43:c0:f6:1e:e4:a9:d4:d4:06:
51:b9:70:71:bf:79:fe:cf:dd:b4:c4:67:79:f9:8c:
ed:46:2b:48:80:d8:01:bf:24:82:12:f4:71:b7:aa:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:50:B6:05:9E:7B:96:E1:21:E7:28:4B:B1:DE:53:6F:62:16:1F
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E0ZQtgWee5bhIecoS7HeU29iFh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0-94.228.170.255
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
68:c3:28:af:d8:a3:86:f0:e2:89:07:01:87:a2:92:bb:0f:6f:
db:6b:ca:2c:ec:d9:5b:c5:6f:8e:63:54:63:0c:d2:1a:37:24:
ac:55:0f:0b:b9:ec:f5:42:28:63:82:8f:b4:04:2f:8f:1a:89:
9f:2e:1a:c6:d8:d9:3f:24:72:70:8b:a3:81:42:34:4d:83:61:
aa:21:c1:91:bb:bd:05:08:2b:8b:6f:1f:45:5e:d6:98:55:7e:
66:50:0c:30:74:2b:27:b2:45:8d:35:82:6f:c9:f6:dd:2b:e3:
e5:99:f9:a0:e8:1c:37:91:da:fb:18:f9:53:a4:81:b0:fa:08:
39:30:4e:06:67:5d:27:d7:af:e8:f3:9f:3f:46:60:94:85:be:
17:3a:b9:f1:f5:a8:54:43:04:5c:f0:f1:e4:c6:2a:b0:84:56:
34:e6:e7:d0:37:6f:8f:06:ed:5b:dd:3a:cb:1b:9c:f8:e2:1b:
6d:8d:16:a3:82:c1:a0:75:bf:01:51:84:b7:79:03:10:f6:42:
c3:79:8a:c0:e8:83:74:81:c0:b7:3c:cb:f0:8f:25:f4:a8:ee:
01:01:fb:b6:7c:3b:ac:58:f7:38:10:57:b2:c3:f1:f6:ec:27:
ef:6e:1a:1b:ec:4a:72:30:08:59:d0:93:12:a6:e8:f3:8d:f7:
ad:26:69:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 16 08:50:17 2023 by rpki-client on console-ams.rpki-client.org