Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E3GZdScpJ7f7u1VW2VjN75XA750.roa
File: E3GZdScpJ7f7u1VW2VjN75XA750.roa (raw, json)
Hash identifier: 9RPfuzStz/7jA6zJV+RwVNKPN5jtAyn1nTeBQxXpkX0=
Subject key identifier: 13:71:99:75:27:29:27:B7:FB:BB:55:56:D9:58:CD:EF:95:C0:EF:9D
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0189D6AF49CAE3A62580A1A182F99AB179AA
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E3GZdScpJ7f7u1VW2VjN75XA750.roa
Signing time: Tue 08 Aug 2023 19:45:59 +0000
ROA not before: Tue 08 Aug 2023 19:45:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198178
IP address blocks: 94.228.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:af:49:ca:e3:a6:25:80:a1:a1:82:f9:9a:b1:79:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 8 19:45:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13719975272927b7fbbb5556d958cdef95c0ef9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6b:eb:d3:02:e2:9b:2b:45:2c:21:52:58:53:
e0:56:4c:dd:fb:e4:31:46:5c:9d:ee:76:57:97:32:
18:3b:6a:4b:5c:c2:c1:fc:00:78:7e:2e:a8:7f:d1:
43:7f:18:58:38:28:34:48:3a:67:28:0e:82:05:d9:
6b:6a:a7:84:2a:bb:51:68:0b:b9:b1:f9:f2:99:0b:
5a:c7:03:cc:18:72:30:58:34:58:4f:23:09:d5:8e:
29:7a:61:37:91:8b:bb:f3:8f:e1:49:f9:59:8b:24:
b2:f6:d8:9f:a8:86:20:68:4b:6d:9a:d3:2e:f2:87:
fc:af:42:ae:7f:05:00:88:78:89:db:af:9a:04:5b:
20:92:40:9c:1a:b3:ff:68:80:4c:4f:39:c7:68:42:
38:2b:54:d2:e0:db:91:f0:c3:40:a3:85:2f:46:db:
52:d2:6b:49:38:7d:20:1c:89:8c:71:1e:6f:c6:0c:
87:e5:49:12:49:0d:7b:9d:41:b3:89:eb:7d:a6:8d:
60:78:04:dd:1d:14:ec:b4:aa:49:fe:f7:c1:34:cb:
a2:15:97:cd:01:eb:53:f3:b8:3c:14:1b:56:72:91:
91:49:c4:f4:66:48:2b:a7:f7:f4:dd:c9:c5:25:3a:
dc:a0:22:33:ff:8c:f8:41:39:58:e7:3c:01:03:1d:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:71:99:75:27:29:27:B7:FB:BB:55:56:D9:58:CD:EF:95:C0:EF:9D
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/E3GZdScpJ7f7u1VW2VjN75XA750.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.161.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:f8:31:73:2c:6a:4a:0c:4e:64:f9:83:53:f2:5a:37:44:f8:
c0:48:a5:d4:36:2e:2f:27:6e:29:74:f5:c6:de:bb:19:f3:be:
a7:5e:98:4b:98:e9:92:e6:67:d4:bf:3f:2a:fa:94:f1:33:f3:
cd:32:6a:6e:a3:e5:01:8a:3b:b4:d2:06:0b:3b:12:55:3a:31:
e1:cc:bf:98:dd:1f:4e:9c:86:2c:4c:32:5b:d7:37:c5:09:f8:
f0:66:c7:87:47:fa:b2:f2:a4:71:10:0a:a9:e0:3a:66:60:17:
6e:67:d3:82:d4:71:f3:13:8f:37:12:0b:93:31:cf:47:ca:79:
28:05:73:1e:b4:aa:19:63:51:6e:3b:33:12:54:d6:de:9f:4f:
e5:95:38:36:ef:b2:38:38:7e:12:d1:d2:92:5c:92:51:4b:02:
8b:ab:1a:f4:8b:ea:55:ca:ec:53:d4:41:e6:2d:3d:f4:3c:43:
87:e4:9b:ca:56:df:73:32:f2:92:4f:4f:05:97:77:91:20:55:
c3:12:76:e2:e2:48:13:14:e5:e5:d2:a7:13:57:66:f5:92:be:
1e:64:5e:c9:15:b8:db:25:ae:3f:17:97:82:02:da:67:cd:04:
3b:50:be:7d:2d:ba:d1:28:ac:50:89:aa:4b:91:45:89:5f:be:
08:2d:4a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:27 2024 by rpki-client on console-fra.rpki-client.org