Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FWnMt1NWV6jzxQ5N8AYkOygbHNI.roa
File: FWnMt1NWV6jzxQ5N8AYkOygbHNI.roa (raw, json)
Hash identifier: paJTR1eka5DHDk3nVeS/yjWCkux3Rq2XuFQ066tznQc=
Subject key identifier: 15:69:CC:B7:53:56:57:A8:F3:C5:0E:4D:F0:06:24:3B:28:1B:1C:D2
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018A47E9E174A2E6318C91934DB64EDEBA13
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FWnMt1NWV6jzxQ5N8AYkOygbHNI.roa
Signing time: Wed 30 Aug 2023 19:27:04 +0000
ROA not before: Wed 30 Aug 2023 19:27:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:47:e9:e1:74:a2:e6:31:8c:91:93:4d:b6:4e:de:ba:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 30 19:27:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1569ccb7535657a8f3c50e4df006243b281b1cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:e5:cd:65:19:f1:5e:2f:57:d0:c8:94:84:
92:1f:a3:86:81:08:86:40:9e:76:ba:e6:2a:77:b9:
04:46:e9:54:fe:1e:a0:95:cf:5c:c7:51:d0:7d:76:
b0:ed:2c:3c:3e:b2:43:66:c5:7b:53:f1:fc:0f:8e:
e9:3c:26:dc:a9:0b:ad:bf:9d:26:d6:63:82:d0:81:
e0:8b:87:00:33:f4:f6:82:62:6a:ea:b4:50:8d:6e:
0e:0d:78:8d:fd:43:06:6b:6e:b6:85:ff:94:6e:0b:
cc:5c:b8:0b:ff:78:bc:05:d0:d4:61:7c:42:5b:66:
11:4e:53:77:27:f6:94:7e:87:bf:d6:26:dd:d7:60:
ce:56:76:50:ae:16:44:58:3d:1d:0d:03:e0:42:76:
ac:14:c4:42:0d:f3:6f:d5:67:21:15:7e:07:51:86:
b9:1b:07:c4:1d:05:9d:17:b8:25:d7:1d:ab:c1:71:
9a:d3:48:cc:70:09:a5:bf:75:b1:3a:00:f5:a5:71:
3a:06:1a:d4:40:f8:57:bd:ff:a6:95:15:54:2e:63:
4d:98:4b:b3:e7:70:b0:cf:a0:98:36:8c:3c:51:97:
19:03:87:ff:ac:48:6c:1a:6a:a6:cf:7d:9c:6a:42:
23:7b:e4:e0:27:e4:0b:a5:a3:27:f4:22:12:7f:1e:
87:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:69:CC:B7:53:56:57:A8:F3:C5:0E:4D:F0:06:24:3B:28:1B:1C:D2
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/FWnMt1NWV6jzxQ5N8AYkOygbHNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
178.236.246.0/23
178.236.254.0/24
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
83:22:e5:fd:2f:d6:b2:21:35:eb:af:8a:47:97:df:b5:81:8e:
cb:f1:73:b1:6b:e4:76:b4:b7:75:a3:3e:5e:1c:0a:c4:c1:03:
49:a3:6a:2b:c5:3e:84:85:6d:f5:93:fb:8b:44:6f:c6:66:04:
ac:f0:3a:ea:e1:78:8d:13:45:2a:56:ed:a5:e9:52:66:f3:01:
98:3c:50:7d:32:ce:5f:d5:7c:c7:d9:e0:d2:1a:d4:d6:65:51:
a3:cd:28:4f:92:08:66:f7:3c:a1:df:f8:57:c3:6e:6a:0b:ef:
35:03:8a:4c:81:c1:7e:82:b5:2f:be:60:b6:09:74:86:2c:7e:
be:95:d0:1e:79:f5:7a:4a:59:0c:e5:12:59:10:d0:89:b6:f9:
22:4e:f5:fa:ee:cf:ab:72:46:35:ad:a1:5f:09:92:ae:54:86:
58:85:c9:d6:27:0e:4e:e4:9f:10:28:ff:8f:1f:d6:07:07:6c:
46:51:ea:8f:7e:ee:d2:af:25:8d:21:18:3b:dd:ac:91:fa:eb:
54:ce:b5:10:96:90:6b:42:80:37:e3:d3:5b:37:f2:04:58:0b:
af:de:0a:fc:f8:7e:7e:4c:00:6f:58:e5:e4:a5:4d:60:fa:ea:
d9:fc:a1:5e:de:95:91:58:a2:5e:f4:b8:f2:58:27:83:27:c2:
90:7b:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:27 2024 by rpki-client on console-fra.rpki-client.org