Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/F_SeZJVGz6nMN_HVavMx9AOXZi4.roa
File: F_SeZJVGz6nMN_HVavMx9AOXZi4.roa (raw, json)
Hash identifier: 4Uhn34H1CfrhnNqt3W7z+1FwOTRk9w/OK5tujCCmtug=
Subject key identifier: 17:F4:9E:64:95:46:CF:A9:CC:37:F1:D5:6A:F3:31:F4:03:97:66:2E
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01889C1574E9FB1DB715C5742274A097A41D
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/F_SeZJVGz6nMN_HVavMx9AOXZi4.roa
Signing time: Thu 08 Jun 2023 17:37:11 +0000
ROA not before: Thu 08 Jun 2023 17:37:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:15:74:e9:fb:1d:b7:15:c5:74:22:74:a0:97:a4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 8 17:37:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17f49e649546cfa9cc37f1d56af331f40397662e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1a:56:37:16:49:84:f8:d3:3c:76:7d:85:b7:
e5:9d:e9:87:ac:05:ac:7e:e5:b0:c9:fe:31:7f:62:
45:71:b4:f9:a8:28:89:0e:a0:10:d4:dd:d6:7b:39:
fe:cf:ec:de:b0:51:22:0f:e5:8a:ad:49:6a:34:15:
52:94:5b:a8:31:8c:95:ab:4e:ed:f0:ed:a0:b3:c5:
1c:35:63:67:85:09:1d:60:88:ed:9e:00:fd:51:e7:
2a:34:d7:c4:08:79:3a:8b:07:15:7e:cd:5e:4d:ad:
d6:02:ef:3c:db:48:96:e7:2e:01:68:54:73:77:76:
96:5d:e4:02:43:d3:42:02:e9:4d:0d:3f:ec:d0:9a:
c7:24:74:a6:22:e1:1b:70:4c:ca:c2:6d:fe:05:d9:
e0:51:e1:8d:da:c4:6b:f1:a7:a4:26:4a:7d:15:80:
97:c2:1a:ab:d5:50:45:12:1b:74:2b:3b:9a:63:4c:
99:84:a3:49:06:af:7f:44:19:ec:3a:38:17:7d:d1:
bc:1a:3a:46:b7:d7:fe:b3:93:6c:e9:09:20:cf:be:
35:03:59:44:11:1e:ac:88:d9:0f:c3:29:91:84:52:
09:c6:1f:0e:0f:20:93:be:e8:ab:78:4e:50:57:e2:
dd:88:14:07:87:d6:be:d7:41:f0:32:58:d3:f3:b3:
d4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F4:9E:64:95:46:CF:A9:CC:37:F1:D5:6A:F3:31:F4:03:97:66:2E
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/F_SeZJVGz6nMN_HVavMx9AOXZi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
178.236.243.0-178.236.244.255
178.236.246.0/23
178.236.253.0-178.236.254.255
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fe:e4:82:59:16:b4:64:0a:98:26:02:ab:02:d5:2e:e7:c4:
aa:e7:f9:4e:46:07:00:ef:95:a7:bf:05:2a:f9:f6:30:93:05:
5e:0e:58:e7:c1:cc:5a:62:01:9b:28:89:87:b5:84:d9:f0:ec:
cd:cc:10:22:b1:fc:2a:2c:a9:9d:d2:16:26:4c:43:95:f7:c8:
ba:df:06:1b:dd:8d:13:d7:9a:a2:6f:21:d4:20:5a:af:0a:5b:
45:68:42:29:46:e5:4a:9a:80:05:bf:d8:4c:c2:02:2f:ad:65:
bc:24:b8:e4:09:39:1f:aa:59:a9:88:af:55:df:ae:91:ac:9e:
a6:97:d5:97:8a:46:c5:e4:56:df:50:f0:51:bf:29:a0:0b:2f:
4e:28:e7:6e:4d:c7:39:a4:e8:cc:3a:42:78:d0:ec:1b:ba:0d:
55:d3:02:7f:11:90:fa:e2:eb:e8:65:d3:83:67:e8:a7:a3:29:
57:5c:a6:2a:d8:b5:1a:9c:ca:cd:bb:e0:fe:41:99:35:e5:d7:
c3:40:f9:22:c6:95:b5:b2:57:b6:a3:c4:b1:ed:52:d8:d0:1a:
8a:bb:a1:15:b7:4d:51:99:72:71:b9:75:60:95:f2:ce:d8:9d:
1b:55:f8:ef:b3:33:fb:28:bb:98:14:89:cd:3a:0d:85:f4:67:
09:86:f6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 17:44:57 2023 by rpki-client on console-ams.rpki-client.org