Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Milws92UiVx7yqpXojhS4M0frPA.roa
File: Milws92UiVx7yqpXojhS4M0frPA.roa (raw, json)
Hash identifier: Fwt6e1nBAbGJ7UYzWbFKVxJ3bgjANv7AeK+MVV+u4PQ=
Subject key identifier: 32:29:70:B3:DD:94:89:5C:7B:CA:AA:57:A2:38:52:E0:CD:1F:AC:F0
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01919E5650D939683DEB580D2B1F1E3FF055
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Milws92UiVx7yqpXojhS4M0frPA.roa
Signing time: Thu 29 Aug 2024 13:32:22 +0000
ROA not before: Thu 29 Aug 2024 13:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20853
IP address blocks: 94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
178.236.246.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 10:56:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9e:56:50:d9:39:68:3d:eb:58:0d:2b:1f:1e:3f:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 29 13:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=322970b3dd94895c7bcaaa57a23852e0cd1facf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:13:86:36:fb:15:e6:ec:25:d6:dd:91:64:
c5:2c:60:e4:bf:d2:5f:10:a3:17:78:2a:89:3c:fe:
e6:24:19:ac:f0:21:3b:c6:3f:f8:cd:1c:db:b9:af:
b3:d3:db:26:b3:d1:6c:9f:a0:09:ab:b1:4f:45:98:
54:43:94:9c:f9:12:48:bf:26:95:75:88:f3:da:8c:
d7:2d:6f:6e:e2:dd:f7:62:52:f6:59:d1:2a:fe:76:
0a:62:2b:83:27:26:a9:e4:a3:6e:c6:5a:6f:7a:0e:
75:0f:6c:50:c3:83:b2:d6:c9:bc:c0:f1:fb:73:2c:
29:e3:09:c0:7f:6a:5c:30:9a:c2:2d:f1:ee:ad:43:
62:c1:76:41:8a:9b:68:7b:6d:8b:2c:9b:dd:88:93:
bc:63:5e:62:5b:32:ef:8b:cc:79:be:03:59:01:43:
41:38:99:2c:60:ff:8b:b3:5e:42:8d:29:b4:c8:d5:
e0:09:d9:b5:e1:ab:fe:36:83:fa:8a:c7:5d:70:d8:
c3:a1:b8:3e:17:e2:9e:35:1f:a6:2e:98:70:a5:cb:
f2:8a:3d:a9:8a:63:d3:9c:64:67:77:8b:94:41:a8:
11:51:63:02:56:32:1f:1d:7b:22:93:8e:cf:75:6d:
26:6d:73:c5:d5:7b:32:a1:22:1d:d4:01:9d:0b:54:
18:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:29:70:B3:DD:94:89:5C:7B:CA:AA:57:A2:38:52:E0:CD:1F:AC:F0
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Milws92UiVx7yqpXojhS4M0frPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
178.236.246.0/23
178.236.254.0/24
Signature Algorithm: sha256WithRSAEncryption
11:af:e6:b1:8b:f0:ed:54:7e:d1:a5:44:29:b9:77:50:1d:76:
11:c2:ea:b5:c9:45:82:aa:2d:77:6c:5b:46:1a:32:5f:ca:ae:
a3:23:0b:5f:07:c0:27:4a:34:de:ca:74:68:88:93:2c:26:9e:
14:3e:0b:9b:22:3f:a2:61:ff:d7:8f:7d:6e:b0:99:4d:bb:a0:
08:e3:c1:0a:ea:e8:0e:ca:44:dd:af:72:c2:5d:0d:02:31:05:
3d:cd:7d:82:13:9f:0b:bc:aa:fd:d9:aa:be:78:c0:64:02:79:
7f:50:fc:43:8c:51:b1:83:0f:5c:52:29:4e:bf:52:f5:54:80:
9c:fc:78:0d:fe:96:16:4b:62:f2:60:21:e8:47:79:bd:53:98:
44:b2:4c:0d:80:2c:4d:64:16:9a:92:b3:2c:bc:a2:75:8d:2c:
3d:ba:8f:eb:f4:95:0c:d1:fa:56:6a:d2:6d:8b:ef:04:2c:ad:
25:6d:d9:6a:a4:7f:a6:b6:97:96:43:31:9b:03:95:bf:e4:71:
56:15:2f:7b:eb:ec:58:c1:20:93:a8:2a:e0:f5:4a:5d:f9:98:
fe:e6:ff:bd:cd:33:43:d8:f7:03:73:47:64:53:10:6e:7f:35:
db:0c:97:9e:86:98:98:16:6a:04:f7:85:01:80:80:b2:e9:fd:
93:28:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 30 12:26:51 2024 by rpki-client on console-fra.rpki-client.org