Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RWOu3l0dacP1kLYGRZa5UzSzIno.roa
File: RWOu3l0dacP1kLYGRZa5UzSzIno.roa (raw, json)
Hash identifier: vdMBTiY/QcaVVzL8EW82VsUCpj7+I3i+hJcYNd/6wuo=
Subject key identifier: 45:63:AE:DE:5D:1D:69:C3:F5:90:B6:06:45:96:B9:53:34:B3:22:7A
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018A9D15DC72BE1D6921C55784F843324B55
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RWOu3l0dacP1kLYGRZa5UzSzIno.roa
Signing time: Sat 16 Sep 2023 08:22:50 +0000
ROA not before: Sat 16 Sep 2023 08:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 178.236.246.0/23 maxlen: 23
94.228.162.0/23 maxlen: 23
94.228.164.0/23 maxlen: 23
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9d:15:dc:72:be:1d:69:21:c5:57:84:f8:43:32:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Sep 16 08:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4563aede5d1d69c3f590b6064596b95334b3227a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0b:86:7f:5e:d9:87:ec:54:c9:5c:d7:94:80:
71:2e:e9:ef:1f:7e:fe:05:7c:db:62:68:e3:40:60:
10:a3:53:7b:e3:34:84:85:0c:36:6e:94:17:af:3f:
83:3f:f0:b5:67:2a:2d:3f:e1:ba:e0:7c:aa:fa:35:
e7:b4:92:3e:79:ec:80:fd:64:ce:79:20:92:e3:b9:
86:14:9d:11:4a:b4:41:f1:15:da:2b:3e:ad:7d:23:
8b:f6:07:ff:2d:4c:a2:de:74:4a:ad:af:df:ae:28:
26:b8:41:a8:a8:1b:2d:bd:2d:8e:da:83:d3:9c:77:
1c:39:2c:18:d4:33:05:62:2a:66:ee:81:6f:e9:cc:
1a:10:c7:74:c9:70:86:2e:51:d9:8f:ba:fb:1e:23:
f2:19:ed:c8:2c:93:ee:3b:aa:01:cb:5a:7c:5a:af:
20:50:f6:29:8a:67:47:fe:98:15:e2:3b:da:e3:62:
e4:58:e5:31:50:d5:bd:40:ff:2f:64:85:2c:d6:35:
43:2e:a4:b7:5e:ee:a4:b0:3d:59:f8:40:5a:95:24:
97:fe:c1:81:87:e2:36:e3:47:23:73:12:68:e9:ef:
5b:1a:84:23:bb:61:6d:76:d0:34:8a:13:9d:f3:20:
3f:a2:31:8f:5b:36:86:ad:2a:01:f8:ea:85:d9:ed:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:63:AE:DE:5D:1D:69:C3:F5:90:B6:06:45:96:B9:53:34:B3:22:7A
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RWOu3l0dacP1kLYGRZa5UzSzIno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.168.0/23
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
08:42:03:e1:23:57:6a:72:9f:0d:83:19:5d:c5:c9:10:73:77:
42:62:c8:18:88:95:cd:1c:14:a3:e4:d4:ce:1e:9c:f1:a6:aa:
69:48:0a:5a:e0:20:8c:77:ef:f6:98:d8:f7:fc:08:4e:bc:2d:
50:43:16:ac:37:7e:00:17:79:08:84:7b:f2:73:84:39:d2:81:
2f:b2:4d:b6:0d:90:2f:cb:71:34:0f:4c:8c:77:c0:41:2e:48:
69:a4:8e:23:c0:00:e7:e0:c9:6c:53:ac:7f:c7:17:db:9b:fb:
c6:01:8e:eb:77:29:d2:a6:18:3e:0c:32:30:da:71:78:1c:c9:
ce:c9:c1:bf:41:e9:41:ee:c1:87:13:01:28:b6:5c:ee:5d:23:
02:24:75:87:0d:e2:23:84:a6:1e:8f:36:45:33:6a:56:78:38:
9b:9d:02:19:63:df:a3:59:2e:0f:f5:da:d7:ad:1a:c2:fc:d5:
2f:22:46:7a:5d:c1:8e:6c:b4:1b:31:8e:72:35:9d:80:f8:01:
ec:1d:4e:ec:ca:9f:84:94:0a:6f:cb:29:fe:95:29:94:e7:1a:
0a:99:dc:6c:26:64:4c:30:5c:93:57:4c:b2:31:6c:1b:22:45:
92:80:5d:3c:f4:e6:fc:fa:c5:b7:38:72:82:d5:3a:38:c9:07:
af:78:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:27 2024 by rpki-client on console-fra.rpki-client.org