Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/UTJjXpu04HqR0U7rp4fwFoAym7E.roa
File: UTJjXpu04HqR0U7rp4fwFoAym7E.roa (raw, json)
Hash identifier: eiSPhLdxZPeysmwtqJkw9dwPtuwVF4BhUNSjdTZG5kQ=
Subject key identifier: 51:32:63:5E:9B:B4:E0:7A:91:D1:4E:EB:A7:87:F0:16:80:32:9B:B1
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 0189D6174ED73069966BBAAF67105E075BC0
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/UTJjXpu04HqR0U7rp4fwFoAym7E.roa
Signing time: Tue 08 Aug 2023 16:59:58 +0000
ROA not before: Tue 08 Aug 2023 16:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 178.236.246.0/23 maxlen: 23
94.228.160.0/22 maxlen: 22
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 19:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:17:4e:d7:30:69:96:6b:ba:af:67:10:5e:07:5b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Aug 8 16:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5132635e9bb4e07a91d14eeba787f01680329bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:92:00:5e:77:d3:3c:2f:56:de:16:f4:54:
0d:8b:ef:76:92:a3:b9:de:31:22:77:88:39:71:2a:
57:b0:57:97:a5:6c:07:8b:04:a3:36:e9:d2:45:fb:
b7:b8:29:ba:a1:4b:b1:7c:44:93:76:ac:f4:59:6d:
e6:3a:33:db:ea:b6:7f:fa:22:af:40:b1:e0:66:3d:
f6:39:02:a4:34:95:e9:89:30:f8:33:23:1b:42:a5:
98:0c:5c:e7:74:d8:62:12:14:86:19:6c:58:17:a1:
dd:42:a8:89:e4:6e:39:b1:2e:26:9e:e0:9f:bb:59:
f9:c2:d3:62:33:08:c3:81:cd:53:e0:76:6f:76:cf:
5c:f5:03:f5:21:a1:50:f5:5a:62:ed:a2:3f:83:5c:
4f:e3:0d:f5:81:2e:c4:c4:51:b2:ba:1d:ef:e5:b4:
88:9f:be:ce:3b:19:99:c4:34:fe:a1:34:f6:94:0b:
c6:24:16:e4:cb:d4:90:65:e4:c6:db:e9:90:3a:a3:
03:26:98:f5:5a:41:97:49:20:8a:f6:45:1d:d1:fb:
cf:81:d7:7a:44:b7:0d:f3:3f:2a:90:2a:8c:44:bf:
04:4f:17:ad:87:82:d2:59:fc:dc:1f:38:58:b4:8f:
c3:17:c2:d2:af:84:05:d5:a3:bc:84:00:4d:00:e5:
49:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:32:63:5E:9B:B4:E0:7A:91:D1:4E:EB:A7:87:F0:16:80:32:9B:B1
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/UTJjXpu04HqR0U7rp4fwFoAym7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.160.0/22
94.228.168.0-94.228.170.255
178.236.246.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:25:84:ea:ba:e8:5a:71:6e:76:a5:03:8e:d7:2f:10:17:c6:
79:fb:8b:64:19:35:ae:9f:2e:bc:19:64:a2:44:0e:2d:d1:62:
18:89:d8:cc:1f:2a:39:0c:80:f1:ca:4c:17:be:c7:0c:cb:7a:
78:36:e9:6b:79:94:f4:f3:14:ad:ad:72:f0:bc:83:49:98:ee:
d4:eb:18:7a:ed:ac:a0:0e:27:c4:c6:1d:90:cc:af:d3:45:13:
20:15:3f:06:a2:f7:d3:d5:e3:9e:93:80:80:2e:98:8f:e7:12:
57:20:86:5d:f8:91:0f:38:11:cc:7a:b2:f8:f3:19:cd:30:6a:
6a:07:84:38:e9:d9:a8:ab:a4:89:be:f7:b2:50:dc:e8:03:11:
ac:f9:11:76:5f:bb:a6:18:ba:67:9c:d9:f1:de:20:64:5d:e5:
5a:e8:a9:98:e9:6d:f6:2f:a2:40:61:9f:00:b7:11:be:92:90:
7d:23:ec:be:2d:81:6a:44:7e:e5:70:3f:7c:87:01:13:a5:72:
0f:c0:28:31:07:33:ad:34:c9:94:a3:7e:99:7b:2b:a6:fc:b2:
ed:09:03:ec:3b:a8:ca:6b:64:5f:75:3c:46:85:1b:2c:67:10:
5f:b6:52:e3:16:aa:f0:9a:52:99:b8:eb:a5:69:b0:b5:6a:bd:
7c:6e:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:16 2024 by rpki-client on console-ams.rpki-client.org