Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fDYZagkM0hwZ_Xm_xXNY1aXBxpw.roa
File: fDYZagkM0hwZ_Xm_xXNY1aXBxpw.roa (raw, json)
Hash identifier: +AEq3RVLmVoG1phc0uDtL9LmpJ0bt+1obcj7O/nJOLY=
Subject key identifier: 7C:36:19:6A:09:0C:D2:1C:19:FD:79:BF:C5:73:58:D5:A5:C1:C6:9C
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01883E2BE7E3D86EB559F1A704B88B6B9F4E
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fDYZagkM0hwZ_Xm_xXNY1aXBxpw.roa
Signing time: Sun 21 May 2023 11:57:24 +0000
ROA not before: Sun 21 May 2023 11:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199417
IP address blocks: 94.228.162.0/24 maxlen: 24
94.228.163.0/24 maxlen: 24
94.228.164.0/24 maxlen: 24
94.228.165.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:2b:e7:e3:d8:6e:b5:59:f1:a7:04:b8:8b:6b:9f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 21 11:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c36196a090cd21c19fd79bfc57358d5a5c1c69c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:07:7b:22:15:7a:9a:fc:98:0e:76:dd:d1:
54:6b:e6:00:46:4f:9a:04:81:07:c0:13:cc:58:3a:
71:ce:40:43:df:ad:79:a4:9d:09:e6:cd:26:ca:e0:
a7:88:ed:d7:53:87:ce:62:fa:9e:eb:78:fe:f7:33:
ea:b8:17:16:f5:f9:3e:63:b2:b0:cb:7d:82:ea:85:
fd:2d:01:c8:32:c1:b4:df:2b:23:3c:00:b0:da:43:
39:5d:07:d1:bd:5f:c4:f1:7d:ea:9d:55:f4:a0:7a:
43:b8:bb:25:79:91:10:ec:be:19:7e:05:fd:fc:4c:
2c:75:94:61:db:81:35:53:64:a7:41:5c:06:92:87:
14:f0:79:15:e6:73:32:bd:64:4b:75:91:d1:6d:fe:
a2:5a:e3:cf:cd:81:70:57:40:89:45:07:79:10:3e:
c2:38:0c:ee:b3:7a:55:1a:27:98:34:6e:b8:c5:10:
37:cf:c8:0f:8d:f0:a6:0e:24:3c:3b:92:96:e9:6e:
d5:6e:db:c4:40:b3:bb:8c:1c:1c:0b:74:24:a9:19:
a3:cf:9d:fd:ba:6a:b8:40:b6:3d:0e:28:61:81:5a:
8c:35:b2:3d:a8:a4:de:c3:4e:f9:7e:a2:d0:a6:bc:
07:01:ba:63:07:bb:f7:1f:9d:83:d5:ce:d2:6b:63:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:36:19:6A:09:0C:D2:1C:19:FD:79:BF:C5:73:58:D5:A5:C1:C6:9C
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/fDYZagkM0hwZ_Xm_xXNY1aXBxpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.162.0-94.228.165.255
94.228.170.0/24
Signature Algorithm: sha256WithRSAEncryption
95:a7:f3:bb:3b:40:1a:55:e1:57:78:50:08:de:ae:18:6b:af:
b6:6c:51:19:fe:45:fc:bf:a4:d6:3c:2e:68:a2:84:19:fc:97:
81:87:54:5e:e0:af:fa:ff:00:42:1d:b5:9f:96:70:85:66:f9:
13:09:e5:fb:10:9b:c3:6a:12:dc:f0:ee:cc:ee:23:57:8f:e6:
a4:e8:ec:1e:91:74:cb:67:fc:c1:9d:34:b4:83:08:86:46:9c:
d3:c1:58:e0:4c:05:8b:9b:66:be:83:3d:df:1a:1d:41:60:59:
c3:bf:e1:11:c0:bf:fa:b6:52:0d:2b:0c:94:84:f0:e8:40:b6:
2a:9a:c2:5b:f4:df:a9:ec:34:c4:28:14:1c:8d:26:8f:2e:72:
cf:25:a9:de:07:cb:46:5e:15:24:36:00:9e:8a:b4:7a:4a:15:
32:29:eb:49:3b:7b:3f:32:b4:45:cd:8e:87:b4:df:89:69:8a:
37:a7:58:6f:cf:e1:ed:33:c1:d6:b8:a4:01:40:88:8a:b2:79:
be:0b:2b:37:5b:ee:30:29:a3:f8:64:b7:ce:0c:67:dd:d9:dd:
a0:a1:b9:17:db:97:59:be:72:2f:96:08:c9:b9:2a:6f:a2:e9:
33:26:3c:0f:45:d8:52:08:8d:ba:e3:67:01:22:55:b8:2b:e8:
a0:ae:e6:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net