Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/jMOsX-MbHlRkFvmm-Xqlff_DxdY.roa
File: jMOsX-MbHlRkFvmm-Xqlff_DxdY.roa (raw, json)
Hash identifier: 66bi8elpd8zN7gVEkC6yKaZBEfOmeGbQM+rbCgAAnsw=
Subject key identifier: 8C:C3:AC:5F:E3:1B:1E:54:64:16:F9:A6:F9:7A:A5:7D:FF:C3:C5:D6
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 01883E2BE73A53C2AB42A06D07B340B34D18
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/jMOsX-MbHlRkFvmm-Xqlff_DxdY.roa
Signing time: Sun 21 May 2023 11:57:24 +0000
ROA not before: Sun 21 May 2023 11:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51961
IP address blocks: 178.236.246.0/24 maxlen: 24
178.236.244.0/24 maxlen: 24
178.236.243.0/24 maxlen: 24
178.236.253.0/24 maxlen: 24
178.236.247.0/24 maxlen: 24
194.59.186.0/24 maxlen: 24
178.236.254.0/24 maxlen: 24
94.228.168.0/24 maxlen: 24
94.228.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:2b:e7:3a:53:c2:ab:42:a0:6d:07:b3:40:b3:4d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: May 21 11:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cc3ac5fe31b1e546416f9a6f97aa57dffc3c5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bd:bb:26:7f:d4:bb:94:aa:d5:be:bb:0d:c5:
2c:63:0f:0a:92:7b:b8:fd:03:de:c1:66:e8:f4:98:
82:fb:f9:c7:25:c4:4d:99:18:ae:71:7c:5a:ed:16:
fb:27:76:7d:5c:e3:95:3d:b7:93:fa:d0:7d:b7:8f:
88:6c:af:56:e7:94:6b:11:79:73:da:b7:a3:b1:00:
c7:ab:0a:33:dc:0a:bd:c6:f0:87:6d:c4:30:c6:e3:
d1:f4:40:c6:ca:d3:6e:73:e4:be:64:3f:56:75:bd:
96:12:91:22:72:56:dc:0c:41:88:f2:cb:10:af:d5:
65:7d:ea:cb:81:54:db:83:04:63:5e:d6:7d:25:0f:
4c:ed:00:b7:6e:93:6a:e7:bc:ad:b9:59:92:f3:a7:
95:7f:47:01:a2:b7:82:c6:14:66:29:64:9d:d8:28:
49:91:db:a2:de:a8:fd:00:3a:b6:05:5b:e5:c0:da:
f2:fc:54:93:c6:7a:ed:bd:d2:8f:a0:66:fa:23:54:
a7:61:bb:3c:12:c0:9b:c1:10:41:e7:19:4a:fd:b5:
f4:9a:6b:ab:49:2b:11:76:b3:03:fa:23:03:26:8c:
53:25:53:51:b0:f4:9a:13:7d:f9:93:eb:5d:19:70:
84:de:95:84:29:d5:da:30:8e:a7:02:23:a9:02:70:
e1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C3:AC:5F:E3:1B:1E:54:64:16:F9:A6:F9:7A:A5:7D:FF:C3:C5:D6
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/jMOsX-MbHlRkFvmm-Xqlff_DxdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.168.0/23
178.236.243.0-178.236.244.255
178.236.246.0/23
178.236.253.0-178.236.254.255
194.59.186.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b9:82:38:0a:c2:a3:11:e8:1e:00:68:a2:d1:29:81:fa:ab:
ff:0c:23:71:b5:7d:0b:40:a2:06:9b:f0:55:c1:78:c7:7f:ee:
62:7f:20:c3:b1:9c:f1:cd:c3:18:d5:20:23:bb:62:36:e1:e4:
8c:ad:98:b7:d3:12:c8:47:3f:1d:53:0c:4a:7e:0c:0c:08:a6:
e1:52:07:50:29:58:e1:cd:53:0a:4c:62:ca:c5:8d:93:1b:7c:
62:71:f1:50:b3:51:2c:fc:43:46:05:41:a4:da:f1:80:57:80:
32:12:5f:d0:ee:b7:40:04:d4:07:73:f3:11:1f:28:ff:c5:a1:
ce:c5:59:5c:3e:63:83:a3:7e:03:b0:89:98:c4:06:e6:f1:64:
57:e8:81:c3:c6:ec:4f:21:45:e0:a8:ac:ec:db:bf:92:ae:fc:
15:88:cf:c0:eb:26:56:e1:ee:66:de:15:75:a8:d4:78:5d:cb:
09:54:2c:fd:d6:66:cb:f3:35:7d:c8:bd:03:5c:52:48:cf:d6:
cd:00:dd:61:a9:4b:9d:85:0b:67:98:45:83:43:25:0a:2a:6e:
d6:7a:77:68:1d:5d:30:2e:00:d7:71:97:83:e0:b2:bb:19:cc:
3b:0e:64:07:97:5e:77:4a:e6:4b:e2:8d:48:4a:98:2b:9c:d7:
ad:8d:b7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net