Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VV49ePeHIkSzNuLvSK2lCVYjKLA.roa
File: VV49ePeHIkSzNuLvSK2lCVYjKLA.roa (raw, json)
Hash identifier: jYEEhmVcJLMmEMItWQSkaLmx8kQWveoRO7svDVkUqrA=
Subject key identifier: 55:5E:3D:78:F7:87:22:44:B3:36:E2:EF:48:AD:A5:09:56:23:28:B0
Certificate issuer: /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial: 018571A79FBF8CE16AA51CCE0C54A9E0907F
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VV49ePeHIkSzNuLvSK2lCVYjKLA.roa
Signing time: Mon 02 Jan 2023 08:44:48 +0000
ROA not before: Mon 02 Jan 2023 08:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41960
IP address blocks: 194.50.3.0/24 maxlen: 24
194.49.111.0/24 maxlen: 24
194.49.116.0/24 maxlen: 24
194.49.115.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:9f:bf:8c:e1:6a:a5:1c:ce:0c:54:a9:e0:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Validity
Not Before: Jan 2 08:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=555e3d78f7872244b336e2ef48ada509562328b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:29:88:7c:c1:a5:cd:2c:c5:19:23:a7:6f:
8c:d0:51:b5:41:45:b1:c1:b1:1d:62:90:7c:6f:fb:
6a:27:e4:79:c6:9c:9d:06:06:24:8f:37:bc:8d:35:
a0:57:37:a9:f7:86:fc:27:bf:e6:79:19:7b:ec:b2:
11:f0:a4:68:08:6c:13:3f:86:7e:fc:d8:b9:ed:08:
69:df:59:df:b4:f8:e6:c1:e7:7f:d4:54:c8:6d:d1:
4c:c1:99:bd:24:79:68:6e:af:73:d4:13:9d:3d:3c:
52:d4:97:f0:14:b7:6c:62:e5:53:d0:38:79:6a:a0:
11:bd:26:15:6e:68:5b:c4:b9:44:49:b5:4b:2a:df:
12:e1:77:b7:41:a0:a7:88:2b:73:1e:0c:91:c7:15:
3d:be:e9:1b:0e:12:e9:47:37:ec:c2:a1:dd:21:79:
d7:2d:92:cd:40:93:cf:a1:af:48:89:eb:d5:d5:99:
47:39:1c:ec:93:17:8d:37:b7:b7:e6:d9:e4:0e:a8:
8f:9c:91:51:ea:99:85:8c:91:17:6e:ed:b9:31:4f:
d8:6f:fe:dc:38:e4:f1:35:06:87:a7:38:a8:8c:59:
7c:47:13:05:7f:35:df:81:81:f5:bc:c0:ac:f2:5d:
2b:ee:a6:b6:be:f1:fa:36:6e:4c:51:24:6d:e5:b8:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:3D:78:F7:87:22:44:B3:36:E2:EF:48:AD:A5:09:56:23:28:B0
X509v3 Authority Key Identifier:
keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/VV49ePeHIkSzNuLvSK2lCVYjKLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.111.0/24
194.49.115.0-194.49.116.255
194.50.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:18:ce:7d:09:5f:43:33:8c:cf:b7:30:87:85:af:fb:b1:07:
25:c4:55:8d:80:20:f3:8f:c6:e8:ae:d9:0d:60:ea:01:cb:cc:
8b:2a:fb:28:6e:46:c4:00:ff:13:65:e8:c6:7c:2e:ac:6b:54:
2c:50:8d:43:26:61:b7:e7:a2:e5:e2:7d:38:54:2b:d3:fb:56:
7d:ae:be:03:af:2d:b5:68:61:f4:a1:8d:95:eb:b2:51:ef:13:
8c:fe:cc:6d:11:c1:3a:9f:c7:a5:3f:89:38:9a:9c:d8:77:cf:
60:b7:a9:65:a5:6a:c7:f5:ee:81:f1:1e:c5:94:5d:c7:f9:bc:
aa:68:a1:16:22:58:48:b4:cd:79:ad:ab:86:5e:67:2d:4c:ce:
ce:35:3d:fd:5f:b6:17:ce:91:88:a7:5e:6a:e2:17:c4:74:2d:
e5:87:22:70:a5:ef:d2:f5:c3:63:cd:9c:b2:f5:22:d6:79:de:
dc:fa:fb:22:52:62:98:17:e5:0b:94:66:f2:b7:b6:81:8d:5b:
69:a6:f1:f0:31:43:9e:71:01:e2:69:38:16:2d:d8:a4:e8:82:
e1:b5:61:32:6c:b8:f8:b1:63:ed:77:f6:35:ca:e7:76:ca:1d:
12:c4:ac:e2:db:b7:48:ff:d1:f4:4d:8a:9e:d1:fe:10:2b:72:
1b:7f:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:02 2024 by rpki-client on console-fra.rpki-client.org