Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/50UpfV_IqBAXzV2TcEv79m7ob1A.roa
File: 50UpfV_IqBAXzV2TcEv79m7ob1A.roa (raw, json)
Hash identifier: 2wiH0+ykFOyNx27hKJw0eVojGoH6efK7fBZ3Fy+VETk=
Subject key identifier: E7:45:29:7D:5F:C8:A8:10:17:CD:5D:93:70:4B:FB:F6:6E:E8:6F:50
Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Certificate serial: 01856F547456480A428D767828A7324A2049
Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/50UpfV_IqBAXzV2TcEv79m7ob1A.roa
Signing time: Sun 01 Jan 2023 21:54:43 +0000
ROA not before: Sun 01 Jan 2023 21:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34259
IP address blocks: 91.195.120.0/24 maxlen: 24
91.195.121.0/24 maxlen: 24
193.111.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:74:56:48:0a:42:8d:76:78:28:a7:32:4a:20:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1
Validity
Not Before: Jan 1 21:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e745297d5fc8a81017cd5d93704bfbf66ee86f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0c:ab:02:75:c9:d3:58:88:6d:bf:56:8c:84:
84:57:cf:16:96:09:f9:3f:b2:c4:df:29:77:30:a7:
67:37:2d:b2:e3:01:1d:36:3d:c4:ce:0b:b8:85:3c:
6e:31:33:32:8a:81:02:e7:b6:07:ff:52:32:62:c0:
f4:27:98:de:6f:6e:c3:ab:e3:05:8f:a5:2c:91:53:
75:eb:aa:83:b1:54:a9:b9:8e:75:5d:ee:09:2c:3a:
d9:2b:04:ef:1a:35:96:98:4f:f1:bc:8c:02:bb:d2:
be:28:95:3c:e3:8d:71:88:8e:90:ac:ce:30:a1:d4:
85:35:80:a6:cb:fb:5f:13:50:77:d8:88:9a:4e:6d:
44:28:29:fb:96:9b:9c:25:27:0f:e1:dc:26:22:6f:
c5:3b:b8:cd:75:b7:62:19:92:12:98:da:66:d4:62:
e7:74:38:94:e1:55:d5:df:7f:c7:8b:4a:cc:cf:64:
66:aa:f0:8e:21:92:2d:13:71:17:eb:bc:a3:eb:80:
44:cc:e5:e1:21:bb:77:cb:fa:50:da:ec:e7:2c:b4:
06:c3:b3:c4:a9:79:6b:a2:35:e7:44:26:5a:e4:6a:
fd:29:34:04:77:ac:6b:08:01:72:e6:c5:6c:25:44:
16:4d:9c:f2:4c:18:55:1c:07:e7:f9:a7:f3:65:7c:
1e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:29:7D:5F:C8:A8:10:17:CD:5D:93:70:4B:FB:F6:6E:E8:6F:50
X509v3 Authority Key Identifier:
keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/50UpfV_IqBAXzV2TcEv79m7ob1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.120.0/23
193.111.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:66:d4:9b:88:c3:32:8b:ac:4f:f9:ae:7f:bd:c2:9b:6d:e7:
86:20:c3:f6:2d:39:35:23:31:78:91:c7:29:46:dd:93:0a:05:
11:72:37:f5:ee:37:de:70:37:39:8a:45:a9:0a:3b:5b:46:ad:
33:53:11:40:67:79:c0:51:29:6e:4a:3f:2a:90:42:ac:dc:d8:
6e:40:c5:fc:5a:1c:e1:a8:41:78:58:9f:99:b2:03:2b:98:4b:
9d:9c:84:17:b8:e6:8e:dc:4f:d1:c9:ac:3e:22:8f:20:eb:63:
0d:33:a5:9a:fa:d3:7e:4b:90:7e:52:30:18:b4:4b:2c:28:b8:
78:ef:72:bf:67:ee:2f:d9:52:fd:0a:f1:5a:2c:7e:f2:e0:51:
67:c5:ea:15:55:1c:5e:81:e1:e9:5b:ef:37:35:14:11:84:97:
f1:30:fd:87:0c:f6:40:c5:8c:6e:16:ff:e7:9c:e6:ff:d7:8d:
f0:2d:dc:68:b9:a8:c0:ac:b0:f2:a5:7d:60:0e:b1:ca:f4:67:
f2:77:fe:78:cc:63:62:39:e1:b5:5d:fe:5d:30:ed:98:8f:12:
d9:b8:59:b5:56:61:93:f3:5e:31:42:cf:37:d4:55:f9:d9:14:
9a:1e:85:42:99:d9:37:71:52:ea:bb:27:12:15:7a:83:74:43:
3f:85:e3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:55 2024 by rpki-client on console-ams.rpki-client.org