Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6JAIz1iyDoVERg6BCFyz-UjKzZQ.roa
File: 6JAIz1iyDoVERg6BCFyz-UjKzZQ.roa (raw, json)
Hash identifier: JbUwPLTipTCbXJ+I3Mv8Nw2AKN2/YivhYlNv7Cw+VuM=
Subject key identifier: E8:90:08:CF:58:B2:0E:85:44:46:0E:81:08:5C:B3:F9:48:CA:CD:94
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0191E1DA0D4C63B07DD21BC91D864BBCF9D1
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6JAIz1iyDoVERg6BCFyz-UjKzZQ.roa
Signing time: Wed 11 Sep 2024 16:10:49 +0000
ROA not before: Wed 11 Sep 2024 16:10:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400377
IP address blocks: 194.50.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 17:04:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:da:0d:4c:63:b0:7d:d2:1b:c9:1d:86:4b:bc:f9:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 11 16:10:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e89008cf58b20e8544460e81085cb3f948cacd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:e5:60:20:d1:82:a0:63:3e:2f:91:63:db:
4a:db:20:c7:70:d2:25:be:90:bb:27:28:ea:c9:f0:
b7:f9:40:df:de:a6:46:52:8f:b0:de:66:60:82:83:
ca:c4:6a:89:9f:cb:91:c2:dc:a9:85:e1:36:61:a6:
0d:71:fc:76:14:d1:6c:d5:ec:71:db:16:25:a1:8b:
40:4b:9f:f3:81:b8:b9:5f:a8:cb:a3:c1:a3:f4:e6:
94:a6:ef:aa:3f:42:1b:25:f3:50:1d:71:1f:27:07:
ed:8a:b8:68:d7:dd:9e:e0:68:26:9d:fd:e1:1d:75:
ae:59:08:2e:79:fe:b9:b5:5f:26:4b:d7:0c:31:6c:
2f:4e:76:b6:0e:f8:7e:4d:58:a6:7e:8b:5d:a3:6a:
f5:ba:68:35:9e:14:7f:15:ad:77:f8:ef:d5:f8:25:
74:58:fb:f1:c9:95:35:76:cf:13:9b:f1:d8:78:73:
43:03:b8:9e:5f:7a:11:bb:9a:9e:1c:06:86:37:ea:
3e:08:a5:5a:b7:08:df:3c:d7:7a:70:d2:df:1a:bc:
d2:91:db:bf:f2:ef:d8:a6:c2:c9:08:20:51:e4:ec:
29:1f:29:dc:d0:10:3c:28:be:39:48:14:91:e1:c6:
97:b0:57:c7:48:4f:74:a2:3b:e0:82:ad:25:c6:85:
73:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:90:08:CF:58:B2:0E:85:44:46:0E:81:08:5C:B3:F9:48:CA:CD:94
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/6JAIz1iyDoVERg6BCFyz-UjKzZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:46:19:f8:74:ad:21:ce:c1:9c:ad:2b:8c:c9:ed:41:8c:fb:
83:92:e8:82:ff:ad:af:2c:68:79:bd:98:18:c0:e9:8a:3f:05:
41:f8:30:6d:34:b6:d2:1f:8c:0f:56:d8:1f:39:bc:0b:f7:f5:
12:ce:33:6c:66:6e:b2:71:83:24:1b:85:5d:44:8c:5c:7c:b3:
83:8b:d6:b3:8e:5b:9b:30:ff:3c:85:8f:bf:82:bd:ee:dd:f7:
b5:c9:cc:c0:0d:07:62:ef:ee:d4:ad:c5:5c:e6:c7:3d:e8:78:
67:cb:de:e3:e0:e7:ab:96:91:77:0f:5e:d9:b6:d5:d7:cb:65:
05:7c:28:02:b6:a0:42:1d:46:24:44:38:2a:2b:6f:f3:86:b9:
7d:fa:35:9a:b3:f8:9d:c8:c3:37:eb:15:a2:3c:00:22:df:81:
df:dc:3e:21:b0:c2:6f:b0:a6:98:cd:d3:37:5d:4f:00:d2:3c:
90:6d:9d:3a:28:e8:1f:9b:db:27:c2:a4:6b:3e:b2:88:c0:50:
04:9a:7c:58:79:e8:62:5a:64:c6:b8:6d:99:ac:97:8e:4b:92:
61:d5:61:8f:3b:64:33:e6:64:b2:63:32:86:0c:a2:c7:13:fa:
5c:f4:e9:f7:14:b4:c2:51:0a:e7:aa:16:47:5e:aa:d2:16:23:
48:36:75:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org