Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lmsfiML-WEktxXBuW6Y8yDMvRo.roa
File: 0lmsfiML-WEktxXBuW6Y8yDMvRo.roa (raw, json)
Hash identifier: E/ppTyq/2CQQiYXfNwGX9tLau2w3LXbg8gG+vHcT5RA=
Subject key identifier: D2:59:AC:7E:23:0B:F9:61:24:B7:15:C1:B9:6E:98:F3:20:CC:BD:1A
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C42EDE1CEC1E51CAC39B49D0F0D4902DE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lmsfiML-WEktxXBuW6Y8yDMvRo.roa
Signing time: Thu 07 Dec 2023 06:18:55 +0000
ROA not before: Thu 07 Dec 2023 06:18:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48795
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:42:ed:e1:ce:c1:e5:1c:ac:39:b4:9d:0f:0d:49:02:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 7 06:18:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d259ac7e230bf96124b715c1b96e98f320ccbd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:3f:7e:c3:f4:a4:a1:0a:52:cf:af:41:32:
62:39:57:5e:6f:53:a8:c8:48:01:38:1d:79:79:14:
45:86:8e:45:79:dd:c2:bc:73:80:87:e3:4c:6a:f3:
92:b7:31:92:61:d1:65:20:48:32:f4:18:2c:9c:fc:
0a:04:1b:e2:4f:2c:e2:f1:29:c5:95:1c:43:ec:67:
5b:f8:35:b3:26:58:36:b3:8b:58:ce:97:bd:a3:a5:
b1:14:e2:40:85:42:3e:f0:39:e0:95:35:34:46:fc:
ad:90:8a:f2:b2:2a:f0:f1:f2:e0:db:37:0a:9a:58:
5f:f2:ef:4b:78:62:a0:9c:78:27:95:c1:1d:87:c4:
a9:5a:83:89:41:e4:70:f4:8d:8d:92:e4:b7:93:63:
30:dd:e0:3a:45:3e:fe:16:67:4b:50:94:ec:a2:ac:
f7:57:69:5f:4c:cb:65:46:f3:57:b4:8a:e9:51:95:
8e:cb:8f:20:3a:79:ac:96:54:9c:5d:48:52:13:08:
d6:7e:93:23:e0:f0:99:79:99:04:ce:e9:3d:74:fc:
5f:bd:08:ec:1c:e5:b3:c9:b1:bc:7b:21:57:45:cb:
2e:ff:09:41:d1:9c:35:30:22:8d:a0:a9:2e:a4:16:
74:37:ba:2b:3c:50:ed:d4:9b:70:c0:a2:1d:57:5d:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:59:AC:7E:23:0B:F9:61:24:B7:15:C1:B9:6E:98:F3:20:CC:BD:1A
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0lmsfiML-WEktxXBuW6Y8yDMvRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:02:57:41:6c:83:5c:6b:0f:c3:6d:0a:09:2e:75:27:b7:57:
b1:a9:b5:50:8c:64:60:e9:78:85:d2:fa:4f:91:32:9c:b0:78:
41:79:1f:d6:35:5c:91:e2:cb:d0:d0:36:8d:a2:11:67:22:06:
c5:8a:3b:f5:32:62:eb:26:b7:e5:4d:1e:d1:12:db:a6:67:16:
44:42:35:b5:22:46:06:52:74:a6:22:c9:cc:05:5e:b3:cb:e4:
9b:1c:ad:aa:dd:c8:8b:71:9a:64:91:64:7e:4b:77:1a:9f:f1:
94:86:80:cd:2e:ac:28:bc:ca:00:6b:3d:e8:fb:52:45:5f:99:
c6:34:7d:af:65:3f:ae:75:c2:bc:aa:f5:2c:34:8d:3e:68:8f:
2a:a5:de:c9:db:83:a9:96:8c:9c:68:70:3e:20:19:41:8d:ec:
74:07:69:91:26:61:76:fb:2b:ab:c1:3a:d8:22:ec:95:e2:12:
8b:4e:ae:0e:3c:d6:4e:04:f6:57:1b:54:06:c0:c7:13:07:0a:
25:31:95:cd:33:b4:02:8f:9c:16:1c:e7:02:85:d3:87:ee:bb:
9c:5b:30:2c:d2:9b:a1:4a:43:f8:6f:71:81:ef:15:6c:0e:31:
9c:20:d9:fd:a2:51:f0:14:a0:05:73:6e:60:f7:5c:b8:13:1b:
1d:c2:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 13:41:18 2023 by rpki-client on console-ams.rpki-client.org