Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6lWCnD1FKLKFHgGAktu1TS4Na0U.roa
File: 6lWCnD1FKLKFHgGAktu1TS4Na0U.roa (raw, json)
Hash identifier: x98GCnwSfXyXHEJycZwbAeRkmN6m6XEadW0cfYeLUdI=
Subject key identifier: EA:55:82:9C:3D:45:28:B2:85:1E:01:80:92:DB:B5:4D:2E:0D:6B:45
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185717099F01BE0DA4D2218D025FDCCC4FC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6lWCnD1FKLKFHgGAktu1TS4Na0U.roa
Signing time: Mon 02 Jan 2023 07:44:42 +0000
ROA not before: Mon 02 Jan 2023 07:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:70:99:f0:1b:e0:da:4d:22:18:d0:25:fd:cc:c4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 07:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea55829c3d4528b2851e018092dbb54d2e0d6b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f1:75:b3:41:f8:d4:7d:68:21:d6:a4:ed:fa:
e9:f8:34:cd:c9:f4:87:8b:a2:3b:43:14:04:cb:c2:
0a:52:33:c5:0a:96:33:d9:58:78:c8:68:cd:c5:c8:
63:d3:5e:93:48:85:cb:c4:91:c6:a4:7e:23:ab:fc:
af:a4:7d:86:53:20:16:bc:7c:16:f6:c5:1c:80:14:
60:86:3c:42:fa:fc:2d:2e:e0:c6:c6:aa:45:a2:5c:
ac:dc:a9:62:95:37:50:b8:9b:b2:3d:a2:0b:ce:23:
7e:04:3a:54:38:70:c8:dc:f9:1a:c0:29:80:83:42:
cb:f7:62:5b:b7:67:9e:ec:a6:11:ae:09:03:14:dd:
f2:b2:76:9a:aa:4a:40:7f:c8:c9:21:d9:df:40:27:
27:55:d6:aa:c1:70:b4:c1:29:3b:81:f8:9c:02:28:
4c:e3:78:bc:57:63:74:c3:99:1f:ac:27:5e:75:88:
4e:95:27:33:17:e7:6d:e8:ca:96:41:42:0d:6a:37:
a4:14:d5:c8:22:e4:16:5e:6b:36:1a:6b:7e:06:19:
21:d2:f5:8b:40:2a:20:99:3e:65:fe:5b:17:f0:e2:
40:78:ec:3d:db:20:ce:5e:8f:33:4c:39:f2:0f:96:
9c:81:4e:42:c5:8e:ea:cc:d2:aa:f9:47:28:1a:d9:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:82:9C:3D:45:28:B2:85:1E:01:80:92:DB:B5:4D:2E:0D:6B:45
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6lWCnD1FKLKFHgGAktu1TS4Na0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
04:c1:f6:e9:59:2d:84:63:2b:29:d3:cc:31:39:40:8a:d8:6f:
7f:a6:ec:4d:d9:7b:5f:07:94:8d:45:5f:6e:87:d0:dc:e7:cd:
e2:1f:7c:1b:39:e2:33:d1:15:0f:84:ab:01:40:cc:b7:73:cd:
76:3a:6e:ad:6c:03:86:78:c8:06:f2:67:fe:b8:21:e9:14:b5:
ae:89:d4:66:69:ae:c7:69:26:cf:ea:5c:cd:8b:cd:df:31:46:
7c:da:c4:2d:fc:2d:27:c5:e6:43:7e:5b:af:e3:b4:0b:9a:3a:
8b:74:90:9d:e8:e4:cc:b8:11:8d:79:a9:8e:36:49:ff:7c:5c:
fd:96:81:f7:5f:01:fe:c6:ec:77:19:dd:68:85:9b:0c:c9:e8:
c1:0b:fa:47:a5:33:4f:3f:8f:34:df:8a:80:1f:4d:15:46:91:
bf:e3:b4:14:37:aa:24:b8:e6:dd:b5:63:0c:58:5c:0a:b5:43:
f4:9e:65:e3:9c:a9:bf:7f:69:60:50:af:63:54:6a:c9:c0:50:
6d:9b:57:81:19:e5:93:9b:62:98:1a:cf:59:05:c1:1c:43:c2:
db:70:6a:a7:b5:d3:c4:98:03:8b:3b:61:1b:f0:d8:7c:e1:73:
74:fb:a6:a3:21:1a:fe:d3:1e:92:5e:63:c3:58:5c:f0:4b:92:
7c:d7:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:55 2023 by rpki-client on console-ams.rpki-client.org