Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7sPlXzcBT81_GQLIyFDcChm3HI.roa
File: A7sPlXzcBT81_GQLIyFDcChm3HI.roa (raw, json)
Hash identifier: 6hlP5DzKDxM/6RIHDZ9DV/C7jRMmg/xhlH81LnHMCsk=
Subject key identifier: 03:BB:0F:95:7C:DC:05:3F:35:FC:64:0B:23:21:43:70:28:66:DC:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BAC5F715F3B2CD362989D28D8BD512B4B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7sPlXzcBT81_GQLIyFDcChm3HI.roa
Signing time: Wed 08 Nov 2023 00:40:17 +0000
ROA not before: Wed 08 Nov 2023 00:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 194.50.111.0/24 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a10:ccc0:111::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:ccc0:110::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:5f:71:5f:3b:2c:d3:62:98:9d:28:d8:bd:51:2b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 8 00:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bb0f957cdc053f35fc640b232143702866dc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5d:7f:09:70:c4:eb:7b:fb:f8:43:0b:43:30:
34:85:ec:2d:59:ef:63:08:99:bd:61:bf:b1:1f:c2:
64:cb:88:f8:34:be:17:08:1d:6b:48:46:97:d7:d4:
48:6c:df:9e:cc:c2:31:53:88:52:6c:51:33:92:57:
3f:c5:f3:56:a0:3a:4a:6e:7c:c5:91:c5:8a:18:c6:
73:46:85:76:fb:23:95:c2:ec:9e:c7:6c:99:38:43:
3b:80:d2:1d:9e:db:09:91:50:e6:d0:a0:1e:a3:9b:
5c:15:f6:82:bf:39:33:5d:7c:5c:51:32:9d:cb:65:
3f:33:b0:02:09:19:22:b2:19:95:7c:64:a9:4d:79:
a8:9d:48:af:57:02:de:e3:e6:d2:49:9d:3c:b3:7a:
f0:10:bf:73:70:a3:84:09:64:ea:5e:69:51:b4:6e:
36:b4:54:21:2e:d0:60:4b:bd:f3:dd:33:cf:87:35:
ce:1b:39:53:61:12:03:19:4c:82:2f:0e:5b:05:ab:
60:97:d6:47:5b:ae:7f:75:f0:8e:9a:94:65:b2:f3:
7d:12:6d:e4:ea:f5:a1:fc:1f:a3:3e:0c:6f:70:b8:
84:36:7b:66:c6:e7:c7:6f:e3:22:43:6d:eb:c4:4e:
06:d1:94:f6:e9:9f:cc:40:7d:17:8e:8f:fc:34:62:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BB:0F:95:7C:DC:05:3F:35:FC:64:0B:23:21:43:70:28:66:DC:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/A7sPlXzcBT81_GQLIyFDcChm3HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/47
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
76:58:47:68:0f:c4:d4:7e:ba:46:84:0e:fb:c7:0a:54:1d:23:
0e:76:dc:d5:08:90:ca:6d:f0:5f:34:4b:2b:b0:89:e3:10:21:
c3:bd:f3:8e:c8:3d:0a:87:46:6d:24:ed:45:b3:32:43:ec:9b:
35:4e:1a:1e:69:62:8c:98:ba:70:0b:d9:e6:2c:85:b9:4e:8f:
e1:f1:b1:1f:53:53:70:86:7b:36:be:14:9b:0b:58:04:be:bc:
5c:23:d3:4a:3d:5c:98:8b:1b:64:79:66:12:47:2c:19:10:6c:
c8:3e:fc:94:f3:e3:94:f2:77:12:1d:d8:1a:b3:5d:48:6e:7d:
78:c2:99:be:20:af:c6:22:f7:f4:f4:06:16:f9:8a:84:7c:61:
0c:54:dd:98:35:0b:e1:57:20:e5:32:e8:2c:85:cb:a9:c1:43:
77:b7:9e:bc:7c:af:d4:e0:29:5f:b0:4b:e6:0a:e8:b4:e3:53:
59:95:2f:de:57:07:4d:d1:ca:58:3e:c5:e5:d8:a3:9c:0a:23:
a1:bb:aa:ff:ca:4b:05:4d:ad:07:8d:eb:b6:20:46:0a:43:a7:
95:ff:40:fd:fc:d6:32:23:53:e6:e8:b7:17:e9:a6:b0:b5:a3:
52:da:83:f4:28:07:a3:39:fb:e6:f9:e7:77:fc:b6:13:de:f2:
46:84:33:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 8 02:37:20 2023 by rpki-client on console-fra.rpki-client.org