Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa
File: N_Qt4BAuMNW6C723GaaA82mLWGg.roa (raw, json)
Hash identifier: GpHO65kgjwI69jvvNdCm4CBCt3+m7SgomsdUMqJxuJ4=
Subject key identifier: 37:F4:2D:E0:10:2E:30:D5:BA:0B:BD:B7:19:A6:80:F3:69:8B:58:68
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185744D5EDCD4797E1484F40A462B0A6D90
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa
Signing time: Mon 02 Jan 2023 21:05:05 +0000
ROA not before: Mon 02 Jan 2023 21:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203790
IP address blocks: 194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Jan 2023 22:28:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:74:4d:5e:dc:d4:79:7e:14:84:f4:0a:46:2b:0a:6d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 21:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f42de0102e30d5ba0bbdb719a680f3698b5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:05:bb:ca:5d:50:9f:53:aa:e3:25:8e:60:
b3:6a:c7:09:40:7b:b7:48:45:34:5e:31:5a:6b:4c:
6b:bb:16:bd:c7:5c:81:2b:04:55:42:07:94:74:15:
ff:1c:16:cb:1f:85:1e:09:80:11:98:2b:c8:8d:3c:
b7:11:c8:76:03:0a:6c:ac:f4:d2:cb:9e:d9:88:27:
9d:4d:ec:ff:00:26:52:fb:65:25:41:82:14:2e:ee:
0b:5c:a3:68:e0:25:72:5c:bb:76:14:25:10:9f:33:
0d:71:30:5e:b3:ae:a1:2f:aa:3f:e6:09:6c:79:aa:
ff:4a:02:65:24:4a:29:29:fa:b3:2e:32:53:c7:c2:
ce:30:8b:0d:71:fb:16:43:1c:83:8f:d9:0e:f0:0c:
cc:3b:91:14:4c:a6:a8:fe:74:b6:7d:3c:c4:51:77:
30:e2:33:68:4a:b7:bd:5c:a9:86:ef:96:87:22:97:
b4:c4:96:f2:d4:ec:56:1c:f5:a6:aa:40:b8:05:99:
0f:35:05:f5:1b:46:69:20:86:cf:be:80:13:2d:85:
5a:30:07:fb:0d:bf:e1:ad:5a:35:91:13:3d:9e:18:
aa:94:fc:1d:7f:16:38:a7:e3:7c:2d:cb:87:d9:e4:
8a:ab:d6:bb:97:3f:9d:3b:41:d8:36:b1:6d:17:65:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:2D:E0:10:2E:30:D5:BA:0B:BD:B7:19:A6:80:F3:69:8B:58:68
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/N_Qt4BAuMNW6C723GaaA82mLWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
46:23:4c:dd:23:89:22:b1:78:87:df:22:c0:90:31:6d:68:4f:
a0:6a:52:2e:1b:ea:27:03:c9:17:a2:e7:2d:c3:70:86:2b:31:
f6:69:89:46:4e:36:6c:c2:b0:e1:d6:e7:a8:58:37:20:94:5a:
07:3f:01:83:47:4e:20:e9:2c:78:d1:68:f5:f6:c8:79:73:51:
0d:d9:bf:55:de:58:9d:1f:35:71:13:3b:a8:e4:73:78:59:5c:
60:90:83:b4:dc:c9:75:85:3a:aa:5e:28:e9:36:99:30:52:1e:
c8:da:6b:d9:76:43:35:20:61:c0:2a:8a:05:26:fe:84:7c:39:
a7:70:5d:a0:75:15:f6:1d:70:91:44:02:da:90:95:dc:bf:3b:
d5:42:2a:be:cb:56:e8:42:dd:1a:14:5c:e3:3c:2a:97:93:05:
9f:02:55:9a:3b:6b:50:ad:c5:fc:be:89:83:c8:86:01:53:6d:
6a:61:19:e6:47:5b:15:d5:48:2d:82:7d:d9:61:5d:36:25:2b:
ec:76:df:df:7b:02:8f:ab:fb:36:d3:36:12:7d:40:62:b2:e6:
71:e1:b4:f3:c9:3e:0e:6d:5b:c6:bf:30:f9:a6:50:44:7b:60:
ea:30:c0:6a:6d:32:be:40:fa:da:42:c9:44:3c:93:b9:be:77:
51:62:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org