Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SmC-whcEusF5N0G6ySnqsL66aaU.roa
File: SmC-whcEusF5N0G6ySnqsL66aaU.roa (raw, json)
Hash identifier: 10J2HtqUZoN1h/gR+mw5UbIKG6eWIoZRwk+L+NqdWsE=
Subject key identifier: 4A:60:BE:C2:17:04:BA:C1:79:37:41:BA:C9:29:EA:B0:BE:BA:69:A5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A2D750D55112A8D2C36D91CB25525544D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SmC-whcEusF5N0G6ySnqsL66aaU.roa
Signing time: Fri 25 Aug 2023 16:09:20 +0000
ROA not before: Fri 25 Aug 2023 16:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50393
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:75:0d:55:11:2a:8d:2c:36:d9:1c:b2:55:25:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 25 16:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a60bec21704bac1793741bac929eab0beba69a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:6c:e7:e2:38:cb:b4:d4:5b:37:02:ec:51:
a5:d9:10:4b:bd:bb:b2:e4:5d:de:7b:be:81:ca:8b:
5c:bc:92:08:49:07:8d:30:e4:68:1b:d7:96:15:99:
35:4c:da:cb:43:bf:b8:33:35:d0:6b:5b:02:36:d3:
31:5d:ee:a6:a2:a9:3f:a3:9e:77:e7:b8:62:2e:64:
dc:35:80:a2:ac:23:75:4f:92:4a:2b:d6:91:c2:f1:
4a:ce:41:5c:91:4f:0f:2c:4a:38:0d:fa:04:ce:df:
ab:59:d1:f1:95:5b:be:a5:49:a8:3d:eb:44:5f:e4:
f3:9e:b3:f4:0b:3f:5a:c4:39:39:a3:ff:9d:2d:e5:
ea:61:83:30:93:e6:cf:90:40:37:3a:66:03:b6:6e:
2d:9a:83:e0:90:40:98:e4:14:e1:89:78:9c:ed:a7:
71:8a:fb:45:e6:1f:d3:82:af:90:6d:6d:ac:69:a3:
5c:3b:3d:d1:95:da:c4:8f:82:65:fd:e4:87:49:df:
62:d2:c5:65:68:3f:05:10:6c:e0:42:e0:f3:8f:df:
10:ce:1b:30:14:75:06:43:37:0f:86:e1:62:87:7c:
8f:6b:ee:5f:e8:0d:dd:30:d8:82:ff:ae:d1:ec:ee:
af:a5:29:d2:24:14:8d:21:b9:f8:da:ba:06:ab:f7:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:60:BE:C2:17:04:BA:C1:79:37:41:BA:C9:29:EA:B0:BE:BA:69:A5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SmC-whcEusF5N0G6ySnqsL66aaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:19:8d:8b:cc:13:8f:6e:c9:26:c9:e5:8f:29:bf:4b:59:26:
28:57:69:30:ba:15:f6:e1:7c:ff:e5:92:68:08:b3:6e:a9:92:
93:c1:e5:68:b1:cb:4d:e4:c8:0f:fe:8c:54:e1:75:41:38:ec:
b8:57:c1:81:24:e9:24:3b:e0:83:22:b6:f0:69:3f:41:7e:a3:
73:5d:b0:ca:f3:eb:d0:2a:8f:f0:98:85:e4:60:15:d4:a7:3b:
f6:b1:24:a8:66:d8:08:0a:76:88:ed:95:a0:cc:42:55:1b:17:
fd:65:51:a7:d0:5c:1c:6e:94:0a:eb:50:8b:f2:69:10:ae:fd:
7d:67:1f:d4:b4:3d:4d:29:72:c4:f6:df:65:7a:0e:c6:73:c0:
aa:3a:a8:a9:2d:b0:5d:3a:5f:3f:d8:a0:0b:18:d0:ba:ab:97:
71:da:52:4e:b2:b7:b2:15:47:ae:66:64:3b:1c:e6:ab:85:8d:
39:7f:9f:95:5e:0a:f2:24:25:32:b2:76:5b:8d:f6:01:a1:76:
af:01:4d:56:fc:ac:d6:d8:4e:3e:c4:e8:3c:80:b4:0e:5f:cc:
01:e3:50:03:7b:5e:ae:29:7d:46:cd:b1:4b:b8:6b:d0:d0:3b:
46:00:da:fc:59:c9:c9:be:16:0e:df:7e:5c:6c:62:2f:4a:84:
d9:59:a4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 20:02:59 2023 by rpki-client on console-fra.rpki-client.org