Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c5TxNKDma0T6dqR4jP07yvH1AcU.roa
File: c5TxNKDma0T6dqR4jP07yvH1AcU.roa (raw, json)
Hash identifier: rMbP/gjXfZxlrgskmu6zLvhdsjEQw0fZwB1hzcETiXs=
Subject key identifier: 73:94:F1:34:A0:E6:6B:44:FA:76:A4:78:8C:FD:3B:CA:F1:F5:01:C5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCC1288DAECF870C90F5096A1BF954
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c5TxNKDma0T6dqR4jP07yvH1AcU.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 12:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:c1:28:8d:ae:cf:87:0c:90:f5:09:6a:1b:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7394f134a0e66b44fa76a4788cfd3bcaf1f501c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:5b:4c:b4:4a:ed:0b:2f:e2:6f:02:57:37:
d5:96:d3:f8:10:09:d5:bf:c8:e2:10:62:34:77:b6:
8e:83:e9:13:92:6d:cd:76:1f:51:45:af:79:95:2c:
b0:44:37:63:a6:85:1d:5f:ff:dc:a6:81:17:a5:3b:
d2:bc:2a:83:80:75:a9:9a:53:c2:26:9b:a0:93:55:
56:fd:77:0f:7b:3b:d4:1c:3e:94:68:25:e7:a1:5b:
74:e5:45:83:8e:f1:cc:4a:8c:c0:45:d4:ec:d0:ec:
bb:6d:2f:05:9e:2e:5d:e1:7a:3a:3c:b5:b5:7b:67:
aa:8a:8b:93:11:02:fb:a0:a1:c4:b5:6c:28:d6:09:
13:34:c8:5a:54:fe:f3:20:be:c7:bc:52:f0:fb:f5:
9a:b2:12:7e:c6:63:f5:8d:68:56:7d:f7:5d:20:54:
30:f9:4a:51:29:d4:bf:24:eb:51:2c:bd:8a:2e:78:
44:e5:55:c7:31:81:95:f6:c3:7b:df:57:d2:9a:08:
5b:33:b8:42:c5:9e:fd:70:27:09:21:9f:8e:61:22:
a1:8b:e3:b1:f1:94:b4:00:1c:1f:31:c8:37:64:4f:
03:07:97:a0:9a:e6:a0:80:4a:57:09:df:19:f1:a0:
84:95:26:c5:8a:e6:da:20:1e:94:9f:c1:db:fd:2e:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:94:F1:34:A0:E6:6B:44:FA:76:A4:78:8C:FD:3B:CA:F1:F5:01:C5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c5TxNKDma0T6dqR4jP07yvH1AcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:37:5a:19:77:07:f2:db:4e:24:1b:79:83:72:6c:de:e1:26:
0f:3f:a8:cf:38:cd:d4:6b:b6:fd:3e:c2:be:c2:45:9f:8c:46:
cb:a5:33:0d:14:90:ff:f3:4c:af:52:7c:4f:0d:d8:3d:16:86:
c9:dd:7a:f3:1f:b5:af:e2:17:9e:55:05:fa:36:a5:c7:80:3c:
c2:17:6e:d9:d2:59:6e:9e:eb:7f:7f:fa:95:be:0b:27:fa:6a:
20:06:0b:ed:97:bc:80:78:b3:0a:7f:c7:63:28:10:64:7e:5d:
74:f9:8a:e4:83:05:4e:69:cc:c3:83:5d:01:63:59:da:08:ee:
d0:03:96:c6:97:ce:95:44:f9:bd:1c:1d:db:d2:8a:53:d3:e2:
98:56:1d:55:5d:42:d1:33:d1:2d:c0:55:b6:be:40:58:8c:0e:
c6:d6:bc:f9:4a:6e:f0:79:97:be:88:76:6e:08:7d:a1:70:4f:
f1:d8:ec:1d:f0:36:95:2b:bc:69:92:ef:fa:1a:33:ef:13:50:
2f:9a:a1:cc:c6:bd:40:c3:b9:ee:a9:84:18:86:da:7e:79:3e:
99:76:39:03:3c:7c:ab:86:cb:4d:30:43:f2:76:a7:b7:42:0d:
3e:73:1e:d8:4a:5c:1a:62:f3:be:cd:18:71:28:bb:e5:05:0c:
0a:f5:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 1 16:07:43 2024 by rpki-client on console-ams.rpki-client.org