Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa
File: fsW2EalzuE6jZQB7R_O-FJWvgLc.roa (raw, json)
Hash identifier: 554dHUuqUO6fTYJl69lqs4TO5CK4/M7c5eRXjWLYSzs=
Subject key identifier: 7E:C5:B6:11:A9:73:B8:4E:A3:65:00:7B:47:F3:BE:14:95:AF:80:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E778E694749AEAF10723DA633530A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa
Signing time: Mon 02 Jan 2023 05:14:56 +0000
ROA not before: Mon 02 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34800
IP address blocks: 194.50.99.0/24 maxlen: 24
2001:7f8:e7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 May 2023 06:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:78:e6:94:74:9a:ea:f1:07:23:da:63:35:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ec5b611a973b84ea365007b47f3be1495af80b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7e:5b:3f:0d:f6:2c:20:65:85:34:f6:a1:42:
ab:da:32:b1:b0:7d:87:2c:b0:93:cb:63:b4:23:60:
32:6b:80:83:c3:f4:67:fc:5b:a9:6d:f7:b4:06:5a:
fe:8d:3a:9a:cb:30:ed:bb:68:be:f1:f1:e1:3b:16:
d0:80:3e:50:d0:5a:a2:7c:df:4b:01:bd:51:4f:45:
24:46:98:42:ab:6a:88:10:7d:2e:57:c4:dd:d3:06:
07:04:94:e6:cd:29:5f:59:e2:24:c6:73:9c:bd:cc:
85:bc:a8:4d:bc:13:cb:2a:db:e3:13:d8:f6:2b:6b:
3e:5e:63:5c:d4:bd:05:86:2e:a0:8f:36:05:46:da:
bb:39:18:78:4b:4c:09:9f:3b:6e:b5:dd:12:b5:b7:
c2:42:45:e0:d0:27:b5:0a:f6:b1:2f:a5:58:41:03:
a7:c6:4e:55:bd:cf:06:f9:57:55:db:59:56:a4:7c:
1a:a8:81:13:e4:49:6d:1c:0b:32:b3:2e:e7:ba:ad:
64:0a:19:94:6d:e4:a6:d2:b3:c1:8e:12:3e:98:cf:
b3:55:a7:25:cd:b0:6b:35:c4:fe:b2:14:08:de:4a:
e4:a3:2e:0f:c2:27:55:fb:16:f7:f1:bc:c8:88:b1:
43:94:e1:3d:de:b1:b9:45:c9:91:fc:2e:fa:15:5b:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:B6:11:A9:73:B8:4E:A3:65:00:7B:47:F3:BE:14:95:AF:80:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fsW2EalzuE6jZQB7R_O-FJWvgLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.99.0/24
IPv6:
2001:7f8:e7::/48
Signature Algorithm: sha256WithRSAEncryption
05:de:4c:c5:95:d8:61:cb:1f:9c:85:ce:b0:e9:f0:ac:6b:c5:
93:71:8c:fa:90:b3:20:76:01:77:94:0f:60:7e:38:4b:17:31:
56:68:d7:55:af:98:d8:00:42:b8:c1:43:9e:95:0d:06:9a:d6:
fa:9b:a0:a6:f9:6e:5f:b6:47:d9:89:27:0c:55:ae:c3:5b:7f:
52:fd:42:bd:65:2f:39:4d:01:7d:74:2e:c0:e0:fd:cd:e6:d2:
f7:6b:26:cd:ed:c2:c2:1f:6d:61:93:4e:d4:97:15:45:bc:ff:
5b:b8:8c:c9:70:81:c9:73:b6:36:4c:3b:c8:d6:b0:1f:dd:bb:
d1:ec:74:3c:73:34:89:37:1f:d5:85:e7:f9:7d:63:4d:f4:df:
1d:96:47:6e:6d:62:31:9a:c5:21:19:8d:92:69:7f:8f:05:36:
5a:99:f9:af:b3:92:f6:a9:ab:f9:0d:1b:47:8a:68:43:6c:77:
ba:36:2b:29:11:22:4f:2f:4d:31:bd:6e:a8:41:70:59:fd:f2:
dd:b0:b4:53:dd:10:2c:8b:9d:88:b1:bc:e9:bb:8a:49:51:bc:
cc:27:e7:0d:a5:1c:87:ac:f7:4f:f7:b8:07:fb:cd:84:bf:01:
ca:12:bf:5d:b2:62:44:91:53:9d:ac:70:e3:a2:25:c8:76:ff:
07:cd:95:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:35 2024 by rpki-client on console-fra.rpki-client.org