Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa
File: i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa (raw, json)
Hash identifier: ep9fTCgeB3qsDlL9Oln+9QWB0kwuJdXWAZ3/2JL+EVk=
Subject key identifier: 8B:B4:35:AD:BF:EA:2F:94:68:05:0C:F3:47:E8:99:26:5E:13:D4:72
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BACC33EC9A84C900E56FE105D0B011581
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa
Signing time: Wed 08 Nov 2023 02:29:18 +0000
ROA not before: Wed 08 Nov 2023 02:29:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 194.50.111.0/24 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Nov 2023 16:31:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ac:c3:3e:c9:a8:4c:90:0e:56:fe:10:5d:0b:01:15:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 8 02:29:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bb435adbfea2f9468050cf347e899265e13d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:21:aa:1e:05:0e:4b:dc:92:96:0c:29:8b:fb:
fe:06:e2:ab:0f:c8:18:1f:8d:36:13:8a:d7:eb:cc:
07:cb:4d:94:2f:48:26:eb:ec:f3:94:24:6b:38:fa:
b0:38:bd:f1:e6:c9:33:96:c7:07:36:8b:63:94:55:
f2:64:a1:8b:a3:cd:35:c4:35:73:28:68:69:04:9d:
dd:3a:21:ad:92:97:b6:43:28:58:8b:b4:3b:55:fe:
86:8c:f8:2e:ad:34:7d:9e:1a:77:4b:a5:48:e6:b6:
ad:12:c9:ff:f4:d5:10:4f:5a:8b:9d:91:b7:ab:c7:
3a:60:52:66:fc:bb:fb:f6:46:48:7b:ce:a3:fb:be:
01:03:33:21:a5:d0:87:62:1b:25:88:07:60:9e:2d:
4f:21:2a:69:3d:bf:f3:fa:42:25:4a:66:d4:bd:b6:
f9:a9:ba:ae:df:13:87:ba:39:55:13:e1:bb:c3:b1:
b4:6e:ad:31:f1:df:f1:f8:1f:12:7e:0e:e3:bf:37:
9c:27:c0:b1:34:c0:fe:46:f3:8c:ae:23:43:0d:2c:
54:e9:f8:df:c9:02:37:c3:ce:a6:ad:41:27:19:b1:
8d:8b:4c:ae:48:70:6f:f6:c4:88:4a:8a:f7:a5:68:
78:00:f5:47:d9:1a:ec:e2:78:3a:a7:71:6f:9f:9b:
85:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B4:35:AD:BF:EA:2F:94:68:05:0C:F3:47:E8:99:26:5E:13:D4:72
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
af:96:41:1c:da:76:61:59:f7:d9:8a:bf:11:a8:2b:90:71:cd:
a4:ac:b3:ac:ed:22:cc:45:b8:e2:cc:24:5c:f8:37:38:1e:ed:
e7:1b:3d:97:c7:79:47:a3:f6:0c:42:e6:51:29:34:14:d2:86:
c4:e5:4a:dc:56:11:eb:18:ea:17:9b:b0:bc:b4:64:ec:d6:b3:
c5:32:b8:6a:62:69:e2:49:bd:3d:90:33:90:30:47:6d:33:dd:
8e:08:a8:d0:27:89:f8:8b:a2:c6:9e:c2:fd:f3:18:e0:05:24:
96:9b:d4:de:df:19:4f:59:6f:a7:fd:17:09:17:b5:15:01:df:
68:34:e2:e8:56:de:2b:bd:95:a7:73:88:cb:d4:b8:82:fe:b6:
7d:2b:a7:90:29:7a:7e:09:bb:e2:16:c6:cb:ed:fc:c9:25:11:
c8:ce:44:f3:da:7a:d3:12:26:b5:98:1a:2d:ba:8a:03:2c:ca:
dd:25:5f:7c:a1:de:29:e2:01:01:8d:31:a0:80:38:b3:d4:81:
8b:e7:81:f5:4b:fa:d0:84:cf:1b:76:84:3e:11:c4:18:54:77:
6d:1c:cc:86:ed:e3:54:5b:66:4d:27:7b:21:6f:28:28:6c:b0:
20:60:b9:f1:28:8c:a7:30:3e:6b:6e:21:6e:8f:51:80:ad:06:
94:45:b4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:10 2024 by rpki-client on console-ams.rpki-client.org