Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBrwFLEflxteczhFrHZ4-g-t8gs.roa
File: kBrwFLEflxteczhFrHZ4-g-t8gs.roa (raw, json)
Hash identifier: ohi4mkemhdRbgXrgmeGAGZlZOt3GChpVk2iDPPnsFe4=
Subject key identifier: 90:1A:F0:14:B1:1F:97:1B:5E:73:38:45:AC:76:78:FA:0F:AD:F2:0B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BB4EDFE08913D91204DAA66A74DA6722E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBrwFLEflxteczhFrHZ4-g-t8gs.roa
Signing time: Thu 09 Nov 2023 16:32:57 +0000
ROA not before: Thu 09 Nov 2023 16:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 194.50.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:ed:fe:08:91:3d:91:20:4d:aa:66:a7:4d:a6:72:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 9 16:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=901af014b11f971b5e733845ac7678fa0fadf20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:dd:e4:46:8e:47:c1:9c:bb:ac:72:f9:79:84:
d8:2b:42:48:de:6e:e8:a3:93:7f:f5:a0:c7:9a:e4:
f1:e5:1b:b9:48:4e:bb:4f:7a:33:c2:45:a6:8f:4a:
f1:78:1a:a3:59:8a:66:fb:58:3a:34:3b:bb:6a:01:
da:f9:7a:ec:95:5c:fe:c7:4b:54:2a:31:71:4e:a7:
d7:58:36:15:2d:0d:f6:ce:ac:1c:74:de:83:1e:a6:
b7:bf:4c:c7:2c:dc:46:a9:cc:e4:63:18:cf:3e:50:
fb:09:84:0d:a2:93:df:54:e6:ab:ff:91:a9:1b:7c:
3c:ed:54:71:8f:9a:66:a3:3a:00:cf:02:47:78:6c:
bf:f2:9e:b3:07:40:86:81:f0:fa:32:16:e8:7f:97:
08:86:47:89:f4:dc:c2:04:42:f0:fa:ef:79:88:dc:
90:e1:16:a0:b4:b3:b3:70:30:67:ca:03:33:fc:01:
19:aa:79:86:da:eb:fa:5a:c3:21:79:b1:80:22:08:
ab:37:de:58:33:6e:06:1a:50:ca:8d:13:f4:2a:57:
61:d9:89:cb:07:25:ba:d9:94:4a:3e:68:73:e6:14:
58:8a:30:d3:da:39:5a:38:82:1b:15:5e:7b:09:d8:
6e:42:f2:0d:88:a6:bc:ba:c7:96:75:7d:0d:29:77:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1A:F0:14:B1:1F:97:1B:5E:73:38:45:AC:76:78:FA:0F:AD:F2:0B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kBrwFLEflxteczhFrHZ4-g-t8gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2a:97:e3:f4:75:ee:a3:ef:24:f6:fa:67:40:ee:fc:32:0e:
6b:a1:1e:40:59:3a:1b:39:d3:7a:3a:14:c8:60:e2:c4:34:15:
62:e2:8b:ee:f7:4d:86:37:ed:4b:96:81:39:f2:72:c1:6b:4d:
8e:8e:2e:bc:4d:ff:4a:e2:20:57:d5:50:bb:94:47:81:7b:dd:
1c:d3:81:b5:69:1f:79:b0:7e:91:49:80:d6:6f:68:06:64:b9:
18:8f:46:f4:85:b1:87:6a:17:28:41:a6:62:68:15:ab:ee:94:
70:b5:ea:40:63:b6:e0:ac:48:cb:56:0a:26:2d:7f:75:f8:e0:
36:03:54:cf:2a:1a:2b:6b:e8:3e:96:1e:3f:65:bf:34:cb:f8:
cd:2d:84:18:92:17:63:18:14:95:aa:a2:72:a8:17:6f:64:cc:
68:d2:10:ed:03:89:5b:1c:ab:e3:93:a2:e3:b4:e8:b2:b8:14:
0c:72:52:46:06:27:af:90:32:29:0a:b9:ba:3f:58:5e:34:9f:
4a:e0:f4:bc:05:23:b0:16:8f:de:08:a6:7c:4d:7b:d4:86:b8:
3e:95:e5:d8:a8:fd:b4:d3:73:b6:3c:1e:e8:c4:f3:70:6e:ae:
94:ff:32:43:52:f8:db:e4:ae:1f:91:32:d1:bc:af:75:33:45:
31:a9:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 13:54:55 2023 by rpki-client on console-ams.rpki-client.org