Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rHZ7F7Pa60rzH16FXTfN4aXORuk.roa
File: rHZ7F7Pa60rzH16FXTfN4aXORuk.roa (raw, json)
Hash identifier: lUqZDMTXoxhIBMPVv9C/nMNlPk+wwzro+tMPAOPjRfM=
Subject key identifier: AC:76:7B:17:B3:DA:EB:4A:F3:1F:5E:85:5D:37:CD:E1:A5:CE:46:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190D257FA4EC482720B5011997EC10B61AB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rHZ7F7Pa60rzH16FXTfN4aXORuk.roa
Signing time: Sat 20 Jul 2024 22:51:39 +0000
ROA not before: Sat 20 Jul 2024 22:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.50.111.0/24 maxlen: 24
2a0e:97c0:411::/48 maxlen: 48
2a0e:97c0:8e0::/48 maxlen: 48
2a0e:b107:19a0::/48 maxlen: 48
2a0e:b107:1a63::/48 maxlen: 48
2a0e:b107:1a64::/48 maxlen: 48
2a0e:b107:2880::/46 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Sep 2024 15:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d2:57:fa:4e:c4:82:72:0b:50:11:99:7e:c1:0b:61:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 20 22:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac767b17b3daeb4af31f5e855d37cde1a5ce46e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:79:54:eb:32:94:fa:13:bc:82:4b:b0:43:
eb:2c:91:2d:49:30:a2:2d:b4:36:8f:bd:0c:35:1f:
5a:23:3b:7f:a1:77:92:83:a6:d9:30:db:45:76:fc:
5d:98:21:87:51:98:38:5e:9d:bb:6c:70:d2:8c:b4:
44:80:17:df:f1:b4:1c:07:26:05:dc:35:8d:28:39:
54:35:76:2d:6e:d1:69:c2:a2:f4:e5:cb:91:f2:77:
fd:9e:b4:ab:f2:5e:32:2d:c9:56:00:81:dd:16:fa:
ee:da:92:36:bb:cc:15:03:e1:a8:16:3e:9c:97:8f:
1d:dd:4f:11:25:23:ad:c4:cd:d5:06:4c:0a:7e:79:
31:94:19:50:2e:98:b7:62:b4:6e:65:da:e6:ab:84:
34:e1:35:e7:d7:cb:68:7a:ea:50:72:5f:19:30:0d:
b5:2c:03:bf:0e:a6:54:cd:0b:48:1a:84:9b:5f:6b:
89:6f:a4:80:d5:f1:12:36:00:23:88:a4:55:97:ed:
df:4f:7f:fd:32:12:53:19:4a:f5:09:3e:80:b9:4d:
29:21:15:6c:00:6d:a5:b3:3e:6c:ec:1e:d6:f2:58:
67:1f:bd:05:3b:87:2b:fe:2c:35:4f:c0:6b:db:f0:
bc:9b:32:1a:b9:c5:3f:f4:42:80:79:87:7c:40:8b:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:7B:17:B3:DA:EB:4A:F3:1F:5E:85:5D:37:CD:E1:A5:CE:46:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/rHZ7F7Pa60rzH16FXTfN4aXORuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.111.0/24
IPv6:
2a0e:97c0:411::/48
2a0e:97c0:8e0::/48
2a0e:b107:19a0::/48
2a0e:b107:1a63::-2a0e:b107:1a64:ffff:ffff:ffff:ffff:ffff
2a0e:b107:2880::/46
Signature Algorithm: sha256WithRSAEncryption
71:f9:f5:c7:aa:a1:4c:3b:bd:4e:6e:0f:da:74:0d:5c:79:77:
f1:90:a6:8f:7f:00:1b:2b:61:7a:25:85:ee:ac:2f:4c:da:c0:
9c:a2:a3:41:3c:9c:c5:34:f2:1f:85:26:1e:02:9c:61:3a:66:
9c:66:b1:d2:55:10:c5:f8:ca:bc:99:13:a9:9f:b0:29:71:ac:
b0:f0:17:9a:c8:df:23:ef:d1:53:79:47:6c:3a:51:e2:1e:f9:
0f:d7:74:e0:84:d1:f3:5c:71:33:d1:84:75:a7:ab:c3:af:ca:
f7:b9:c5:42:ba:ac:49:cb:f9:51:a5:f1:7d:fa:d5:16:54:3e:
d3:b8:34:c3:88:50:91:25:48:28:10:3d:dc:ca:39:bc:99:27:
3f:af:f4:bc:cf:83:f9:2c:06:7e:28:13:48:97:79:c1:65:c7:
f1:15:e9:81:0a:27:c2:64:03:e5:c9:7a:f8:0d:e3:33:37:7c:
a5:26:9e:c4:36:a8:e3:db:5d:3c:58:af:fb:53:35:26:fd:f0:
fe:36:9b:70:f3:bb:e7:8b:bd:af:9b:7c:bc:1c:2f:f2:fd:cc:
b3:11:fb:66:3d:a3:c5:58:b8:ae:95:d7:5e:20:61:a4:2b:25:
aa:96:03:d1:f4:28:96:52:53:ff:f3:72:25:94:18:65:48:4b:
42:03:9f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 17:40:32 2024 by rpki-client on console-fra.rpki-client.org