Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/a5GXJHoI4hKraba5t5R-TSe-ZsA.roa
File: a5GXJHoI4hKraba5t5R-TSe-ZsA.roa (raw, json)
Hash identifier: jMRs16+SwC/DBlPRqQ0VPtB8I4JiQ3n0N/TDoL5Oi1c=
Subject key identifier: 6B:91:97:24:7A:08:E2:12:AB:69:B6:B9:B7:94:7E:4D:27:BE:66:C0
Certificate issuer: /CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Certificate serial: 018CC348C2D03079A96E0474A991016AC36C
Authority key identifier: 49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/a5GXJHoI4hKraba5t5R-TSe-ZsA.roa
Signing time: Mon 01 Jan 2024 04:29:34 +0000
ROA not before: Mon 01 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207796
IP address blocks: 194.50.204.0/24 maxlen: 24
194.50.209.0/24 maxlen: 24
194.50.218.0/24 maxlen: 24
194.50.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c2:d0:30:79:a9:6e:04:74:a9:91:01:6a:c3:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49ea50a1c62082762afda007d6fc8b4bdb05749f
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b9197247a08e212ab69b6b9b7947e4d27be66c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:a6:95:5e:8a:45:c2:35:f2:b7:94:76:b9:
6e:e3:92:95:dd:9c:fb:09:b7:08:7e:ba:fd:48:43:
8e:a9:74:3b:f7:b6:0d:f1:22:f6:95:66:84:bd:17:
f5:ff:68:77:37:a3:69:52:6c:b0:7a:81:ef:b6:ca:
70:1d:5a:61:b3:c3:8c:3b:05:fb:5f:dc:71:c4:91:
fe:ac:2f:6b:cd:c9:2f:4c:e6:35:e0:44:97:55:c1:
32:1e:fb:cf:05:a0:df:7d:76:18:dd:17:3a:45:bf:
ca:7d:0a:12:ec:67:30:5a:e0:0d:39:c6:c1:70:ae:
47:8f:39:08:98:b5:3e:4c:fb:fe:64:7e:51:6a:69:
24:52:1b:87:1a:a0:8b:4d:1a:e0:88:f5:6b:54:3e:
49:35:4a:76:ef:5a:ed:4e:92:dd:ad:c2:b4:b4:36:
9a:57:08:da:b3:48:94:6e:41:28:2f:47:e9:a1:b9:
e7:fb:b9:93:99:fa:70:83:3d:08:21:f1:51:a1:4f:
9d:e8:25:26:74:91:20:61:46:82:80:d0:d0:42:ca:
10:2a:2b:df:9a:6f:3c:41:2f:e7:b6:ed:3c:0a:33:
da:d2:6e:a4:ae:8a:9c:36:1c:9f:9e:c8:88:ba:be:
28:11:7f:f8:e9:3c:a8:b6:6b:b5:70:8a:52:70:92:
fb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:97:24:7A:08:E2:12:AB:69:B6:B9:B7:94:7E:4D:27:BE:66:C0
X509v3 Authority Key Identifier:
keyid:49:EA:50:A1:C6:20:82:76:2A:FD:A0:07:D6:FC:8B:4B:DB:05:74:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SepQocYggnYq_aAH1vyLS9sFdJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/a5GXJHoI4hKraba5t5R-TSe-ZsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/48a9eb-18db-4f92-9580-272dab5afa66/1/SepQocYggnYq_aAH1vyLS9sFdJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.204.0/24
194.50.209.0/24
194.50.216.0/24
194.50.218.0/24
Signature Algorithm: sha256WithRSAEncryption
95:61:51:37:7c:cd:22:30:c7:b4:79:00:aa:b3:d8:c8:a7:2f:
3c:87:b7:19:ca:fa:bf:db:16:4c:ec:2a:cf:ae:b2:55:55:e7:
2e:ee:8c:15:3e:02:11:c1:98:69:f6:aa:f4:75:1d:5b:c9:0d:
fc:44:6f:9f:a8:93:aa:ec:95:56:79:4b:09:2d:65:21:13:1d:
0c:ae:60:f1:e5:76:67:3d:98:1d:64:a4:f0:b4:33:00:4f:74:
5d:db:31:4b:7b:a2:6f:b6:7b:c1:20:2b:73:03:65:cc:d3:25:
09:a0:a6:db:ad:4b:77:5b:19:a2:77:74:ed:f8:e8:07:eb:7a:
80:0e:11:54:93:bf:0d:e6:e2:76:f5:91:2c:fe:38:a5:1f:dc:
36:1f:b7:11:b6:50:cf:18:85:b7:b0:9d:63:d3:22:64:a5:ff:
3b:a7:90:b7:03:59:02:ca:93:89:20:38:20:b3:70:c0:fd:fd:
f6:9c:2b:ce:c3:f6:b6:ea:e3:84:50:a2:c5:c6:f0:1c:cd:f9:
5f:5c:c4:e4:92:a2:f8:3d:e5:5c:2b:a5:8b:9f:93:f4:c7:83:
09:4b:d8:dd:3a:68:78:ae:32:42:81:aa:89:ed:95:c4:cc:3f:
42:26:51:c1:93:d8:30:71:fe:30:91:17:73:08:14:7a:c4:72:
08:0f:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:39 2025 by rpki-client