Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VSuZqiguCzFy0li5a1MvxUyyuzQ.roa
File: VSuZqiguCzFy0li5a1MvxUyyuzQ.roa (raw, json)
Hash identifier: 3zoyOau1qdBga8eochENuRIvT8iIJ33ef6pEysrXyMY=
Subject key identifier: 55:2B:99:AA:28:2E:0B:31:72:D2:58:B9:6B:53:2F:C5:4C:B2:BB:34
Certificate issuer: /CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Certificate serial: 0185729EE6C08F9F66248220093C83E80BCB
Authority key identifier: 50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VSuZqiguCzFy0li5a1MvxUyyuzQ.roa
Signing time: Mon 02 Jan 2023 13:14:54 +0000
ROA not before: Mon 02 Jan 2023 13:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50611
IP address blocks: 195.253.65.0/24 maxlen: 24
195.253.66.0/24 maxlen: 24
195.253.88.0/23 maxlen: 23
195.253.90.0/23 maxlen: 23
195.253.96.0/19 maxlen: 24
185.119.136.0/22 maxlen: 24
195.253.64.0/24 maxlen: 24
2a01:5b0:8::/46 maxlen: 48
2a01:5b0:2e::/48 maxlen: 48
2a01:5b0:10::/45 maxlen: 48
2a01:5b0:12::/47 maxlen: 47
2a01:5b0:5::/48 maxlen: 48
2a01:5b0:20::/43 maxlen: 48
2a01:5b0:2b::/48 maxlen: 48
2a01:5b0:6::/48 maxlen: 48
2a01:5b0:4::/48 maxlen: 48
2a01:5b0:2a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:e6:c0:8f:9f:66:24:82:20:09:3c:83:e8:0b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50c1e426f58e42ae30e56cdb7ff4d8f9ddd85b30
Validity
Not Before: Jan 2 13:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=552b99aa282e0b3172d258b96b532fc54cb2bb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:c3:91:25:b6:44:74:97:1f:c7:c8:b4:d7:
cd:f7:d0:42:f0:54:9c:dd:a0:c7:99:54:e0:33:59:
4a:b0:4a:69:e2:f1:65:61:08:ae:b6:92:0e:f5:3e:
b4:96:bd:aa:30:9d:7c:af:13:32:8b:ce:89:35:ca:
b1:2a:76:29:3b:33:39:7e:19:3a:8d:1b:f3:c3:ae:
82:f9:48:53:c8:fd:e0:49:62:5b:b4:d0:96:17:55:
24:71:bb:75:09:e0:f6:38:47:c9:27:d3:2b:cb:e8:
ee:2a:ec:13:a1:d7:c6:46:e8:7d:c4:70:5b:c6:3c:
60:4b:9e:47:6e:e4:f6:d3:3b:8c:b5:c3:02:85:62:
d9:1a:91:2d:62:84:da:b5:b2:15:85:b8:34:15:32:
02:eb:65:f9:ad:4f:c1:7d:59:86:65:92:3d:40:27:
53:45:46:fc:b9:87:ac:c9:34:c5:c3:52:05:14:62:
6e:3b:04:be:6f:98:41:a0:55:d4:72:8d:b5:27:8e:
84:d2:29:77:93:65:07:ca:eb:19:1f:6a:6a:a1:22:
3d:7c:2b:30:22:58:5b:71:42:e5:cb:01:b2:9a:cb:
0a:c5:c8:42:e2:c8:27:9c:bd:54:93:d8:d4:2b:a7:
cd:7f:b3:37:26:57:7f:c7:f7:24:1b:53:7a:ed:a1:
63:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2B:99:AA:28:2E:0B:31:72:D2:58:B9:6B:53:2F:C5:4C:B2:BB:34
X509v3 Authority Key Identifier:
keyid:50:C1:E4:26:F5:8E:42:AE:30:E5:6C:DB:7F:F4:D8:F9:DD:D8:5B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/VSuZqiguCzFy0li5a1MvxUyyuzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/9c6dad-377a-444e-b0dc-063ce6cf460d/1/UMHkJvWOQq4w5Wzbf_TY-d3YWzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.136.0/22
195.253.64.0-195.253.66.255
195.253.88.0/22
195.253.96.0/19
IPv6:
2a01:5b0:4::-2a01:5b0:6:ffff:ffff:ffff:ffff:ffff
2a01:5b0:8::/46
2a01:5b0:10::/45
2a01:5b0:20::/43
Signature Algorithm: sha256WithRSAEncryption
75:ea:9d:41:8c:b3:0c:a8:26:87:b5:32:4a:b9:18:e0:c5:b0:
63:89:14:3a:36:8b:fa:3f:50:67:8b:a1:cf:fe:11:28:07:1c:
b7:dd:64:05:9f:53:72:fe:8f:7a:e6:04:0f:fa:5f:d0:a0:a7:
06:6f:a5:6a:e9:85:3d:7f:a6:e9:6a:4d:af:3d:39:ad:9d:c3:
39:01:68:f0:11:b1:31:0d:e6:eb:e3:94:6d:7f:69:f3:85:a4:
d6:9c:95:44:48:43:a4:a0:11:55:1f:5b:fb:f3:11:7f:d7:c2:
84:8f:39:33:0d:6d:aa:55:83:eb:72:b2:fa:9e:e4:ed:17:82:
a1:5f:86:1b:62:f5:9d:48:8f:71:5d:6f:c8:0f:16:8c:14:ca:
aa:7c:a1:54:15:ef:ab:fd:d6:36:59:d6:09:ee:f6:c8:50:02:
9c:b7:dc:da:e9:48:bf:d5:80:bf:b4:82:16:9b:c8:40:d8:fe:
1d:37:e2:bd:c1:4b:04:a7:e7:30:32:d0:be:b4:b2:5e:7f:b0:
35:ac:55:92:0e:77:31:b5:5d:19:83:2b:98:71:83:21:10:4f:
f4:2c:cc:ec:e1:fe:2d:47:1d:05:d5:9d:17:4a:65:09:f2:97:
e7:bc:af:d7:95:39:16:d1:3a:de:bb:5e:aa:24:f2:10:70:0e:
7b:ad:90:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org