Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/9WO6M0sbOYfUQ2KWDeN5kyYsQNM.roa
File: 9WO6M0sbOYfUQ2KWDeN5kyYsQNM.roa (raw, json)
Hash identifier: 4YJdhN0wUG9woJrGgLdNMaX7WBbwVr7CtWhv5E2kP/I=
Subject key identifier: F5:63:BA:33:4B:1B:39:87:D4:43:62:96:0D:E3:79:93:26:2C:40:D3
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 018C970777FC487F79153E6766FE85DEEF97
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/9WO6M0sbOYfUQ2KWDeN5kyYsQNM.roa
Signing time: Sat 23 Dec 2023 14:14:58 +0000
ROA not before: Sat 23 Dec 2023 14:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.93.0/24 maxlen: 24
194.37.92.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:07:77:fc:48:7f:79:15:3e:67:66:fe:85:de:ef:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Dec 23 14:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f563ba334b1b3987d44362960de37993262c40d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:16:07:dc:31:c5:35:69:f8:82:03:19:e0:0a:
b8:9c:8b:94:99:9f:be:23:3c:f1:bf:b7:ea:81:80:
8f:94:14:ac:22:6d:a4:8c:56:53:cb:51:81:77:94:
3a:e1:51:a7:01:ef:42:bd:2f:33:d3:08:a9:79:86:
bd:29:49:79:ca:cd:c9:d1:b3:27:83:e1:85:2f:47:
7f:93:59:e9:04:0b:d7:02:61:12:70:3e:0d:30:bb:
85:41:45:cd:63:34:b7:5e:cf:c7:d8:04:22:21:e5:
48:51:42:ee:79:24:53:d1:84:df:51:c1:e9:8e:16:
0c:4d:7b:ea:49:6c:bc:46:24:c5:43:05:f8:f3:75:
63:ff:02:04:0b:0e:12:2a:c1:72:aa:c6:2b:55:a7:
e7:70:3c:ba:21:5e:32:51:73:9b:87:df:3b:28:05:
c2:c5:62:44:47:23:ca:fc:0a:d5:d8:f8:fd:c5:b1:
b3:16:28:a1:e8:64:ba:37:35:5f:cc:0f:4a:84:b7:
72:2f:69:70:92:13:77:8e:a7:d6:73:d1:ad:0f:11:
4a:a6:f7:74:f8:09:ab:09:80:b9:b2:18:ba:89:85:
29:13:44:30:86:38:c8:d2:9e:14:81:1c:44:9c:8d:
ca:52:0b:ad:21:d5:5e:8e:9f:9d:9e:d3:ef:5d:9c:
45:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:63:BA:33:4B:1B:39:87:D4:43:62:96:0D:E3:79:93:26:2C:40:D3
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/9WO6M0sbOYfUQ2KWDeN5kyYsQNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/23
194.37.95.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:7c:55:77:84:91:3b:a0:2f:8c:73:7c:fe:54:c7:5e:82:
6b:95:b8:16:58:c7:ce:ea:0b:e3:8b:f4:e1:b9:50:0e:96:95:
9d:35:a8:b8:b8:21:b1:cd:c3:6b:26:7c:f3:d8:ea:28:b8:fb:
41:7a:34:62:c1:cc:c7:d9:b3:42:96:f7:b5:f8:40:c6:45:b3:
69:ad:45:ba:25:c4:a0:c0:d2:af:d5:06:13:a6:79:39:46:d4:
ed:b8:ad:63:6d:14:8c:a2:b7:5f:9c:fa:17:71:00:c8:c4:90:
1b:90:89:69:26:b0:0b:13:d5:26:8c:ad:d9:a1:26:be:d9:79:
65:40:cb:db:eb:d5:07:0b:cb:ec:a3:79:4b:e5:7b:cb:62:ec:
e8:89:e7:6b:05:c5:46:c6:23:bf:46:60:49:43:08:5c:f3:c3:
e0:36:b2:eb:e5:e2:ff:75:26:01:6a:1d:40:fb:04:7a:4e:1f:
16:3d:ee:ae:00:a6:6b:81:38:16:f6:aa:27:e5:98:03:3f:6a:
08:1a:50:0e:6b:c2:62:87:ee:f9:79:d7:4c:8c:b1:ef:d1:95:
23:aa:5f:f1:7b:1c:ae:53:d0:37:c3:5c:aa:d4:88:29:ca:e4:
31:b5:47:6d:fa:9e:f8:b5:e7:4f:23:db:61:de:3d:02:fb:3a:
b1:01:15:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:37 2024 by rpki-client on console-ams.rpki-client.org