Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/50WpNWnPA-iEY6oHuemkQWGMJNk.roa
File: 50WpNWnPA-iEY6oHuemkQWGMJNk.roa (raw, json)
Hash identifier: QEvYziGxxs76vLfZb9ymFAXMQN0i+GbywPWd68QLEno=
Subject key identifier: E7:45:A9:35:69:CF:03:E8:84:63:AA:07:B9:E9:A4:41:61:8C:24:D9
Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial: 018D267EADE7ED38F97228A897884DD703C9
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/50WpNWnPA-iEY6oHuemkQWGMJNk.roa
Signing time: Sat 20 Jan 2024 10:50:52 +0000
ROA not before: Sat 20 Jan 2024 10:50:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60077
IP address blocks: 78.110.112.0/21 maxlen: 32
78.110.112.0/22 maxlen: 32
78.110.116.0/22 maxlen: 32
85.198.8.0/21 maxlen: 32
85.198.8.0/22 maxlen: 32
85.198.12.0/22 maxlen: 32
85.198.16.0/21 maxlen: 32
85.198.16.0/22 maxlen: 32
85.198.20.0/22 maxlen: 32
193.151.128.0/19 maxlen: 32
193.151.128.0/20 maxlen: 32
193.151.144.0/20 maxlen: 32
193.151.157.0/24 maxlen: 32
193.151.159.0/24 maxlen: 32
2a05:1a30::/34 maxlen: 128
Validation: Failed, certificate revoked on Fri 12 Apr 2024 12:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:26:7e:ad:e7:ed:38:f9:72:28:a8:97:88:4d:d7:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Validity
Not Before: Jan 20 10:50:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e745a93569cf03e88463aa07b9e9a441618c24d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:36:21:3f:6e:40:f8:ad:8c:29:03:ad:17:d4:
fe:62:a8:09:16:12:47:76:dd:a0:98:2a:f5:55:21:
91:79:9d:d0:86:77:fb:21:ca:ae:95:92:04:bc:40:
ba:26:67:e5:73:cb:82:7f:65:d2:c6:b9:a5:4c:20:
0c:c9:ac:ab:1d:3a:88:ad:4d:86:58:16:0c:f7:4a:
d1:d1:b5:c1:20:6f:6e:e2:da:08:07:0f:d3:f0:33:
0b:b2:86:5d:a1:b2:2c:b5:42:f5:a9:fd:10:77:71:
67:3e:10:82:51:1d:97:d8:1f:38:ec:09:be:a2:ab:
6d:b5:a8:4e:ef:8a:1b:b2:a2:c6:d1:2e:81:c1:c7:
07:51:43:23:98:f5:97:01:33:3b:35:63:79:cf:27:
2e:1c:fc:9a:63:45:74:ea:33:78:4c:e3:c3:0e:ac:
4a:86:c6:b1:69:8b:78:39:54:b3:60:df:4f:75:a2:
07:94:d0:96:b4:06:3e:71:13:52:ae:81:ba:0a:74:
68:38:d3:5b:4e:9a:4c:46:52:d7:93:b7:de:9a:f7:
d5:44:4b:64:87:57:25:17:31:6c:4b:7e:54:43:f0:
20:ff:0d:28:92:d9:5c:b7:02:76:73:27:8e:2b:d3:
45:9d:dc:0a:db:25:56:ff:0d:09:85:f5:7c:c3:10:
ca:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:45:A9:35:69:CF:03:E8:84:63:AA:07:B9:E9:A4:41:61:8C:24:D9
X509v3 Authority Key Identifier:
keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/50WpNWnPA-iEY6oHuemkQWGMJNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.110.112.0/21
85.198.8.0-85.198.23.255
193.151.128.0/19
IPv6:
2a05:1a30::/34
Signature Algorithm: sha256WithRSAEncryption
54:73:5d:5c:0d:44:ab:ce:92:4e:e2:0e:11:1d:ef:d2:bc:00:
f8:18:11:7d:39:db:35:f8:bd:e3:6c:01:f9:ee:c2:51:a3:4a:
fb:4d:f3:37:3c:1d:43:be:d5:70:20:55:40:3f:85:53:b3:4a:
50:c5:37:59:40:5c:13:3a:af:96:4b:43:da:3e:5d:3f:db:29:
db:de:ed:46:aa:b3:58:84:26:f9:ba:fc:62:5c:7b:ca:cc:4b:
da:3f:c3:48:5a:25:5c:c6:0e:29:d9:11:57:c5:cb:43:76:71:
dd:e6:b8:4b:c5:59:dd:44:b8:52:bf:41:30:03:a1:ac:3a:c6:
e2:50:32:6c:84:dd:89:3b:2a:7c:3f:24:15:6f:8e:68:a9:ca:
56:c2:b1:e7:30:ca:f4:47:d9:86:7e:02:6d:4f:4d:2e:72:ca:
bd:fb:ee:50:44:91:d8:fb:37:22:70:e0:e2:f1:32:87:4a:ab:
a4:66:aa:0f:fe:d0:18:85:32:e8:80:60:fa:bd:aa:5d:78:db:
e5:d8:c0:cf:71:f4:50:7e:c3:f8:98:62:51:1b:64:18:86:d9:
64:fc:c8:72:4a:30:3e:62:1a:8a:fc:96:9f:c5:ba:c7:f4:7a:
80:e8:6a:13:cb:27:19:02:1e:3f:31:5c:9d:8e:e7:3f:86:b9:
69:ec:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 16:14:15 2024 by rpki-client on console.sobornost.net