Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H8Wi4toI3QpYcBS1_eQrC4tKtw.roa
File: 0H8Wi4toI3QpYcBS1_eQrC4tKtw.roa (raw, json)
Hash identifier: Uoh2vBPCAznl22OzUJixGBWA6ayEfwfXHo68L8vyKuk=
Subject key identifier: D0:7F:16:8B:8B:68:23:74:29:61:C0:52:D7:F7:90:AC:2E:2D:2A:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190A897207A9F485A8D2C95E39BF099A56D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H8Wi4toI3QpYcBS1_eQrC4tKtw.roa
Signing time: Fri 12 Jul 2024 20:16:34 +0000
ROA not before: Fri 12 Jul 2024 20:16:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 12 Sep 2024 06:50:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a8:97:20:7a:9f:48:5a:8d:2c:95:e3:9b:f0:99:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 12 20:16:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d07f168b8b6823742961c052d7f790ac2e2d2adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:12:33:4f:2f:8e:2c:20:69:81:41:22:47:
de:21:3f:37:06:53:80:14:0c:5e:73:54:b0:dc:12:
27:56:29:d1:0f:09:f8:47:fe:ec:8e:d1:26:2a:cf:
54:68:d2:d2:7b:67:97:cf:1d:bb:69:4c:9c:92:76:
c3:21:56:b2:e6:25:72:46:31:30:c9:5f:4e:95:0e:
ca:11:57:6c:7c:92:a1:8a:94:c2:b7:c2:9e:e9:1e:
51:50:d2:55:6f:39:f5:6c:6a:4a:11:e0:8f:cc:b5:
1a:5b:b1:5a:f9:f5:d1:c2:35:5e:b6:84:7f:61:99:
d3:ee:d9:cc:46:4b:a9:11:22:88:e3:56:b6:00:b9:
29:5f:f6:69:fd:ae:45:f3:7a:82:ce:83:88:11:b5:
49:ed:42:68:8d:4c:10:7b:99:94:1c:3a:8a:68:f8:
b8:be:8f:95:a2:9f:3c:5e:cb:ab:b9:fc:55:4f:a2:
fe:bd:d4:a5:83:dc:9c:26:54:b4:e5:f3:8a:7a:51:
da:f2:a1:53:db:4a:9e:3a:4a:a1:b4:e1:89:e2:8b:
b3:5e:a6:6b:ac:00:e3:d8:62:53:03:09:e4:5d:80:
31:d2:be:d9:dd:b0:e9:4e:1a:31:20:6c:d6:f2:92:
4c:55:94:5a:02:6b:dd:c6:4f:b9:55:0b:07:da:f1:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7F:16:8B:8B:68:23:74:29:61:C0:52:D7:F7:90:AC:2E:2D:2A:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0H8Wi4toI3QpYcBS1_eQrC4tKtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
a8:64:70:ea:8c:08:20:7a:e1:49:ec:ce:68:1b:21:a4:fb:7f:
6c:63:ab:ba:1f:6b:2f:9d:aa:ca:c7:f0:5a:34:39:ab:7f:f8:
e7:4a:ad:17:93:42:90:c7:c7:94:98:be:47:e4:4b:ef:97:ce:
c9:f4:72:36:f3:c9:9a:db:cb:d7:9d:f1:8b:49:b2:f7:c1:83:
7c:50:ca:d9:6d:b9:f9:a7:9d:a0:1d:cb:c6:b8:1f:40:b5:26:
84:12:73:ec:b4:9d:76:4f:21:fa:96:32:fd:66:a4:7a:ec:65:
40:cd:de:58:7e:67:7f:6e:b9:6a:98:c2:67:db:8c:de:fa:b4:
57:01:81:7b:7a:8a:d4:0a:46:7c:69:37:d7:56:71:bc:80:42:
65:58:8e:10:d4:d8:77:70:aa:5e:d9:04:bf:27:6e:de:15:f1:
07:e4:26:46:6e:79:e3:1e:48:88:54:08:9d:b8:1f:70:f2:27:
67:e8:8c:62:50:a5:d3:21:58:87:ed:b5:52:67:7b:27:a7:cd:
f8:13:23:1f:1d:98:41:7c:23:e2:7d:2a:e6:97:c4:b4:56:9f:
00:d2:f1:95:0f:ae:11:fb:58:fe:ec:a9:38:e7:7f:15:ba:5b:
12:cb:3d:b7:e3:c1:a8:41:e5:e0:1b:c2:20:bb:e6:56:89:53:
23:9a:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 09:32:12 2024 by rpki-client on console-ams.rpki-client.org