Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1UnQwmVzKbfzjsPTAL-4EbZhgLw.roa
File: 1UnQwmVzKbfzjsPTAL-4EbZhgLw.roa (raw, json)
Hash identifier: dFz2LX5wgG5daPeFyQqvFNZxL23cYMbaQ5pXjSQhJ3U=
Subject key identifier: D5:49:D0:C2:65:73:29:B7:F3:8E:C3:D3:00:BF:B8:11:B6:61:80:BC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187DAF7280A3ACB20B07ADA74609D76CFDD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1UnQwmVzKbfzjsPTAL-4EbZhgLw.roa
Signing time: Tue 02 May 2023 05:37:23 +0000
ROA not before: Tue 02 May 2023 05:37:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:da:f7:28:0a:3a:cb:20:b0:7a:da:74:60:9d:76:cf:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 05:37:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d549d0c2657329b7f38ec3d300bfb811b66180bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:66:99:99:d0:f9:5f:a4:8d:a1:8f:c9:f8:
98:36:6d:0a:15:80:1f:95:77:dc:fc:45:a5:f1:2c:
69:70:f5:69:96:18:7e:f1:91:a8:0a:8e:cd:93:a6:
e3:99:cf:ec:85:d0:f0:c8:8b:1c:92:24:8e:83:27:
3f:25:8f:44:0f:a5:ae:2e:dc:c9:37:37:10:ce:65:
4d:3b:b3:4e:63:1a:70:43:1b:06:02:7c:10:bf:07:
33:7b:91:d6:ef:b2:d9:df:da:95:be:af:ea:87:98:
06:9b:82:17:fd:6a:06:08:5b:14:5d:2c:32:c1:0d:
17:b5:2f:9b:9b:79:bb:08:92:37:a2:37:59:02:fb:
c5:86:ed:bc:47:ed:2a:44:6a:d7:6a:c4:41:65:ea:
41:58:79:47:8b:5f:7c:ed:f0:85:36:9f:97:bc:f8:
8e:fc:74:0c:6d:fb:6e:dd:4c:cf:1d:67:4e:42:43:
69:d9:07:71:f0:77:29:c8:4c:90:cb:bb:24:66:86:
a2:97:ed:a0:b8:36:99:53:ab:c5:03:d8:c6:dd:e6:
83:5d:a4:39:b5:75:e5:9f:28:cd:d2:d5:0f:88:d8:
e0:8a:60:76:b9:6a:85:fe:f6:29:29:e1:0c:e8:40:
96:a3:43:04:d3:21:b1:ac:18:0d:26:9e:81:a7:5a:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:49:D0:C2:65:73:29:B7:F3:8E:C3:D3:00:BF:B8:11:B6:61:80:BC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1UnQwmVzKbfzjsPTAL-4EbZhgLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b105:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
8f:22:2f:1e:f2:92:ea:41:97:fa:72:a6:9a:2a:c8:74:2f:8f:
af:f7:7f:8e:7f:73:d4:ed:1c:90:e6:ad:70:1b:d8:88:8b:11:
7c:4f:bf:24:10:4a:fb:3b:dd:04:53:78:80:3a:89:ff:37:52:
a9:ab:eb:71:14:c1:05:e3:ad:69:4a:1d:fa:7d:fa:61:b4:82:
1a:b4:8e:a5:1e:4d:48:8b:dd:a1:43:9f:21:05:a4:e9:54:b7:
eb:10:22:13:c7:78:ed:52:74:cb:08:15:26:fa:f8:21:bb:e5:
a1:98:d1:9a:5a:b9:6c:11:68:cf:67:64:7b:02:b3:5b:e9:fb:
78:3e:7d:63:37:0d:c8:bc:00:48:bf:08:cf:b0:cb:40:2a:18:
87:33:57:90:5b:c7:a6:ee:7d:58:0b:78:ed:2f:a8:0f:e2:96:
38:2f:0b:e7:ef:43:b4:78:2b:a0:49:e0:2f:52:73:b3:39:00:
fd:de:05:09:18:3b:cd:b6:14:43:14:8b:af:de:54:2a:c0:75:
0a:26:02:a3:a8:17:c5:72:50:78:f6:f3:75:20:6d:b9:48:30:
d2:81:95:38:a6:9b:36:e0:cc:d8:d5:d7:49:7a:0d:90:7c:a6:
82:93:b1:e7:64:44:90:a0:30:6e:44:be:24:48:14:65:16:1c:
69:70:8e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-fra.rpki-client.org