Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4iAKsVEJmMFnbevmHkAtibS2bvs.roa
File: 4iAKsVEJmMFnbevmHkAtibS2bvs.roa (raw, json)
Hash identifier: n4Ck6N4SbvvhILh9M8qg9Lk3mJCxs9A45TUWw2htrXQ=
Subject key identifier: E2:20:0A:B1:51:09:98:C1:67:6D:EB:E6:1E:40:2D:89:B4:B6:6E:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188DCA7322EC95846D98511329E8768B20C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4iAKsVEJmMFnbevmHkAtibS2bvs.roa
Signing time: Wed 21 Jun 2023 06:32:04 +0000
ROA not before: Wed 21 Jun 2023 06:32:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:a7:32:2e:c9:58:46:d9:85:11:32:9e:87:68:b2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 21 06:32:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2200ab1510998c1676debe61e402d89b4b66efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fc:59:46:ee:b6:86:29:9e:19:28:76:a2:c0:
5e:1f:f2:4d:65:94:30:29:be:60:cb:3e:e2:7c:61:
38:4b:95:0c:3c:03:96:c5:86:ae:5a:d1:66:66:7e:
1a:6a:12:f5:ea:11:d4:d3:47:7c:4a:fb:98:ff:54:
29:8b:24:c7:65:5e:e5:bb:c0:b8:12:67:33:6c:d3:
c5:8b:78:dc:85:f4:f2:3f:75:29:72:cb:64:3d:29:
b1:f9:86:49:80:73:31:5a:fd:67:6c:69:7e:59:74:
d4:f4:cc:d2:2d:91:94:05:26:22:89:b2:a9:2e:b7:
02:fe:74:d1:07:10:2d:81:7f:05:9e:4d:49:f1:92:
8c:93:09:fe:10:c2:76:fb:79:94:ca:a8:27:23:f2:
ca:82:54:dd:12:02:d8:73:21:a2:28:19:b8:20:df:
0b:91:7d:5d:8e:ec:f8:f3:fb:ea:b6:6c:b3:ad:09:
9a:da:d1:07:3a:a5:d7:ab:bd:10:7c:53:0a:a8:fc:
b0:e6:35:da:38:16:01:61:5c:18:22:29:51:ce:4d:
d9:cb:e5:42:82:33:3d:3b:16:41:72:0c:d0:d8:14:
7d:c9:d8:f7:57:5d:00:4b:27:a3:ff:0f:51:d0:8a:
12:ef:4e:6b:45:dc:50:ab:ba:58:4c:59:09:99:ee:
ba:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:0A:B1:51:09:98:C1:67:6D:EB:E6:1E:40:2D:89:B4:B6:6E:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/4iAKsVEJmMFnbevmHkAtibS2bvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.131.184.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc1::/32
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
39:a6:49:f5:5c:58:d3:33:50:2e:e8:00:a6:39:0b:e9:8a:f8:
48:0f:ac:0b:07:d8:35:5a:f2:69:64:fc:68:ca:5f:e6:b5:1e:
64:d3:87:98:0f:26:59:dd:4b:e0:fe:56:5c:53:1d:a0:a0:cc:
e3:27:f8:0e:a9:e1:63:45:c4:6d:17:8c:9e:fa:ed:ac:4d:6b:
e6:a1:de:ec:4c:b6:0c:93:d0:47:2f:05:cf:11:aa:ae:6b:7f:
96:18:ad:74:3a:2c:eb:84:4f:6b:99:6e:a2:0e:53:41:09:49:
70:cd:54:b4:b1:70:d3:78:0f:49:ea:96:8f:d1:de:95:5e:93:
04:21:37:22:a8:e7:d3:d7:e5:e8:f7:ff:b6:3c:d2:b9:d6:3d:
61:df:3a:b9:18:c2:3d:07:b1:bd:d6:f7:44:7c:ec:13:cc:92:
dc:0e:e8:ca:8f:83:c8:90:5c:7e:e8:93:ed:3c:21:d8:c6:5c:
2b:34:d2:58:79:5c:ce:b6:8d:ac:39:b2:39:54:11:28:da:b1:
ee:b9:b4:2a:dd:39:93:e2:e5:cf:24:d5:92:88:6e:b5:b8:46:
af:ea:c5:30:ef:d4:31:72:1a:38:08:66:70:cb:5d:8f:76:cc:
e1:93:8d:13:06:e6:a9:b7:2f:14:ce:7b:22:22:ea:34:d4:d1:
92:98:38:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:13 2023 by rpki-client on console-fra.rpki-client.org