Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KSeIBrozadRq9wIDz6b-2eHxfs.roa
File: 6KSeIBrozadRq9wIDz6b-2eHxfs.roa (raw, json)
Hash identifier: aavz5Vzenv9hIXA1mkkw0+q+n7OH+RfeytGSuLO9MbM=
Subject key identifier: E8:A4:9E:20:1A:E8:CD:A7:51:AB:DC:08:0F:3E:9B:FB:67:87:C5:FB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187FB6233962F1489D2D7D56D334772FD77
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KSeIBrozadRq9wIDz6b-2eHxfs.roa
Signing time: Mon 08 May 2023 12:42:09 +0000
ROA not before: Mon 08 May 2023 12:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fb:62:33:96:2f:14:89:d2:d7:d5:6d:33:47:72:fd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 8 12:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a49e201ae8cda751abdc080f3e9bfb6787c5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:b6:11:fd:46:45:94:ea:82:90:59:5f:d8:
a9:91:79:ad:13:2e:e9:3a:cf:41:66:08:76:89:4d:
72:7b:72:75:1f:47:2f:89:1c:ce:c1:fb:ce:48:6c:
f8:c5:bd:66:41:c0:2a:0d:02:1e:d5:cc:c9:e8:94:
36:66:9f:6f:c9:dd:f9:74:e2:29:0c:59:07:fe:83:
07:59:2e:1d:31:31:7c:95:f5:d1:a0:7d:96:d1:3f:
e6:9d:bf:c1:98:0a:7e:6e:a2:3d:06:94:7b:ca:a3:
7d:1c:22:55:f6:44:84:15:14:9c:1e:bd:b9:03:49:
69:8c:1a:5f:52:99:10:1f:3b:ed:95:6a:9b:93:a3:
40:c8:f0:f2:19:7b:68:24:16:a7:ed:d9:2b:6f:74:
40:15:65:98:3e:7e:44:80:a8:2e:61:bf:65:fb:4b:
43:b0:54:d0:f9:ed:8e:ab:fe:70:5a:b0:b4:e3:5b:
7e:b2:a7:2a:5b:de:ac:bf:10:76:7f:08:e1:66:41:
03:8e:4f:a5:92:de:f5:03:b2:2c:50:9a:38:4d:02:
0a:cf:04:86:47:37:65:98:a6:39:c3:4b:dc:db:0b:
9a:9e:b5:75:41:2a:00:51:7e:8e:3e:38:aa:82:9c:
56:04:3f:00:3f:bb:75:b0:57:e9:4b:41:52:32:65:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:9E:20:1A:E8:CD:A7:51:AB:DC:08:0F:3E:9B:FB:67:87:C5:FB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/6KSeIBrozadRq9wIDz6b-2eHxfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
56:a0:b1:70:28:de:6d:af:a0:3b:9e:75:b0:a1:ce:56:44:8f:
64:c4:4a:f3:d4:66:d1:63:01:34:18:de:b0:40:ca:be:72:38:
3c:48:8e:7d:c4:4c:49:93:2c:b3:d1:73:4a:09:3b:aa:a7:b4:
89:bf:dd:df:66:b3:31:25:f6:eb:dc:7e:e7:1b:f9:e4:0b:ec:
84:c3:08:2d:b6:bc:2c:e9:b1:1c:0e:c6:07:44:65:ec:d0:66:
37:0a:bf:50:19:44:02:bc:52:a3:cd:3c:6a:c4:51:10:10:19:
38:d4:4b:f7:51:7d:59:97:e3:43:22:b8:5d:07:85:b1:87:51:
ad:88:b6:a7:a0:55:90:52:e3:7a:ef:46:bc:a9:67:08:67:b9:
f3:31:ee:91:a3:dd:6e:9c:39:4e:77:ed:02:cb:94:71:bf:fe:
0a:07:e2:7b:f5:84:c4:3e:37:76:f3:0a:cb:51:23:98:7a:fb:
32:6f:29:bb:86:b1:15:b1:fc:e3:32:7a:06:b6:1d:f0:03:70:
2a:31:bc:31:1a:7c:30:10:f8:1c:0e:39:eb:45:86:8e:4d:fe:
5d:3a:13:67:7e:76:b7:2b:0b:22:7e:16:87:12:de:99:34:f3:
5a:22:30:77:a7:56:22:42:95:cf:78:8f:b9:8b:57:b2:41:8c:
1c:d4:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:13 2023 by rpki-client on console-fra.rpki-client.org