Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AQzv1ks0VNVbfKGOhqJE9J9LG2M.roa
File: AQzv1ks0VNVbfKGOhqJE9J9LG2M.roa (raw, json)
Hash identifier: p90k1SOldIuqL3dugsy94BJEnxd+Nx5kpMRKzM/S38E=
Subject key identifier: 01:0C:EF:D6:4B:34:54:D5:5B:7C:A1:8E:86:A2:44:F4:9F:4B:1B:63
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01898BFC2D9DAEA87E95D0C3041E15141B1B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AQzv1ks0VNVbfKGOhqJE9J9LG2M.roa
Signing time: Tue 25 Jul 2023 07:38:27 +0000
ROA not before: Tue 25 Jul 2023 07:38:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
185.238.188.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:fc:2d:9d:ae:a8:7e:95:d0:c3:04:1e:15:14:1b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 25 07:38:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=010cefd64b3454d55b7ca18e86a244f49f4b1b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:0e:75:00:5e:21:24:28:45:c3:b7:bf:27:
bd:1b:95:0f:ba:51:6d:c1:a1:96:50:b0:dd:7e:90:
60:f5:ec:b1:ce:38:fe:56:30:34:e7:84:16:d9:95:
5f:b8:c8:54:30:6c:89:45:4a:52:41:8c:88:2f:ea:
ef:2b:a2:e8:05:14:eb:eb:8b:46:32:00:d1:28:5f:
b4:8a:e7:f4:72:d1:b9:cb:b2:48:de:70:fa:64:2a:
f8:23:5c:3f:19:e2:cf:68:0d:3f:ac:4b:17:92:c3:
70:0b:81:af:c1:dc:bb:2d:15:fd:8d:6c:71:7c:9e:
6e:ba:62:30:fa:5d:82:a9:e8:9c:b4:6b:2d:b5:3b:
f6:97:c1:af:ee:09:09:a7:09:a6:69:aa:24:a9:4b:
86:f7:24:58:5d:46:09:96:45:71:24:ac:67:d1:ca:
18:cc:a3:2b:a9:4f:37:3c:a0:c9:b4:cf:5f:70:ad:
f6:91:92:ff:72:98:3a:f6:08:0b:85:04:96:74:2f:
a7:f6:5f:43:c5:a5:f1:e5:e6:77:9f:4b:68:ac:a0:
40:71:0e:d8:53:89:87:ea:7c:e6:7a:6f:21:4a:0c:
09:0f:40:1f:e9:de:df:6a:37:e6:49:b5:e5:6c:d8:
9a:43:02:12:e5:7c:fa:6e:19:da:f9:72:bb:85:6f:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0C:EF:D6:4B:34:54:D5:5B:7C:A1:8E:86:A2:44:F4:9F:4B:1B:63
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AQzv1ks0VNVbfKGOhqJE9J9LG2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
185.238.188.0/22
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
b3:f7:8c:6b:11:b9:39:70:ff:3e:13:95:37:aa:8a:60:95:85:
b8:96:7c:e2:3c:ae:fa:8f:e1:48:23:d3:4a:54:fb:52:1e:e9:
94:3c:16:fb:75:c7:78:8b:0f:5b:32:fb:3e:ba:3e:23:23:43:
6f:c3:d9:38:ec:ab:9e:7e:53:b1:7d:c3:b0:1c:f4:a3:76:07:
3f:42:6d:89:3a:1b:58:9b:89:2f:75:c5:84:d9:4e:91:ed:16:
4b:f8:29:29:83:2b:be:f3:09:f7:af:37:2f:68:63:a8:ec:dc:
46:69:d7:dc:b9:f0:b0:69:0f:2c:bc:e2:6c:7c:d0:58:e0:a6:
e3:d9:ec:f3:a1:5a:ff:c9:4e:c9:1b:20:95:e8:0d:bc:78:d0:
a2:d9:8c:69:bb:03:0b:9a:6e:cd:cf:d8:9f:a9:a5:2a:84:e5:
ef:b3:16:57:07:f0:ad:c8:d9:aa:1a:42:33:47:f0:e7:0c:05:
28:c8:ea:3b:23:a4:36:94:4e:28:78:d9:b0:8b:38:32:04:02:
5d:0e:03:0f:51:86:3e:1e:e3:f4:5c:10:77:3f:e5:d8:05:d7:
bd:da:a1:8e:75:61:b0:38:bc:ab:b9:f2:3d:d3:6b:5b:c8:f8:
0b:5e:1b:4f:85:1b:09:83:64:4f:07:24:09:a1:19:d2:bb:81:
f7:c6:58:0b
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 2 17:07:57 2023 by rpki-client on console-fra.rpki-client.org