Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GE2D5ydy9GNvyODZlX00ZRbqU08.roa
File: GE2D5ydy9GNvyODZlX00ZRbqU08.roa (raw, json)
Hash identifier: Fn6h0gm8uHoW7zjmj+P4dqNZW7dNa7Mo7Olf684ToPk=
Subject key identifier: 18:4D:83:E7:27:72:F4:63:6F:C8:E0:D9:95:7D:34:65:16:EA:53:4F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018A2D750D9AD47C2EE200299E28006719F8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GE2D5ydy9GNvyODZlX00ZRbqU08.roa
Signing time: Fri 25 Aug 2023 16:09:20 +0000
ROA not before: Fri 25 Aug 2023 16:09:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
185.238.188.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
93.88.200.0/21 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:75:0d:9a:d4:7c:2e:e2:00:29:9e:28:00:67:19:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 25 16:09:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=184d83e72772f4636fc8e0d9957d346516ea534f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:7f:ce:70:ac:64:ee:48:bb:a1:9a:26:a6:
c5:36:36:a0:69:6a:b2:e4:79:21:9a:0f:7e:7b:72:
4b:da:5c:db:36:90:93:6d:f8:23:3e:cf:4b:42:c4:
e7:1c:93:09:2c:b5:ea:5f:4e:61:9c:b6:14:f4:b1:
3e:39:c8:ce:77:a5:c8:a1:18:9f:69:21:42:36:00:
29:83:0d:a4:60:eb:01:fa:1f:27:60:23:8b:c4:6d:
b1:e0:3b:85:45:37:cd:b9:10:08:a4:9f:86:96:f7:
dd:01:ed:8a:84:38:77:2c:b4:85:1c:11:82:eb:9c:
c9:f9:67:dc:8d:49:d2:fb:25:b6:97:58:fb:d0:dd:
1a:f8:4f:ba:ce:4c:8e:98:37:90:65:75:e7:f7:3e:
62:13:45:22:55:68:56:e9:9c:b3:6b:22:1a:0f:7a:
18:48:ee:69:df:a7:b3:48:e1:69:e1:95:81:bc:f6:
cb:21:5b:fd:b3:fb:a8:00:27:06:11:b1:dd:26:12:
f5:2e:dc:d3:4d:3b:1c:dd:02:e9:ed:ef:d8:81:cf:
74:ed:ce:e2:a5:2f:12:01:3d:83:e9:61:22:42:07:
01:9b:08:c0:94:b2:19:5d:17:ab:6c:2c:b0:8d:19:
d4:c6:43:30:99:44:0c:01:7c:a7:55:1d:e3:c8:01:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4D:83:E7:27:72:F4:63:6F:C8:E0:D9:95:7D:34:65:16:EA:53:4F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/GE2D5ydy9GNvyODZlX00ZRbqU08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
185.238.188.0/22
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
94:a5:7f:cc:7d:cb:97:18:2c:4e:d6:f1:70:6d:1d:53:c7:6c:
15:39:69:98:69:2a:0b:ad:5e:45:17:85:5f:c9:dd:cc:1f:cc:
18:22:8d:43:10:90:7f:d6:43:62:df:6b:28:d8:82:3f:04:d1:
58:6a:9b:87:3b:23:4d:23:57:10:aa:38:18:4b:7e:a4:1c:c2:
8f:4d:a8:be:36:bd:20:70:fe:f9:ba:e2:aa:30:92:89:b2:bd:
7b:b2:d9:39:9b:bd:9e:84:9b:ae:7e:13:68:d8:48:a9:3e:93:
fd:b9:1b:2d:f0:73:14:a8:e6:3e:74:ac:7b:83:53:b8:37:e2:
22:40:b2:73:67:7f:9c:a4:19:b7:c8:01:04:fa:aa:c8:bf:c9:
15:ce:53:df:96:91:ce:8a:f1:58:26:79:2d:d2:1f:ed:75:f8:
98:7f:e7:eb:d0:0c:6e:94:c4:69:9e:1a:42:d2:bc:49:73:20:
dc:c9:0c:55:8c:04:b7:64:85:d9:70:c9:80:8b:f9:4f:3e:87:
88:a0:23:bf:f0:2a:5f:d1:9a:74:eb:c6:41:42:2f:f6:c7:cf:
f1:e7:e4:f7:74:39:18:41:6e:5e:b3:2d:1d:e1:ad:f7:2b:fe:
0b:dc:a9:8c:9a:c8:00:20:b0:dc:54:a2:70:1e:45:8c:90:5b:
6a:1a:db:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 14:17:59 2023 by rpki-client on console-fra.rpki-client.org