Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HNELH_9nKGs1xBae338o-UKOJHQ.roa
File: HNELH_9nKGs1xBae338o-UKOJHQ.roa (raw, json)
Hash identifier: CK5qo8Fnd6Rb30nJvvwNyPQ6dOlD1J9KqQVYCAD75UU=
Subject key identifier: 1C:D1:0B:1F:FF:67:28:6B:35:C4:16:9E:DF:7F:28:F9:42:8E:24:74
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC0602811BADE955DD29F7108FA47
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HNELH_9nKGs1xBae338o-UKOJHQ.roa
Signing time: Tue 24 Jan 2023 16:09:36 +0000
ROA not before: Tue 24 Jan 2023 16:09:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c0:60:28:11:ba:de:95:5d:d2:9f:71:08:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cd10b1fff67286b35c4169edf7f28f9428e2474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:e8:ca:67:96:6a:16:9b:e1:bb:f5:16:e8:74:
05:68:ec:a1:93:6b:90:e0:a3:5f:66:32:c2:3a:1b:
f0:02:f5:ec:f8:f8:50:5e:e2:d3:fa:66:d0:3c:a9:
ca:f9:e1:15:cf:92:6a:09:e7:a3:33:b5:e9:a3:3b:
6d:d8:6e:bd:64:60:62:3f:46:1b:8e:e3:0c:4a:33:
3e:e4:cb:5e:b3:8b:53:26:57:bb:dd:b6:83:cc:30:
bf:41:4d:44:81:35:0c:0d:b7:33:99:a3:19:07:7d:
b9:ab:b7:02:82:53:a4:7d:3d:07:df:62:d5:74:2e:
56:17:a8:8c:a4:15:f2:ba:64:bf:9d:53:f3:f4:11:
ed:b9:fb:d6:99:09:a0:51:22:b5:3a:dd:f5:7c:db:
ee:d1:9f:c2:c4:b8:ab:bf:1a:40:47:5a:66:c3:d9:
9c:74:53:34:6f:cb:e1:46:27:1a:f4:a7:a6:8b:ff:
1d:3d:1e:9c:b8:6c:21:71:f8:51:e1:f9:c8:da:b0:
88:e1:8a:e3:01:9a:09:43:f7:a9:0a:6e:87:03:95:
1a:d3:58:10:7d:17:51:c3:e9:ef:08:01:64:69:10:
fb:17:58:78:71:2a:d9:85:2b:5e:fa:60:53:48:44:
2c:ab:11:37:66:28:e7:b8:57:a7:c1:07:43:ec:c3:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:0B:1F:FF:67:28:6B:35:C4:16:9E:DF:7F:28:F9:42:8E:24:74
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HNELH_9nKGs1xBae338o-UKOJHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
25:c6:fe:d9:ac:83:50:f9:56:cd:e8:66:8d:f0:53:a2:58:27:
23:9d:b3:30:86:aa:ba:48:07:a9:7a:d4:93:e7:06:0c:7e:91:
e6:97:b9:d4:a4:05:40:df:ae:cc:5a:f8:c4:fc:be:b2:0f:f7:
7d:2a:ab:23:40:c9:55:a1:3f:8d:bb:ae:d2:b5:99:59:dc:36:
1b:f5:06:cf:af:2b:cf:81:54:4e:d2:ac:26:15:64:a0:28:02:
ef:ef:72:eb:fd:87:88:4f:d7:c3:9c:df:59:90:b4:a3:44:23:
fe:48:80:f3:86:1d:03:1b:d6:0a:4a:60:06:57:ef:bd:c0:74:
c6:86:ed:e7:b9:5c:5f:51:c2:6a:e7:d1:1a:2d:f6:da:4b:76:
44:b9:b6:c0:90:6a:90:52:cc:18:aa:e3:d5:4d:2d:61:41:21:
b3:32:cf:a9:9d:6b:30:f9:11:ff:54:51:09:c0:a0:b9:2d:dd:
65:16:69:65:35:61:f2:c8:27:1a:8f:83:80:09:66:8f:9a:20:
d4:b8:2c:f6:e0:c9:51:48:a0:57:84:90:05:83:eb:39:28:f2:
25:6e:13:19:41:b2:e3:4d:46:4c:f0:a0:48:68:65:22:58:96:
6b:48:3c:19:a9:fa:57:1c:db:90:35:57:5a:26:52:7f:2a:78:
23:84:21:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:14 2023 by rpki-client on console-fra.rpki-client.org