Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LJcOn7aKZDi1uOrHc8_BaIT_DWA.roa
File: LJcOn7aKZDi1uOrHc8_BaIT_DWA.roa (raw, json)
Hash identifier: g+datWeJqW3H4A5MU3aAYbLYt8mXFBvM9PxKHhyUtMM=
Subject key identifier: 2C:97:0E:9F:B6:8A:64:38:B5:B8:EA:C7:73:CF:C1:68:84:FF:0D:60
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018776338C09FAB9235FBD1BAEA5AE18526E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LJcOn7aKZDi1uOrHc8_BaIT_DWA.roa
Signing time: Wed 12 Apr 2023 16:01:42 +0000
ROA not before: Wed 12 Apr 2023 16:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0e:97c0:790::/48 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b83::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:33:8c:09:fa:b9:23:5f:bd:1b:ae:a5:ae:18:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 12 16:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c970e9fb68a6438b5b8eac773cfc16884ff0d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:c1:5a:03:98:1b:91:a1:bc:00:d0:fd:8a:
f5:da:f8:00:1a:05:7a:c8:6d:87:3e:94:74:dd:c4:
bc:b8:8c:b6:da:4b:d5:13:22:1f:7b:96:27:2b:85:
a8:c4:bc:d0:10:e8:fc:32:0c:b3:48:eb:4e:d8:e3:
cc:44:57:6f:c5:67:20:0d:44:5d:71:90:74:36:95:
bf:1e:bd:a5:74:65:e1:73:8d:5f:7e:0c:e4:f7:42:
ff:2d:b1:d9:93:84:06:64:be:db:96:c3:62:70:ea:
41:e4:70:db:3b:b6:30:8f:50:4c:98:51:99:2b:c8:
92:1a:96:56:69:e2:6e:3a:f5:b5:9d:73:dd:d7:55:
8e:d1:6d:3c:5b:15:20:9d:a9:cd:e9:9e:a9:f3:3b:
a3:66:cd:10:a5:fe:b5:5f:11:eb:34:d5:2e:7b:f6:
5c:b8:cb:85:17:37:c9:f1:40:91:e5:14:d4:8e:13:
70:65:1f:aa:95:2f:a8:07:f3:c6:70:97:96:3a:2c:
44:cd:84:80:7d:33:a5:a4:bf:f9:6a:c0:68:53:ed:
56:44:5e:de:80:79:75:bd:19:ff:89:c0:cc:e1:66:
37:17:a5:dd:69:d4:65:df:eb:99:77:1e:ae:56:8d:
7e:06:ee:bf:f1:90:b8:d3:37:a3:ce:6c:7a:d4:2f:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:0E:9F:B6:8A:64:38:B5:B8:EA:C7:73:CF:C1:68:84:FF:0D:60
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/LJcOn7aKZDi1uOrHc8_BaIT_DWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c0:790::/48
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
Signature Algorithm: sha256WithRSAEncryption
49:e3:f8:66:bd:f2:6d:2e:2f:ff:c1:8c:cc:2a:e3:8b:c7:f1:
6a:41:02:c8:94:6e:cd:bf:45:bb:d7:3c:ec:86:2f:6e:30:23:
d0:2e:8b:70:6b:9e:0f:37:13:81:9d:09:a0:9c:69:40:b7:61:
2d:b2:0f:49:e6:36:19:97:40:cf:23:54:9c:85:68:69:df:1f:
d7:f8:fc:0e:e3:8f:57:eb:70:83:1c:13:ee:b8:90:18:6e:a6:
b9:8d:dc:d5:e6:59:d4:6e:50:ea:25:1e:7a:e5:06:71:ab:73:
50:f2:45:61:e2:40:11:d0:b2:5e:82:60:19:73:30:ac:6c:e1:
de:0f:2b:7d:d8:43:1a:a7:c8:cb:52:4e:d6:e8:a5:fb:9c:06:
1e:74:a5:6e:8d:0c:a7:ef:75:da:20:31:7e:3b:78:06:69:5c:
56:5a:d3:35:89:00:ea:51:a6:a2:c9:82:f2:9a:bc:35:99:28:
21:1d:59:5b:f3:d1:20:28:7b:fc:3f:74:c5:d3:e9:42:54:17:
88:0b:4c:7c:03:99:f4:35:8a:12:56:95:bb:bb:42:c2:de:6d:
22:ec:70:bf:b5:a6:b1:94:66:99:d7:d0:75:43:b7:b6:3d:3e:
43:88:fd:79:b6:57:e3:ac:1a:46:7e:7e:b2:35:42:66:36:95:
5d:82:ab:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:58 2023 by rpki-client on console-ams.rpki-client.org