Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Llz64ojjgvWm8kQq6MXY6YgDHwc.roa
File: Llz64ojjgvWm8kQq6MXY6YgDHwc.roa (raw, json)
Hash identifier: cnD5FBcsud+AEYZn0CClpzgRKDXExSLar9U+hPxS8a0=
Subject key identifier: 2E:5C:FA:E2:88:E3:82:F5:A6:F2:44:2A:E8:C5:D8:E9:88:03:1F:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01921389787AA607213636F76C63EF009CC3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Llz64ojjgvWm8kQq6MXY6YgDHwc.roa
Signing time: Sat 21 Sep 2024 07:43:49 +0000
ROA not before: Sat 21 Sep 2024 07:43:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 21 Sep 2024 19:33:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:13:89:78:7a:a6:07:21:36:36:f7:6c:63:ef:00:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 21 07:43:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e5cfae288e382f5a6f2442ae8c5d8e988031f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:3a:04:85:a8:29:8a:01:c7:49:32:14:53:
aa:04:65:95:1e:ae:ba:38:7c:5b:f4:6c:bf:c9:b8:
c0:62:cb:2d:8d:fc:b6:5b:1b:3b:c1:98:61:69:72:
5c:34:20:62:58:8d:80:fb:ee:8c:a2:e6:d5:6c:af:
ec:3f:5b:ba:97:49:26:92:fb:9a:de:8f:af:15:a5:
19:91:5f:4c:16:99:f3:15:bd:16:2b:b5:a1:e1:86:
59:ef:07:ee:f2:85:4a:02:a7:4d:62:32:75:c9:6b:
43:ed:51:84:2e:54:f0:00:fc:6a:41:7e:a7:01:e3:
70:fc:97:b6:1f:75:aa:fe:f5:58:bb:1b:05:81:8f:
f8:9b:52:28:42:c8:69:5f:a8:fc:77:2d:fc:71:ae:
64:6c:b7:3c:7a:b9:64:c4:33:d4:56:5d:62:f7:f0:
5f:59:9d:75:09:65:17:ed:d8:ee:b8:a4:cc:1e:bf:
71:51:f3:20:8f:47:0e:80:63:1d:b6:c0:4f:58:5c:
bf:38:2a:a3:19:f5:0a:40:ce:49:5a:a0:20:28:c6:
cc:86:8c:5b:7c:97:87:24:7f:de:d2:08:67:d9:72:
21:4b:a5:62:0a:a6:a6:9a:2e:5c:82:d5:06:8c:53:
17:51:fd:30:c5:e9:69:68:d9:17:3e:3b:28:67:55:
29:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:5C:FA:E2:88:E3:82:F5:A6:F2:44:2A:E8:C5:D8:E9:88:03:1F:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Llz64ojjgvWm8kQq6MXY6YgDHwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
a8:d6:06:a3:83:55:1c:94:67:b5:da:47:2d:fc:e2:af:dc:61:
55:44:00:0b:db:5a:a8:17:08:e1:58:73:70:21:f6:83:d1:10:
78:28:50:56:5e:95:c5:4e:2d:2b:0d:e2:c2:5a:b8:20:9d:c6:
5d:06:c2:62:fb:e6:37:26:97:38:02:c1:96:9b:e3:bf:54:9b:
86:f8:fe:3d:73:01:17:3b:2b:d6:f1:3b:87:c2:65:48:c1:1b:
47:b4:a5:0c:f2:26:23:28:da:0c:4f:06:75:60:c0:d5:b0:53:
eb:5a:99:5a:79:c6:a5:6f:f6:0d:a9:50:58:39:62:0d:30:7d:
83:33:45:fe:10:ca:48:df:de:29:e0:53:06:cd:20:84:a8:00:
3d:fe:ca:e1:18:17:26:b4:e6:51:37:ff:01:e0:df:e5:d3:e6:
0e:8d:00:1d:64:c9:92:13:15:0e:e8:e2:93:2e:3a:43:58:f4:
a9:46:cf:2a:d5:89:3f:11:0c:bd:ab:f3:38:91:8b:96:54:91:
da:c5:76:7d:33:05:ea:29:77:fc:06:f6:33:2a:f4:cd:b5:45:
56:65:af:49:3b:09:85:d7:4e:fb:6d:31:0c:d5:28:ca:9b:15:
40:51:b3:ec:2b:69:95:76:c0:ad:1f:00:1b:ff:a7:37:2a:c8:
ae:f6:ba:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 21:00:10 2024 by rpki-client on console-ams.rpki-client.org