Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X7bOcmX6sTOdJLX9ujHNaQZ9Ox0.roa
File: X7bOcmX6sTOdJLX9ujHNaQZ9Ox0.roa (raw, json)
Hash identifier: pGp/nQMAa+6f9CFed7nE55+AfSAq7/ZbuohAaEjbfec=
Subject key identifier: 5F:B6:CE:72:65:FA:B1:33:9D:24:B5:FD:BA:31:CD:69:06:7D:3B:1D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E1DC609B9212358A7E1881B06EDA27905
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X7bOcmX6sTOdJLX9ujHNaQZ9Ox0.roa
Signing time: Fri 08 Mar 2024 11:15:01 +0000
ROA not before: Fri 08 Mar 2024 11:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
85.202.203.0/24 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a10:ccc0:420::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 10:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:c6:09:b9:21:23:58:a7:e1:88:1b:06:ed:a2:79:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 8 11:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fb6ce7265fab1339d24b5fdba31cd69067d3b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9c:a6:d2:ea:f8:9a:26:34:11:58:43:30:a5:
f5:2c:01:e2:e4:dc:d4:43:92:5e:4c:4d:7c:1f:66:
a4:b0:cc:6f:68:43:74:10:cd:6b:cf:88:4b:14:46:
11:eb:7f:5e:d2:1a:6b:95:fd:81:7c:01:a5:33:60:
9c:83:bc:18:8d:2a:10:08:0b:fe:1f:86:12:22:3a:
33:34:14:4a:65:11:96:41:ed:77:41:af:a0:1d:10:
31:44:77:90:2f:f0:57:bc:06:49:ef:24:4a:3a:15:
57:cb:b0:e7:45:46:04:60:83:5a:0b:33:07:bb:fa:
1c:2e:45:19:6c:fd:da:4c:60:cd:ca:92:46:9d:98:
97:73:56:33:4e:2b:54:31:7f:ce:40:3c:43:07:24:
be:93:bf:c6:50:58:d0:4d:3e:cb:c6:8f:6f:9a:59:
b7:70:64:c0:97:0d:09:02:70:3f:1b:de:db:d5:e7:
9f:92:c5:6d:dd:aa:4d:29:8b:b6:5f:08:3e:5c:cf:
30:0e:cb:cc:43:fe:1f:32:38:fc:ad:11:39:58:54:
02:85:94:02:e5:a6:5e:21:34:87:95:3d:f2:27:92:
b2:4c:a0:56:a5:72:3d:6c:33:0b:53:40:48:c5:c7:
4c:28:ae:87:3b:89:2a:75:5b:4c:95:96:c5:80:7d:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B6:CE:72:65:FA:B1:33:9D:24:B5:FD:BA:31:CD:69:06:7D:3B:1D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/X7bOcmX6sTOdJLX9ujHNaQZ9Ox0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
90:58:52:30:b9:2f:42:7f:2f:95:94:06:34:a3:b5:48:c0:f6:
4c:34:46:e3:5f:09:97:a4:a9:09:79:33:72:35:a4:4c:f6:4b:
4f:ac:39:8b:59:5a:eb:5d:ea:76:b6:f3:77:74:6e:be:64:ff:
3f:de:4a:90:42:6e:ca:46:18:7d:d8:73:56:d9:3c:9b:12:64:
7b:27:c4:d6:d5:16:86:ab:72:2e:36:2c:b6:34:f4:08:a8:b2:
7a:97:26:45:b6:05:b1:76:71:29:1b:a5:a2:4c:a1:7c:63:f3:
9a:70:df:13:b4:9a:3e:ed:42:cd:56:2c:a1:c0:ad:71:7d:78:
34:cd:61:03:a5:d4:76:14:94:11:39:38:f6:73:6a:9d:44:5a:
99:72:43:5c:5c:09:72:e7:22:70:d8:8e:4a:16:85:ca:78:db:
ef:da:44:72:ee:5e:97:d4:06:0d:ce:58:ae:01:01:c2:51:2b:
05:49:74:5f:64:47:9e:1b:29:7b:3a:03:22:7e:1a:07:f6:0b:
8c:a7:c3:f1:cd:70:87:2a:95:a1:cb:f3:c8:3b:25:fb:2b:a9:
86:a0:77:78:ed:5d:da:be:fb:fc:7a:d1:03:a8:cc:56:a6:db:
bb:bf:7e:8d:13:7c:63:c1:c2:19:69:ff:a4:65:56:42:e4:d0:
d8:a8:fa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 13:54:08 2024 by rpki-client on console-ams.rpki-client.org