Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YEdXqiS0s9L55p0Fcy0NNSY2FIQ.roa
File: YEdXqiS0s9L55p0Fcy0NNSY2FIQ.roa (raw, json)
Hash identifier: SVU94jR5Kxi/SkaJKR3CSJunaM4kDRIv8e5sHAaaXns=
Subject key identifier: 60:47:57:AA:24:B4:B3:D2:F9:E6:9D:05:73:2D:0D:35:26:36:14:84
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187E6B066532728A2BF6406D30C36A7D206
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YEdXqiS0s9L55p0Fcy0NNSY2FIQ.roa
Signing time: Thu 04 May 2023 12:15:32 +0000
ROA not before: Thu 04 May 2023 12:15:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:b0:66:53:27:28:a2:bf:64:06:d3:0c:36:a7:d2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 4 12:15:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=604757aa24b4b3d2f9e69d05732d0d3526361484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:fc:95:94:7d:c8:56:0b:22:eb:bd:a6:89:
8e:17:c9:8d:a9:4c:0a:fe:fb:a6:0d:09:60:d3:2f:
5a:07:16:ac:25:24:d9:49:33:58:03:15:50:2d:d3:
1e:3c:57:55:c1:62:74:59:c6:15:9d:bc:cf:ae:e7:
be:a4:1f:49:45:a5:67:a3:ed:8b:4d:cf:ab:35:70:
e4:69:0f:da:4a:87:cf:df:89:11:ee:44:5a:dd:04:
62:b7:2f:c3:13:8c:45:db:4b:99:4d:14:77:5d:51:
61:d1:7f:7e:a3:a8:4b:6a:b7:86:1c:c4:0d:23:96:
47:6b:ca:01:76:a3:47:07:96:4a:91:6f:7d:9e:d1:
9f:99:ac:fa:b7:29:18:26:a5:f2:8b:1a:6e:5e:81:
3c:5c:a7:eb:4b:a7:e9:c1:69:6d:eb:0f:b5:31:44:
a1:c4:57:ae:a4:24:71:64:d7:ef:c3:6a:65:cd:83:
05:96:e3:4a:6d:31:e5:57:02:cb:6e:88:44:88:b1:
bc:79:35:d6:0d:17:5b:17:f2:82:c5:4b:56:50:c5:
21:b2:b4:1b:6f:01:1e:0d:9c:56:e1:88:ac:a5:17:
4f:cb:d3:9b:22:6f:4a:6c:00:80:52:91:31:ff:2a:
c2:28:f8:74:7b:9f:fa:f0:39:ee:e4:0d:1a:eb:fb:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:47:57:AA:24:B4:B3:D2:F9:E6:9D:05:73:2D:0D:35:26:36:14:84
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YEdXqiS0s9L55p0Fcy0NNSY2FIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b105:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
6f:5b:c8:34:1f:43:a3:02:ce:62:d6:4c:57:c0:a6:d2:9a:0c:
ac:7b:e8:69:c0:f3:72:25:2f:7f:60:d0:94:06:86:e4:2f:20:
4b:dc:df:c0:99:0c:c3:fa:d1:94:26:4f:e4:3a:2f:84:ed:05:
c7:78:6b:78:49:3d:b1:6c:e3:16:b9:77:72:c1:f6:5f:a2:f8:
a8:cc:52:c3:10:a4:3b:4f:99:da:fa:da:c5:d2:32:11:15:ae:
3b:7b:ad:76:4f:f7:33:11:22:01:bc:d4:21:5a:59:0c:8f:36:
cd:27:ce:83:bb:bc:d3:48:32:be:53:99:0b:85:11:54:70:06:
0e:b9:6a:34:d2:77:43:82:7f:34:23:bf:f7:6c:68:a6:b6:b6:
ad:fe:f5:b7:65:51:47:23:53:8e:d4:db:dc:5d:4d:54:ec:c8:
98:f3:bc:c1:7f:fe:b2:68:ec:6e:13:7f:77:30:94:2e:0f:27:
b9:e2:50:2a:87:38:5f:40:bc:d2:d1:6a:68:75:4d:7f:e5:d9:
a3:12:ac:d4:3c:2f:98:0c:34:60:51:e5:03:f8:15:24:f6:0e:
b9:08:22:e0:3a:2d:48:47:56:1f:18:e8:e5:e7:e5:dc:cf:c1:
2f:b4:ae:a3:c8:0e:bf:04:4c:8f:e9:66:06:5e:ca:e5:c2:e9:
93:c5:2f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:00 2023 by rpki-client on console-ams.rpki-client.org