Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZAEjBW0UMbEfSarJS2mceHxmJbQ.roa
File: ZAEjBW0UMbEfSarJS2mceHxmJbQ.roa (raw, json)
Hash identifier: saboh3zTuUt1omA+IXUR+5RVcoo+hoyA8clN71zieHI=
Subject key identifier: 64:01:23:05:6D:14:31:B1:1F:49:AA:C9:4B:69:9C:78:7C:66:25:B4
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01869F96912F5775E4CA4B45B92D2A528F8A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZAEjBW0UMbEfSarJS2mceHxmJbQ.roa
Signing time: Wed 01 Mar 2023 23:51:30 +0000
ROA not before: Wed 01 Mar 2023 23:51:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:b107:1e40::/44 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b83::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9f:96:91:2f:57:75:e4:ca:4b:45:b9:2d:2a:52:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 23:51:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=640123056d1431b11f49aac94b699c787c6625b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:89:dc:b8:1c:3f:b5:bf:b7:58:50:5d:fd:79:
87:c1:32:3c:f6:e2:d5:e2:ce:56:09:a3:b5:28:1f:
1a:59:5d:29:c9:81:67:a5:63:1d:b5:62:2e:3a:00:
75:39:5a:ab:24:72:30:37:e3:c0:b6:71:8e:0d:3b:
e2:13:35:9b:a1:7d:b1:95:32:2a:4d:21:56:b4:71:
35:fc:94:b6:b8:5e:31:26:b2:c7:f4:36:d9:30:ab:
cf:53:e9:58:71:1b:5f:63:cf:33:71:d2:fc:e3:90:
0e:1e:6e:ef:ee:97:8f:bf:c9:5b:cd:0e:53:5e:5c:
ff:ca:ee:c5:5a:b9:2f:cd:54:62:bf:28:1d:89:a8:
43:ea:9c:2a:d1:64:d0:26:88:dd:0a:1d:00:16:62:
c5:21:de:4c:b7:e1:a5:4a:c6:57:75:f3:c7:52:ee:
66:ac:c3:d8:fc:dd:bb:2c:19:22:a3:23:cc:c9:2f:
90:f4:a6:ee:11:58:7c:18:5c:04:d3:d0:09:5b:a6:
32:15:84:f7:b4:b1:39:f9:7b:1b:c0:84:e1:7e:3b:
54:20:21:a5:b2:7e:e1:6c:76:b2:da:f9:78:e1:7f:
12:ef:5b:a7:a6:7a:91:2d:40:7c:33:97:35:36:71:
99:6e:51:ce:f0:56:5e:ea:3c:3c:09:cc:2b:16:e3:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:23:05:6D:14:31:B1:1F:49:AA:C9:4B:69:9C:78:7C:66:25:B4
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZAEjBW0UMbEfSarJS2mceHxmJbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b105:120::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:1e40::/44
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
Signature Algorithm: sha256WithRSAEncryption
6b:b2:00:97:cc:53:13:20:98:58:16:a4:06:cc:27:47:7b:a4:
fd:30:57:b0:6b:5d:98:86:33:86:0a:91:3b:bc:fa:93:0b:bc:
12:3b:82:94:c2:7a:0f:f7:e9:21:72:ba:82:ab:77:d7:c0:cd:
c2:ce:a1:24:37:8f:43:19:79:e2:52:87:e2:50:30:be:11:e7:
0b:0c:fd:e5:2d:94:9d:01:2e:7e:9b:8a:ba:ac:2a:9f:73:8e:
76:be:bf:81:a8:57:56:a9:bd:ec:4a:cb:f2:bc:44:76:7f:d5:
e4:53:79:1e:ca:00:33:83:2e:8e:c7:55:2b:09:e4:33:55:b1:
bf:4d:cf:49:fb:06:8d:f1:c3:67:3b:37:a5:17:d1:24:de:bc:
f7:2f:dc:f5:aa:98:56:06:30:5c:38:5a:bb:3c:36:6c:6b:48:
68:12:23:7f:3f:33:83:ab:69:5d:3c:0c:3c:09:77:c4:14:6c:
5a:35:d4:ea:b0:1b:d6:e3:8c:e8:7d:a7:4a:28:b1:3a:f6:f3:
05:a0:c9:43:87:2a:10:60:8e:0f:74:4c:1a:c7:f8:e3:54:ff:
05:82:1b:12:f6:3f:d7:7f:3c:53:80:1f:ff:bd:b5:98:ee:85:
94:26:df:88:6e:2e:60:93:0f:0d:6f:71:a6:19:dc:f1:40:3d:
fb:82:20:32
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAYaflpEvV3XkyktFuS0qUo+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMzAxMjM1MTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDAxMjMwNTZkMTQzMWIxMWY0OWFhYzk0YjY5OWM3ODdjNjYyNWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYncuBw/tb+3WFBd/XmHwTI89uLV
4s5WCaO1KB8aWV0pyYFnpWMdtWIuOgB1OVqrJHIwN+PAtnGODTviEzWboX2xlTIq
TSFWtHE1/JS2uF4xJrLH9DbZMKvPU+lYcRtfY88zcdL845AOHm7v7pePv8lbzQ5T
Xlz/yu7FWrkvzVRivygdiahD6pwq0WTQJojdCh0AFmLFId5Mt+GlSsZXdfPHUu5m
rMPY/N27LBkioyPMyS+Q9KbuEVh8GFwE09AJW6YyFYT3tLE5+XsbwIThfjtUICGl
sn7hbHay2vl44X8S71unpnqRLUB8M5c1NnGZblHO8FZe6jw8CcwrFuN/kwIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFGQBIwVtFDGxH0mqyUtpnHh8ZiW0MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvWkFFakJXMFVNYkVmU2FySlMybWNlSHhtSmJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jBCBAIAATA8AwQAHyq3
AwQCLQxEAwQCLYO4AwQCLYiIAwQAVcrLAwQAXrF6AwQCixxgAwQAueh1AwQAwjJc
AwQAwjJeMIGjBAIAAjCBnAMHACABB/gBGQMFAyoJBMAwDgMFByoMO4ADBQAqDDuG
AwcAKg6XwAFwAwcEKg6XwAJgAwYAKg6XwQIDBwQqDpfEAQADBwQqDrEFASADBwQq
DrEHBvADBwAqDrEHCfIDBwAqDrEHEWUDBwAqDrEHF4YDBwQqDrEHHkADBwAqD+QE
AQIDBwAqEC8AAY8DBwQqEMxAAlADBgMqEMxBCDANBgkqhkiG9w0BAQsFAAOCAQEA
a7IAl8xTEyCYWBakBswnR3uk/TBXsGtdmIYzhgqRO7z6kwu8EjuClMJ6D/fpIXK6
gqt318DNws6hJDePQxl54lKH4lAwvhHnCwz95S2UnQEufpuKuqwqn3OOdr6/gahX
Vqm97ErL8rxEdn/V5FN5HsoAM4MujsdVKwnkM1Wxv03PSfsGjfHDZzs3pRfRJN68
9y/c9aqYVgYwXDhauzw2bGtIaBIjfz8zg6tpXTwMPAl3xBRsWjXU6rAb1uOM6H2n
SiixOvbzBaDJQ4cqEGCOD3RMGsf441T/BYIbEvY/1388U4Af/721mO6FlCbfiG4u
YJMPDW9xphnc8UA9+4IgMg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-fra.rpki-client.org