Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZYQ59gU6L0u10db5PAkqypCNQtY.roa
File: ZYQ59gU6L0u10db5PAkqypCNQtY.roa (raw, json)
Hash identifier: f0rmAf/UfcVFF5zYgzZOE9uKRVnMMY2QLBfCQONT7lE=
Subject key identifier: 65:84:39:F6:05:3A:2F:4B:B5:D1:D6:F9:3C:09:2A:CA:90:8D:42:D6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01875A6296E8E46A4A96CCE0B2D58EF9A78A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZYQ59gU6L0u10db5PAkqypCNQtY.roa
Signing time: Fri 07 Apr 2023 06:23:43 +0000
ROA not before: Fri 07 Apr 2023 06:23:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b83::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:62:96:e8:e4:6a:4a:96:cc:e0:b2:d5:8e:f9:a7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 7 06:23:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658439f6053a2f4bb5d1d6f93c092aca908d42d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:aa:e2:5c:6d:30:f2:d0:fb:0d:74:63:69:
4b:60:d5:ad:e9:23:3a:94:4b:fe:56:86:98:9a:22:
ce:33:35:43:38:d3:01:29:3f:e3:e7:8c:0a:6d:8a:
70:10:e2:cf:e7:1d:02:41:8b:29:46:b9:d2:2c:ee:
6e:09:6f:c6:fe:d1:e5:a8:06:41:91:34:79:92:21:
6a:98:a4:b8:a4:ed:40:e0:7b:8f:6e:85:bb:49:fc:
a1:58:62:fc:b2:4d:8e:3e:f7:5d:48:b3:7b:b1:c3:
d8:b4:92:3d:94:db:65:4f:90:f2:4a:59:bd:2e:17:
d7:62:85:78:15:73:97:31:c5:10:84:ad:41:6e:6e:
fc:52:a8:64:9e:5f:04:02:b8:d2:65:16:f0:00:6b:
13:e7:e1:13:41:8a:45:6d:b4:68:31:7c:ca:79:0c:
d8:82:fa:0a:c1:c8:c2:80:48:cd:d9:b6:3b:52:17:
82:b7:9e:37:cd:fb:83:0e:0f:01:fe:09:13:27:41:
19:2e:65:35:53:20:2d:9f:40:df:97:b5:55:3b:03:
63:da:c1:9c:a2:3b:89:cb:e4:d9:08:d1:ce:71:6d:
86:6d:c4:ac:ab:43:ed:11:fa:ff:fd:6f:f1:cf:5b:
4a:1e:ea:04:39:6a:bd:da:22:56:c3:58:d4:2c:29:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:39:F6:05:3A:2F:4B:B5:D1:D6:F9:3C:09:2A:CA:90:8D:42:D6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZYQ59gU6L0u10db5PAkqypCNQtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
Signature Algorithm: sha256WithRSAEncryption
72:c1:e8:0b:9e:34:97:7d:12:4c:d5:e2:96:7d:9b:7d:9c:da:
4d:eb:ab:2e:38:ca:01:c4:bc:f8:91:96:a1:c3:46:ab:53:ea:
7f:26:8a:63:af:13:aa:5d:cf:67:1a:8d:ae:46:31:39:d8:01:
19:de:54:b9:3a:5e:53:53:41:a1:eb:c6:a8:f7:8b:45:48:85:
92:6f:fa:3d:18:9e:79:39:a7:d0:12:88:a3:21:7b:c3:54:48:
d3:b5:83:3d:f1:8c:ba:70:1a:9a:7f:f0:9c:ee:e4:d9:74:74:
2a:ef:27:27:a1:68:83:ed:7d:33:a7:95:3d:a1:28:4c:80:5c:
d8:cb:b3:69:7a:4c:f9:d5:eb:cb:1a:96:52:d3:96:5a:d2:0f:
4b:af:40:7e:32:25:b7:e9:ea:4e:d0:71:22:b1:df:5e:82:37:
15:9c:15:a3:b1:be:cf:dd:ce:62:27:0b:8b:4e:61:49:b4:b6:
32:99:52:94:04:79:3d:76:85:84:c5:34:34:55:4b:2b:1d:2d:
23:fd:cb:c0:76:cd:be:dd:fa:33:7d:63:c8:a3:25:92:d8:4c:
d0:54:ed:f7:66:b5:37:7f:d6:84:72:42:ac:88:65:7f:44:f3:
ad:a5:7f:34:0a:b2:65:19:69:f1:03:b4:a1:b6:95:a2:ef:86:
5a:b0:98:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-fra.rpki-client.org