Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMjE00oteEoBwknmhBNlJtJTX3s.roa
File: aMjE00oteEoBwknmhBNlJtJTX3s.roa (raw, json)
Hash identifier: kurgAGYSPbErXCbHAAJVT2umLz/3PW3TEG7bkemkGx4=
Subject key identifier: 68:C8:C4:D3:4A:2D:78:4A:01:C2:49:E6:84:13:65:26:D2:53:5F:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01867AE7D0AFAAFDE278FD8F007223B832AD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMjE00oteEoBwknmhBNlJtJTX3s.roa
Signing time: Wed 22 Feb 2023 20:54:17 +0000
ROA not before: Wed 22 Feb 2023 20:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:b107:1e40::/44 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:e7:d0:af:aa:fd:e2:78:fd:8f:00:72:23:b8:32:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 22 20:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68c8c4d34a2d784a01c249e684136526d2535f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:b2:db:7e:25:2f:44:03:f8:37:34:b6:0f:
de:cc:04:b6:c7:b4:78:f3:23:8a:52:72:9d:c4:25:
27:62:c9:46:3a:bc:53:3e:40:2f:f0:53:c2:ff:d0:
92:14:41:6d:68:29:9e:ba:11:4d:b0:19:56:5b:f5:
8d:48:58:48:45:ab:4a:8c:e4:10:f3:09:c1:9f:cb:
c3:0b:c9:0d:26:b0:36:b3:0a:ec:48:e6:d8:49:13:
b9:e2:f1:db:52:bf:ca:52:10:51:a6:66:22:5f:25:
27:ae:44:de:a6:d8:a4:01:31:9c:b2:52:2a:39:96:
70:30:6a:23:d1:80:e6:48:17:a0:88:93:94:0b:b4:
17:0f:67:06:5b:88:29:4a:4c:c3:bf:85:64:4c:1d:
57:12:e5:30:2f:79:a0:8a:3b:83:68:8e:6a:85:4c:
7d:e0:90:c8:1e:19:6e:e7:45:9b:67:1e:48:07:0d:
0d:0a:7a:7e:ac:af:ca:57:34:93:fe:e0:02:9a:b5:
d8:ac:38:3c:aa:6e:0a:e5:07:74:10:27:66:e3:e0:
81:5b:76:40:c8:d3:f8:e7:ac:5d:9e:79:e4:ae:21:
93:cb:8f:9a:4b:e9:01:f7:79:a9:eb:43:45:cf:da:
4d:9d:bb:f6:ab:df:d1:29:f6:02:5a:b7:42:aa:1a:
5b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C8:C4:D3:4A:2D:78:4A:01:C2:49:E6:84:13:65:26:D2:53:5F:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/aMjE00oteEoBwknmhBNlJtJTX3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b105:120::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:1e40::/44
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
98:11:76:86:d8:a8:fa:a8:7e:db:27:5c:a2:d2:4d:f0:c3:03:
5a:bb:51:62:61:e8:83:99:3e:74:07:12:82:60:a8:31:c2:44:
80:1f:ff:68:7a:f5:33:d4:0c:83:21:86:4e:b0:a7:d6:57:87:
25:da:55:c3:df:33:cc:37:4e:f7:f5:0e:11:b6:03:37:35:3b:
12:24:ac:72:d9:0b:7b:22:de:4a:00:ad:95:6e:aa:74:40:d8:
4b:7c:0b:5a:96:4f:3a:7e:1d:47:ef:07:6f:26:a5:71:31:c5:
53:08:8a:30:3e:e2:af:a6:d0:8b:e9:35:a7:89:4e:18:5d:0b:
68:6d:41:ed:75:3c:d1:dd:44:dd:23:d6:22:a0:5c:3a:15:9a:
e2:58:4f:9e:8f:a5:63:a2:91:b4:bb:60:0a:ec:80:6b:cc:37:
5b:ab:7b:6f:f1:e9:ff:60:b3:34:ff:1f:60:21:39:16:da:02:
03:f2:49:e3:46:3f:d4:c5:cd:6d:6d:23:00:b8:1e:58:ce:cb:
92:12:8d:e0:f2:69:87:4f:01:86:4c:21:d2:d1:7d:00:1f:4d:
bf:5a:39:7e:89:0c:a3:2b:64:2b:ac:02:42:5c:9b:12:17:9d:
c7:0b:67:64:1b:10:7d:db:58:30:49:ee:86:b1:5f:83:c3:c1:
6c:17:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:01 2023 by rpki-client on console-ams.rpki-client.org