Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bfXbE2k-JVY4PmkiJWSg1lcseJM.roa
File: bfXbE2k-JVY4PmkiJWSg1lcseJM.roa (raw, json)
Hash identifier: +AQkA7FeBlF8jhevnseDbTPy38Ds5qoUwxccfqz8mE8=
Subject key identifier: 6D:F5:DB:13:69:3E:25:56:38:3E:69:22:25:64:A0:D6:57:2C:78:93
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188C4559CE82582134C31AD65C9C403FB94
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bfXbE2k-JVY4PmkiJWSg1lcseJM.roa
Signing time: Fri 16 Jun 2023 13:12:05 +0000
ROA not before: Fri 16 Jun 2023 13:12:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:55:9c:e8:25:82:13:4c:31:ad:65:c9:c4:03:fb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 16 13:12:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6df5db13693e2556383e69222564a0d6572c7893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:97:65:a8:f7:28:9c:bc:33:17:02:59:76:
fc:7b:5a:6e:c6:0e:42:78:09:ed:6c:a3:96:f3:c3:
ba:4f:55:e7:4f:65:8e:c1:78:4e:b9:c7:bc:7a:98:
b0:f0:36:9d:d6:3d:8d:ed:2f:93:3d:7f:45:68:9b:
86:29:b5:58:e0:c1:8c:f0:a6:a8:56:5b:7b:43:2b:
eb:da:98:d8:91:f9:28:90:ed:44:de:ad:f5:d1:a7:
08:69:2d:a2:a7:52:74:63:3d:91:5d:8f:64:ad:ab:
44:85:37:2e:1f:9e:5d:87:f3:ee:e4:f5:3d:eb:1a:
fd:1e:ba:d8:4e:26:03:e6:d9:48:ee:54:c3:f5:9c:
e0:22:09:e3:33:a6:b2:12:34:a0:62:03:3d:67:f2:
6e:e2:31:bd:c1:7e:a9:3b:90:58:22:99:44:ab:76:
bb:e0:f4:12:42:36:a2:f2:4c:5d:d6:1e:e3:53:dd:
0f:f2:28:3e:9c:c8:17:82:c6:a0:1f:cc:7f:ad:7e:
ad:f2:2f:dd:77:24:7e:df:1e:61:94:92:f4:d9:05:
5c:be:7e:e3:e1:00:0f:1c:33:81:f7:c3:44:da:fd:
d4:a8:65:8d:c1:ef:98:0b:13:da:03:b2:11:80:be:
2a:25:08:1e:0c:de:0e:d2:51:b1:6f:ec:83:d7:fc:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:DB:13:69:3E:25:56:38:3E:69:22:25:64:A0:D6:57:2C:78:93
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bfXbE2k-JVY4PmkiJWSg1lcseJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc1::/32
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
86:fb:c9:61:12:b2:21:7a:b9:11:e4:ae:57:34:81:63:ea:94:
a9:30:89:a4:01:4a:91:8c:0f:74:6a:d9:28:22:0d:d1:0f:2c:
ec:d8:51:68:30:85:59:42:39:75:fb:2a:c3:e2:81:49:f4:ca:
b5:db:d2:f2:25:69:d6:dd:61:49:e7:e8:37:59:97:63:69:11:
e1:c8:6b:6b:d0:a2:8b:a0:d2:3d:40:fa:bc:de:1a:d5:bb:7a:
32:b9:a0:1e:3e:78:9a:8b:17:d3:a2:71:69:de:1e:e6:78:59:
d0:8e:8d:7e:6a:79:c2:bf:5e:08:b3:a1:87:50:2e:c5:dc:ea:
de:06:1b:b9:6d:38:6e:06:7a:cc:91:63:99:b7:f9:39:69:69:
78:f1:79:06:50:f1:81:ef:af:d5:11:ca:0d:ca:3f:54:03:ce:
71:b6:3b:83:07:15:3c:11:09:f2:a4:9a:78:92:13:81:46:af:
5c:92:dd:a8:e1:6f:d6:a7:b6:97:e2:8f:d8:b2:ee:63:e0:99:
f1:2e:72:d6:7c:84:fd:93:be:54:c6:73:ad:4b:75:aa:28:a7:
a8:ee:50:0a:a6:dd:98:45:49:01:ff:2a:8c:51:0c:c1:62:f5:
02:74:55:c9:69:53:d6:df:87:e8:f5:20:b7:a0:98:5e:ca:28:
fc:2a:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:01 2023 by rpki-client on console-ams.rpki-client.org