Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eFYAhzAIvBGlATNulP0hQenNrso.roa
File: eFYAhzAIvBGlATNulP0hQenNrso.roa (raw, json)
Hash identifier: lkQl+TxOcmXoy6RC1OKczVkN+e9FsM/ph5eKVVO+u28=
Subject key identifier: 78:56:00:87:30:08:BC:11:A5:01:33:6E:94:FD:21:41:E9:CD:AE:CA
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187DC8E92C1AC685E17D16DDE2B98DEBBA6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eFYAhzAIvBGlATNulP0hQenNrso.roa
Signing time: Tue 02 May 2023 13:02:23 +0000
ROA not before: Tue 02 May 2023 13:02:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:8e:92:c1:ac:68:5e:17:d1:6d:de:2b:98:de:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 13:02:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=785600873008bc11a501336e94fd2141e9cdaeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:39:fb:d6:98:58:36:a7:04:57:14:34:23:6c:
e3:51:a3:39:b3:15:70:ff:24:d2:d7:dc:0e:ac:25:
b1:2a:31:ef:8c:5b:bf:53:e3:aa:4e:40:2c:dc:7f:
dd:dd:24:25:b8:64:f2:1c:27:33:cd:ab:40:6e:b2:
2e:9b:fd:92:28:49:4c:53:0e:88:e3:7b:dc:41:07:
f6:d4:21:c7:68:3c:f5:7e:eb:ec:47:41:78:68:f9:
57:41:34:32:b0:0a:6d:8e:c3:04:11:ea:5a:9a:f4:
18:23:6f:dc:64:a5:46:97:83:21:93:71:4e:49:e4:
22:86:ca:34:b8:cc:c2:5d:11:bf:97:4f:85:66:5a:
1a:83:c1:39:81:f3:c8:c4:ac:cf:93:5d:a0:7a:43:
5d:ab:4f:97:3f:f5:c8:6b:66:30:08:48:20:f6:91:
4e:9b:34:85:74:68:e3:b0:b7:94:57:34:d7:60:50:
75:06:2b:6f:02:d0:be:45:68:1d:52:43:d3:ac:92:
f1:d7:9a:b9:86:b0:d5:22:80:1b:c0:63:4b:61:36:
43:35:4e:0e:cc:aa:6e:9c:88:0e:9f:e8:b2:0f:26:
ef:ef:57:76:56:bf:10:1a:fe:6d:05:48:7b:d2:fd:
e4:4e:a3:32:26:8a:80:a6:92:34:b5:91:bd:6d:28:
58:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:56:00:87:30:08:BC:11:A5:01:33:6E:94:FD:21:41:E9:CD:AE:CA
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/eFYAhzAIvBGlATNulP0hQenNrso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b105:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
c4:74:8b:7f:00:69:66:f7:dd:3e:35:57:56:fc:91:3d:c3:b4:
57:01:e7:8d:55:aa:79:06:c9:1b:ce:b7:2d:e0:f6:db:86:08:
48:e7:79:64:48:20:39:ae:f2:f0:1d:7e:3b:6c:4d:af:4a:7e:
dc:b2:d9:dc:63:87:c7:c3:4b:ae:98:ed:a7:76:49:fe:f9:25:
c0:a0:86:54:09:85:51:68:7e:ee:b4:1c:7f:25:66:0d:5d:a3:
5e:88:19:e8:59:55:6d:09:63:ae:8a:34:54:16:66:37:58:ea:
1c:c3:53:2c:4d:24:28:03:b4:22:f9:07:d4:28:d1:1d:80:18:
be:8e:2d:fb:fa:e6:1a:37:b5:23:c0:30:ad:a9:e3:bd:90:49:
f1:10:85:24:40:0f:69:91:28:7a:bb:d7:a8:7c:0e:eb:a2:80:
6f:4e:fd:de:7e:95:e0:a8:18:74:f1:f2:ce:6c:4f:98:d1:3e:
64:6b:89:6b:82:ca:02:3a:8a:5b:37:22:01:2d:10:7f:46:fa:
6f:a8:51:32:bc:dc:f0:dd:73:7c:de:80:25:03:97:b8:67:d5:
6c:91:ec:46:de:49:b1:29:fa:14:e0:eb:a3:13:e8:dc:9e:6d:
36:a7:b8:08:80:50:08:eb:d6:c5:69:40:fa:75:10:19:d0:cb:
17:b2:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org