Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmit78wdtkMa9Ofub-mOzwkEAI0.roa
File: fmit78wdtkMa9Ofub-mOzwkEAI0.roa (raw, json)
Hash identifier: h1khmGkFR7k8HSmj6xzvWNWfiMzQvW9dD1ASpfkTpcc=
Subject key identifier: 7E:68:AD:EF:CC:1D:B6:43:1A:F4:E7:EE:6F:E9:8E:CF:09:04:00:8D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187960E2543EB1E50A206EC8568BA78B75C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmit78wdtkMa9Ofub-mOzwkEAI0.roa
Signing time: Tue 18 Apr 2023 20:28:42 +0000
ROA not before: Tue 18 Apr 2023 20:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0e:97c0:790::/48 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:0e:25:43:eb:1e:50:a2:06:ec:85:68:ba:78:b7:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 18 20:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e68adefcc1db6431af4e7ee6fe98ecf0904008d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:77:5c:ec:36:b5:cd:fa:11:9c:60:2a:34:
51:3f:a5:7c:bb:f9:e3:fd:80:fd:a0:41:1c:08:3b:
00:b6:34:10:6a:67:90:7b:31:64:39:48:ca:37:71:
bb:9b:8a:d0:ed:f5:4b:fb:14:c8:02:76:2b:37:5f:
4e:3c:8c:a3:06:35:b8:84:d0:7c:aa:2f:49:d4:a4:
9f:d0:99:6b:57:0e:59:ad:9b:b6:cb:0d:35:3c:fc:
ee:82:28:07:ad:4c:88:ed:11:33:10:cd:88:9a:af:
2e:a8:1c:3c:95:44:57:82:5b:78:5f:d5:2b:8c:f4:
96:6a:09:f3:97:35:7f:c5:f4:3a:35:7a:64:28:46:
0e:5a:9c:b3:18:a5:80:7e:c7:ed:ea:33:5b:78:0e:
da:00:76:7b:ce:1d:48:99:4e:4d:cf:97:c9:24:ac:
77:ac:2e:3d:57:6e:ca:cb:34:a2:6c:27:b9:82:98:
35:27:7e:da:2c:98:1b:30:0f:25:5c:1c:b1:3a:ec:
0e:e9:b0:54:5d:ca:48:a5:59:6c:8d:be:4d:56:42:
ed:fa:78:18:63:b0:e5:26:b4:53:73:55:9b:74:c6:
a3:2c:c4:e4:28:1f:b6:a7:c3:96:37:2f:a8:bb:de:
b4:f5:8a:1c:51:b0:b1:ad:b2:ec:d3:2d:f2:19:b1:
71:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:AD:EF:CC:1D:B6:43:1A:F4:E7:EE:6F:E9:8E:CF:09:04:00:8D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fmit78wdtkMa9Ofub-mOzwkEAI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c0:790::/48
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
c3:3a:a2:4f:f4:00:99:53:c1:c8:c1:73:2e:cc:6a:0d:90:8b:
86:e7:c9:cf:8b:c5:b7:27:d7:2b:26:ac:72:86:b9:6a:93:45:
55:81:d6:f1:75:c8:34:90:b7:a8:03:58:16:96:38:fa:91:a0:
5b:97:fb:bd:99:05:49:df:dd:76:7b:e9:03:40:69:d1:7c:66:
51:67:cc:f9:8d:39:2b:ca:79:76:5a:d7:5c:6f:e0:e8:46:1e:
88:ec:26:83:22:25:b1:f6:2c:22:d7:39:09:e2:db:d7:a1:8a:
0b:e0:fd:86:a9:80:fc:82:bf:f2:1e:d5:21:86:91:9f:40:46:
eb:f9:c6:02:8f:85:d1:a2:7b:11:96:51:f6:12:62:31:66:e7:
e6:ac:ec:ed:df:f2:dc:10:53:34:69:5c:a3:66:15:ca:8b:ed:
84:ff:4d:e2:97:a7:af:12:a5:87:37:e6:51:ac:d0:01:10:85:
29:60:ff:37:46:45:1b:14:bb:40:78:74:9b:e9:88:61:4b:93:
d2:dc:06:7b:cb:c2:e1:32:f4:37:b8:eb:2d:e4:a0:1b:68:d4:
3b:b3:e0:11:3e:74:5f:c3:0e:b4:85:45:c5:da:d4:cb:f6:38:
1b:62:ff:07:c0:93:88:da:af:b0:1e:60:02:61:6a:5d:f2:4f:
36:a6:52:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org