Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6I7fpTPkmJOAkc6xSUe7VT7Q_A.roa
File: i6I7fpTPkmJOAkc6xSUe7VT7Q_A.roa (raw, json)
Hash identifier: eOAotLnzfN8nor1gz8yBwRArcB7Hd/fajNqqKNH6imE=
Subject key identifier: 8B:A2:3B:7E:94:CF:92:62:4E:02:47:3A:C5:25:1E:ED:54:FB:43:F0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187A8E526EC2F72B426A1676FE5507D9BC7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6I7fpTPkmJOAkc6xSUe7VT7Q_A.roa
Signing time: Sat 22 Apr 2023 12:16:42 +0000
ROA not before: Sat 22 Apr 2023 12:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a8:e5:26:ec:2f:72:b4:26:a1:67:6f:e5:50:7d:9b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 22 12:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba23b7e94cf92624e02473ac5251eed54fb43f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:76:7f:86:08:82:d0:22:7c:1b:74:ba:cc:
e8:a6:2d:d6:13:fd:93:2a:cb:18:31:15:31:25:d6:
01:5f:2c:b3:a9:89:81:e4:b7:53:d3:b5:d2:ac:f6:
fc:38:3c:39:03:1e:36:bd:b4:53:2b:17:a5:62:78:
10:79:1b:4e:c9:f3:48:91:8c:e9:51:c5:84:fb:f0:
cb:d0:36:24:e1:ff:e1:59:f2:f9:34:a5:83:2d:ff:
ba:61:9d:33:a0:13:06:9c:23:0b:d0:a0:11:aa:25:
0c:3e:6c:72:63:df:58:48:ab:81:25:b2:f1:d1:a5:
ee:69:f7:15:bf:6c:6f:b4:ba:b6:92:5a:cc:fb:18:
7a:bd:11:40:d9:3e:c0:c1:51:97:5c:7e:41:54:bc:
11:5c:72:5a:96:a0:5b:3a:e5:d2:4b:dd:af:c1:43:
fc:fc:5a:f0:6a:1c:4b:65:f5:5e:58:1b:20:26:fe:
ae:a5:07:f0:14:d3:72:cb:a0:10:4e:df:b6:e1:a2:
22:47:07:b7:bb:a2:07:3f:77:d9:e6:a3:e7:e0:eb:
7d:ea:7f:4b:08:1e:62:d5:95:02:fd:07:d5:d5:2a:
0a:42:2d:6b:51:fb:92:ca:44:e8:8c:9e:c5:c1:23:
58:86:d7:82:00:68:b2:cf:ec:c3:b3:b4:3e:b2:f9:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A2:3B:7E:94:CF:92:62:4E:02:47:3A:C5:25:1E:ED:54:FB:43:F0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i6I7fpTPkmJOAkc6xSUe7VT7Q_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
7e:7b:39:ce:6f:65:87:8a:0a:48:94:ef:f7:95:a4:0b:be:b5:
10:4f:9d:80:56:01:a4:15:12:e4:2d:53:fc:1e:cc:56:e4:a0:
dd:21:e6:93:13:9a:ae:bc:df:4d:c0:3a:5d:9b:69:cc:6c:b7:
8c:15:8f:71:f9:3a:93:8d:47:cb:70:13:4d:b8:ce:70:77:26:
e4:19:47:87:ad:45:3c:28:80:03:a6:f9:ce:d1:22:b7:32:17:
e0:3b:a0:6d:72:1a:42:9f:32:a8:28:e9:a6:26:bf:ce:7c:49:
2e:8a:d5:6d:45:65:18:1e:1f:65:6c:e7:04:ac:33:96:86:ce:
a8:72:3d:af:f9:9c:7c:1e:43:a9:17:30:35:c5:66:95:23:99:
42:57:de:92:50:52:71:30:00:37:cd:f5:d4:b5:3b:1e:55:8f:
d7:83:67:d4:1f:e6:54:c3:90:b1:77:a0:2a:a8:cf:b5:98:43:
ac:9e:de:6e:87:7f:69:ee:ef:bd:a8:93:01:33:70:bc:86:6c:
4b:24:7c:6f:87:cd:9b:f7:4e:54:fd:e7:34:d8:8c:a3:22:37:
ae:82:9d:7b:e8:10:a2:42:1b:8c:3b:7d:f0:32:25:8f:60:f6:
c1:89:a4:3a:64:8a:27:03:8c:d5:f0:2a:eb:87:77:93:df:79:
66:a6:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org