Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/icRsbd7TbpzR0Td9ADtIH60Rj9g.roa
File: icRsbd7TbpzR0Td9ADtIH60Rj9g.roa (raw, json)
Hash identifier: VUyQabJ8LBTugIRHRD+jb3nKhrbGtGmEbGfzAGLDu0g=
Subject key identifier: 89:C4:6C:6D:DE:D3:6E:9C:D1:D1:37:7D:00:3B:48:1F:AD:11:8F:D8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018900AA739FFFFA1D5FE4F0F0DDCDAD97AF
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/icRsbd7TbpzR0Td9ADtIH60Rj9g.roa
Signing time: Wed 28 Jun 2023 06:21:57 +0000
ROA not before: Wed 28 Jun 2023 06:21:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:aa:73:9f:ff:fa:1d:5f:e4:f0:f0:dd:cd:ad:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 28 06:21:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89c46c6dded36e9cd1d1377d003b481fad118fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:28:ad:63:2a:fb:a2:93:92:cf:fd:4e:cb:31:
55:e8:e5:6a:c9:78:eb:1c:ef:cb:82:74:05:c1:af:
e9:dd:d5:26:9e:b4:01:93:4a:19:f0:bb:eb:c2:0f:
d6:55:27:ff:77:35:99:26:d2:f5:79:61:8a:09:f2:
65:5b:69:22:c9:a3:eb:75:2f:c9:af:d7:33:a9:f4:
bc:74:f2:32:8f:fd:d0:d9:cf:4c:51:d4:78:cc:8c:
a4:03:0b:a8:d7:c5:86:37:71:16:fb:42:41:0e:8e:
6d:e5:9e:14:0e:82:37:af:9c:03:c7:38:70:10:7e:
cd:3e:58:04:ed:9c:2b:c0:3c:ec:38:fa:58:f6:f3:
07:87:8d:9f:58:f4:0e:cb:d0:62:fa:36:29:5d:42:
4c:ca:69:9f:c4:14:d8:d8:d3:84:15:9d:ae:1a:a7:
fa:64:74:21:a6:ae:9a:ba:d1:fd:67:a3:e7:be:f9:
a4:8d:25:01:dd:bf:4e:e7:e5:0c:cf:93:b8:3d:c0:
7a:72:18:ce:f4:df:17:39:4e:af:96:87:13:89:96:
db:c4:89:f4:d2:f3:df:b0:8b:17:13:89:1e:a9:ec:
c6:9f:82:4c:32:2d:a3:2a:55:35:84:c4:cc:6e:d6:
cc:c5:db:0d:e5:53:3d:65:fc:ac:de:7a:2d:fc:62:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:C4:6C:6D:DE:D3:6E:9C:D1:D1:37:7D:00:3B:48:1F:AD:11:8F:D8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/icRsbd7TbpzR0Td9ADtIH60Rj9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
36:11:f0:61:b9:76:a4:35:27:79:fa:31:ac:58:1a:08:66:62:
f4:d4:a8:4e:a9:ff:a2:34:01:8f:80:98:88:b3:76:67:2f:f7:
32:d1:51:29:eb:e1:9e:f8:ad:f7:19:d6:d8:0e:36:42:87:14:
f4:50:11:b1:78:de:d8:76:f1:74:69:2a:df:01:3c:eb:a2:dc:
1e:84:50:8b:e7:cb:51:52:36:1d:93:72:3a:84:ea:98:e2:bf:
11:31:83:1e:67:69:fa:39:b1:e4:88:c2:3e:fa:b4:0d:ad:e6:
31:cc:4f:1c:74:a7:5e:c0:0b:6c:0f:7e:1e:e1:bd:c2:af:51:
20:76:a1:55:05:6a:d9:a2:8a:fd:ba:bf:9d:af:c1:44:75:ad:
fb:54:12:d1:57:96:3c:6e:c9:90:77:85:13:b7:03:e9:8c:df:
c4:26:b7:96:56:26:12:d3:a0:53:b3:d6:ba:91:b0:35:97:ac:
5c:a2:86:01:75:c1:c3:7f:34:8a:9b:bd:f2:0f:05:f1:23:aa:
c5:7f:31:c0:c9:ce:c4:1c:7b:21:61:1d:96:42:b2:57:51:b1:
6e:52:01:8e:59:73:9a:af:d1:05:80:4e:5c:ee:59:9e:61:5d:
9c:31:76:e3:66:91:9e:82:4d:fb:89:36:7b:13:25:59:1f:a9:
f6:ec:63:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org