Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kMzYHjKxj4XqwbtWSn8xB9gQJdU.roa
File: kMzYHjKxj4XqwbtWSn8xB9gQJdU.roa (raw, json)
Hash identifier: 1zNqpidiqM8kSGZLTXM3BMUl529HkPgmWqRex7IFs5c=
Subject key identifier: 90:CC:D8:1E:32:B1:8F:85:EA:C1:BB:56:4A:7F:31:07:D8:10:25:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01861812306AE61C9E9D9D92B7F6216D801B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kMzYHjKxj4XqwbtWSn8xB9gQJdU.roa
Signing time: Fri 03 Feb 2023 16:18:10 +0000
ROA not before: Fri 03 Feb 2023 16:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:12:30:6a:e6:1c:9e:9d:9d:92:b7:f6:21:6d:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 3 16:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90ccd81e32b18f85eac1bb564a7f3107d81025d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:84:dd:4f:d0:00:3b:b0:83:90:45:cf:f5:c4:
42:0f:1a:ab:75:ee:05:4c:4e:16:10:4d:8d:26:0b:
01:b8:b7:a5:d5:83:9d:9d:e7:aa:e8:30:23:c7:45:
4d:b7:87:2a:77:80:4d:66:df:6f:2f:b2:fe:5c:d5:
90:2f:a8:d9:ee:b2:62:25:18:ea:e7:6b:3f:10:d2:
2a:bc:cf:9b:50:cc:f8:d6:ca:5b:a4:bf:b3:04:82:
9d:4d:9e:5d:06:a5:67:e6:db:79:96:bc:73:d5:bf:
09:16:25:0f:eb:d9:f9:6f:ce:e4:9a:83:e1:d7:b7:
19:27:05:1e:5f:61:48:50:65:4f:60:12:34:43:dc:
f2:69:f7:a1:49:9e:53:94:2c:a6:a0:78:de:0c:3c:
3f:dc:11:82:47:22:17:61:e2:65:d8:03:14:3a:7b:
08:ed:99:60:a6:f7:b8:43:69:2d:e1:7e:9c:fb:00:
8e:d2:02:1a:59:cc:aa:db:23:77:c5:c5:8e:32:99:
b9:a4:71:33:dd:bf:88:6d:b3:ce:af:6b:78:6a:59:
a8:4f:37:d9:91:5a:3f:9a:61:c1:fa:02:e9:14:21:
24:08:99:59:15:63:cd:fe:c8:5c:1a:d9:a7:5a:7b:
56:78:a1:d6:e4:0f:bd:3d:19:64:33:04:3e:8c:5d:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:D8:1E:32:B1:8F:85:EA:C1:BB:56:4A:7F:31:07:D8:10:25:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kMzYHjKxj4XqwbtWSn8xB9gQJdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
74:d9:14:17:9d:1e:df:9f:9c:99:fb:52:a3:d2:e1:3f:74:81:
37:2d:30:3e:4a:4f:65:ff:4a:1e:f3:01:13:d9:5a:05:14:f3:
ca:98:a0:8e:7d:a1:58:a9:20:ca:81:0a:5a:9f:09:00:46:1c:
71:16:a1:dd:4b:42:24:cc:b6:01:ff:08:e8:5b:31:cf:27:d7:
13:c5:15:ef:a3:b7:28:0e:6e:85:d5:b9:a1:4c:d7:a4:77:f1:
15:dd:b2:57:12:3b:69:e1:cd:94:52:22:a6:1a:9e:6a:5b:73:
65:73:76:51:f1:41:3b:d8:60:f0:7a:6f:56:8f:d3:28:02:21:
17:f2:ff:84:04:d0:98:6d:19:35:97:8b:d8:5d:71:cc:be:8a:
70:72:e0:6d:6d:89:48:0a:32:25:07:5e:63:6c:1c:96:4b:ab:
97:3e:cb:27:c8:ba:a9:fa:0f:24:e4:c7:3a:e1:a6:20:bb:83:
77:2a:e6:16:01:20:74:23:1e:3a:3f:08:e2:3c:d4:47:d7:83:
39:57:a5:0e:5d:ca:69:70:17:57:95:ca:1d:41:9b:e1:88:4c:
f6:23:1c:28:a2:5f:bf:f6:d1:7e:ac:fe:c2:eb:89:1c:b2:0d:
06:46:1f:d4:32:b6:f9:00:cd:08:d8:27:c5:11:c2:22:f8:78:
b0:10:97:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org