Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kka9yvF7rS3vvlOaXr3X1RykAOE.roa
File: kka9yvF7rS3vvlOaXr3X1RykAOE.roa (raw, json)
Hash identifier: qKmLzlYW35fyQbM/nBtWpMKjZK6ZjcwwCu/cPekyJCc=
Subject key identifier: 92:46:BD:CA:F1:7B:AD:2D:EF:BE:53:9A:5E:BD:D7:D5:1C:A4:00:E1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187962E2FDE1974110AA000AB976440E735
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kka9yvF7rS3vvlOaXr3X1RykAOE.roa
Signing time: Tue 18 Apr 2023 21:03:41 +0000
ROA not before: Tue 18 Apr 2023 21:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Apr 2023 12:16:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:96:2e:2f:de:19:74:11:0a:a0:00:ab:97:64:40:e7:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 18 21:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9246bdcaf17bad2defbe539a5ebdd7d51ca400e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:17:9e:e5:68:90:7e:85:db:75:9a:a3:a6:
1b:20:c1:47:e5:2a:33:9a:07:79:d9:45:9c:03:f0:
7a:79:37:ae:21:a9:b4:e9:1b:69:1d:f6:41:2c:da:
45:d1:9d:88:85:fc:0a:5b:68:8b:ca:a1:d0:0d:44:
3f:c9:08:19:41:d5:c3:da:92:ab:98:dd:2a:49:54:
c6:e1:c8:ae:a9:22:9d:6f:5c:0a:96:b4:ac:49:75:
b3:6f:bd:38:a3:9f:9a:96:f2:54:fb:fc:1a:ad:ea:
2a:8c:44:70:22:a5:a2:12:1f:4b:b5:ec:30:4a:b5:
bd:ad:2e:45:65:b4:01:1a:f8:79:4b:99:34:bc:1e:
df:73:19:3d:c8:ba:68:45:52:74:9a:d2:b8:e2:29:
ad:7f:83:57:15:26:81:a5:8d:09:94:c0:29:e3:5c:
08:44:9d:4d:7d:5a:6b:fd:5d:b1:85:20:a5:da:80:
52:04:12:00:82:29:3d:e0:ea:2d:11:6d:54:12:8e:
b7:bd:b9:92:37:e2:57:df:0e:9f:89:4c:07:9b:7e:
1f:87:a5:6a:62:c8:db:62:05:37:59:d8:c7:24:d9:
84:8b:ea:0b:df:df:30:dc:42:3e:79:e4:d7:ae:f5:
27:f1:59:be:a3:2a:56:43:e5:95:37:2f:0f:19:b5:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:46:BD:CA:F1:7B:AD:2D:EF:BE:53:9A:5E:BD:D7:D5:1C:A4:00:E1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kka9yvF7rS3vvlOaXr3X1RykAOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
8a:35:9a:3a:3c:7c:7e:ba:b5:59:b0:95:2f:1f:aa:8c:15:2c:
9d:88:6e:0a:43:0a:e8:3c:f7:86:0d:c6:2a:1f:19:54:e9:28:
3a:05:28:38:8d:56:6d:6f:50:19:e8:62:8e:1e:47:84:66:92:
40:78:1e:23:8e:bd:89:cb:b6:13:40:9b:a1:1a:47:a3:44:38:
6e:1c:02:52:12:c3:6a:c7:8c:5b:e6:61:76:18:47:1a:17:90:
3f:83:8c:d2:39:43:55:eb:1e:98:90:de:0e:06:27:4b:ff:14:
8b:81:a8:55:cb:fa:7e:37:d6:6e:ea:21:75:25:7d:f3:7b:22:
d3:db:a2:99:6f:e1:ec:ec:fa:a8:b8:e8:7c:b0:50:49:84:d4:
bf:0f:84:47:52:61:ad:c8:5a:6a:98:fc:f7:28:fd:27:ef:92:
ca:66:93:e8:4f:32:ed:19:ec:24:8d:ca:98:3c:59:05:f2:cd:
d9:51:f4:85:0a:9f:a8:d6:55:f6:df:bf:e0:d3:b9:c1:6e:0c:
19:2f:1b:af:08:14:e0:2c:1c:a1:0a:e0:30:69:c2:dd:1c:1c:
a0:c2:ae:c1:99:58:e3:6e:7a:6e:a2:99:9e:29:4a:8e:30:3b:
b0:0d:7b:8d:27:b0:34:c4:70:2a:6f:0e:c4:d6:41:d8:88:d0:
ed:e6:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:11 2024 by rpki-client on console-ams.rpki-client.org