Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l-wVx6OY5ggFEcGMnwIKrisTfeU.roa
File: l-wVx6OY5ggFEcGMnwIKrisTfeU.roa (raw, json)
Hash identifier: qiw+h/chUDPJZ0l1xK0fGs43RpQUkODZ2kW4ph2KlZ0=
Subject key identifier: 97:EC:15:C7:A3:98:E6:08:05:11:C1:8C:9F:02:0A:AE:2B:13:7D:E5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191EFFA83D2FCEBC18AAD6B880A0D9F3E32
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l-wVx6OY5ggFEcGMnwIKrisTfeU.roa
Signing time: Sat 14 Sep 2024 10:00:57 +0000
ROA not before: Sat 14 Sep 2024 10:00:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58057
IP address blocks: 31.42.183.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
93.88.200.0/21 maxlen: 24
94.177.122.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
139.28.96.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:97c0:260::/44 maxlen: 44
2a0e:97c1:200::/40 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 21 Sep 2024 07:43:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:fa:83:d2:fc:eb:c1:8a:ad:6b:88:0a:0d:9f:3e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 10:00:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97ec15c7a398e6080511c18c9f020aae2b137de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:d0:03:37:d2:c1:2b:1f:e3:c5:b2:5e:3d:
d1:72:40:43:26:d0:fc:9d:d8:7a:80:cc:3b:0c:2a:
cb:d9:74:23:da:bd:e1:32:72:4d:25:28:5e:ee:08:
34:8e:9b:28:02:26:6e:aa:c2:5c:92:42:a7:17:a6:
20:a3:b4:31:19:63:e7:aa:0e:ec:ef:d4:ab:e1:0e:
d1:bd:9e:03:8b:20:14:9a:3c:0c:05:ae:b0:14:d5:
9b:00:87:68:1f:ba:ae:6b:c9:61:46:30:e6:2c:a5:
be:88:11:89:98:00:f3:1d:50:3e:78:a4:a3:7b:c9:
0d:2e:d5:57:a2:3e:20:ae:cf:cc:a5:80:0e:e0:0d:
bf:c2:cb:01:ce:8d:c6:f9:3d:fc:6b:f6:a3:79:cd:
a0:71:55:9e:13:fa:08:cb:6d:6a:dd:9c:39:f5:5a:
de:ed:87:2d:74:11:8f:97:d5:11:66:00:11:ef:3a:
65:0d:7c:e3:68:c5:92:08:e9:50:36:4d:03:b9:e0:
f6:b2:bf:08:e1:8b:8e:4e:14:3a:a2:86:77:b7:93:
1e:86:22:b7:88:8b:07:b7:3c:23:4c:39:16:7f:18:
c7:c9:26:f6:28:19:f5:d9:8b:9c:c9:b7:e8:c2:8c:
fa:ea:dd:d5:a5:4c:c8:30:e5:fd:09:f2:60:e8:52:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EC:15:C7:A3:98:E6:08:05:11:C1:8C:9F:02:0A:AE:2B:13:7D:E5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l-wVx6OY5ggFEcGMnwIKrisTfeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
77.81.50.0/23
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
Signature Algorithm: sha256WithRSAEncryption
57:65:31:a7:8d:ab:a0:fe:b3:7b:54:ff:17:83:80:b2:7f:8c:
a9:70:b0:bd:e7:ce:88:b2:6a:e0:8a:2c:6e:a7:23:60:6a:fd:
62:18:37:d9:21:f4:f6:ea:42:7b:c4:91:bf:59:a9:e5:ea:e5:
1a:eb:f1:92:41:ee:f9:a0:c2:2a:07:1b:fb:d8:a0:d9:76:3b:
08:e4:2e:e9:c5:c6:63:b8:a2:3c:30:9c:59:94:83:8d:d9:a0:
a6:38:df:f4:0a:58:7f:47:94:13:4d:35:0a:f3:5e:76:c4:db:
24:02:f6:1b:d2:cb:83:e1:39:47:d1:f3:37:9d:b6:ca:6c:f9:
58:ec:ec:c9:af:49:14:6a:9e:7b:84:33:51:95:98:f5:b9:93:
0c:d9:90:ed:c8:68:78:dd:04:8a:e6:91:d0:c0:37:3b:ac:e5:
92:4b:69:65:b1:1b:e8:b6:58:ae:2f:8e:e8:a5:d0:a4:ad:25:
1d:e0:5b:ac:96:59:4d:55:57:ca:59:e8:45:f9:57:80:fc:17:
e8:41:a1:3e:c7:66:54:a8:d4:55:17:23:88:9e:0d:d9:31:0a:
27:e5:f5:88:f2:82:90:ff:d7:f8:a9:3b:10:8e:7b:45:c2:fd:
76:3d:43:8c:74:71:f0:e2:82:18:a7:15:80:26:39:fa:21:f1:
39:8a:6b:02
-----BEGIN CERTIFICATE-----
MIIGHTCCBQWgAwIBAgISAZHv+oPS/OvBiq1riAoNnz4yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwOTE0MTAwMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2VjMTVjN2EzOThlNjA4MDUxMWMxOGM5ZjAyMGFhZTJiMTM3ZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz07QAzfSwSsf48WyXj3RckBDJtD8
ndh6gMw7DCrL2XQj2r3hMnJNJShe7gg0jpsoAiZuqsJckkKnF6Ygo7QxGWPnqg7s
79Sr4Q7RvZ4DiyAUmjwMBa6wFNWbAIdoH7qua8lhRjDmLKW+iBGJmADzHVA+eKSj
e8kNLtVXoj4grs/MpYAO4A2/wssBzo3G+T38a/ajec2gcVWeE/oIy21q3Zw59Vre
7YctdBGPl9URZgAR7zplDXzjaMWSCOlQNk0DueD2sr8I4YuOThQ6ooZ3t5MehiK3
iIsHtzwjTDkWfxjHySb2KBn12Yucybfowoz66t3VpUzIMOX9CfJg6FJH4QIDAQAB
o4IDKTCCAyUwHQYDVR0OBBYEFJfsFcejmOYIBRHBjJ8CCq4rE33lMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbC13Vng2T1k1Z2dGRWNHTW53SUtyaXNUZmVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBPQYIKwYBBQUHAQcBAf8EggEsMIIBKDBUBAIAATBOAwQA
Hyq3AwQCLQxEAwQCLYiIAwQBTVEyAwQDXVjIAwQAXrF6AwQDbT1oAwQCixxgAwQA
ueh1AwQBwSFeAwQAwaNWAwQAwjJcAwQAwjJeMIHPBAIAAjCByDAQAwcAKgTMwP//
AwUBKgTMwDAOAwUAKgTMwwMFAyoEzMADBQMqCQTAMA4DBQcqDDuAAwUAKgw7hgMH
BCoOl8AB0AMHBCoOl8ACYAMGACoOl8ECAwcEKg6XwwEQAwcEKg6XxAEgAwcAKg6x
BwnyAwcAKg6xBxFlAwcAKg6xBxeGAwcDKg6xByHAAwcEKg6xByIgAwcAKg/kBAEC
AwcAKhAvAAGNAwcAKhAvAAGPAwcAKhAvAAGTAwcEKhDMQAJQAwcEKhDMRQEwMA0G
CSqGSIb3DQEBCwUAA4IBAQBXZTGnjaug/rN7VP8Xg4Cyf4ypcLC9586Ismrgiixu
pyNgav1iGDfZIfT26kJ7xJG/Wanl6uUa6/GSQe75oMIqBxv72KDZdjsI5C7pxcZj
uKI8MJxZlION2aCmON/0Clh/R5QTTTUK8152xNskAvYb0suD4TlH0fM3nbbKbPlY
7OzJr0kUap57hDNRlZj1uZMM2ZDtyGh43QSK5pHQwDc7rOWSS2llsRvotliuL47o
pdCkrSUd4FuslllNVVfKWehF+VeA/BfoQaE+x2ZUqNRVFyOIng3ZMQon5fWI8oKQ
/9f4qTsQjntFwv12PUOMdHHw4oIYpxWAJjn6IfE5imsC
-----END CERTIFICATE-----
Generated at Sat Sep 21 09:13:57 2024 by rpki-client on console-fra.rpki-client.org