Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l1q_-8r7fmCdwn_e4rPttgTqUZ8.roa
File: l1q_-8r7fmCdwn_e4rPttgTqUZ8.roa (raw, json)
Hash identifier: 6aFXzwzfm1TlJryOTDg/UglWEwrkdARZzowHx3t+i4U=
Subject key identifier: 97:5A:BF:FB:CA:FB:7E:60:9D:C2:7F:DE:E2:B3:ED:B6:04:EA:51:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01862B5D792CD0AB73F2B6A8B28AD328009B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l1q_-8r7fmCdwn_e4rPttgTqUZ8.roa
Signing time: Tue 07 Feb 2023 10:13:11 +0000
ROA not before: Tue 07 Feb 2023 10:13:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:b105:120::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:5d:79:2c:d0:ab:73:f2:b6:a8:b2:8a:d3:28:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 7 10:13:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=975abffbcafb7e609dc27fdee2b3edb604ea519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:0a:dd:bf:f1:bd:fe:87:e6:84:fd:d5:9b:
5f:89:e3:b4:56:7d:c4:85:7a:a2:8d:18:de:30:91:
4d:c3:02:79:30:1e:d2:f8:a4:ae:1a:c1:93:1d:66:
c8:7f:95:1f:1a:6d:f0:3d:69:ee:50:7d:b0:d0:23:
5d:2a:d3:38:d4:a2:be:50:b6:7d:74:9a:be:0f:99:
9f:92:fe:98:29:b2:6b:52:f9:54:80:f2:a4:85:17:
d9:8a:8d:80:4b:46:2a:32:81:35:74:58:8c:8a:ad:
f5:d6:93:85:2d:45:bc:9d:76:29:29:a8:f5:05:f5:
26:0c:8d:1a:3a:ac:bd:dc:79:dc:90:0e:fe:7d:2c:
56:55:85:24:45:f7:6c:be:9f:e5:75:a5:38:fd:c0:
90:8c:68:bf:87:87:59:20:e2:a4:4e:19:d7:82:95:
98:a6:8b:1c:d1:18:9a:e7:1a:8f:8d:e0:57:c2:2e:
67:41:0f:5f:a7:ba:db:a2:fe:49:73:3c:50:36:a2:
dd:b7:dc:f5:e5:9d:09:3a:22:65:7f:67:2d:1b:09:
08:da:63:8e:7d:2a:06:e9:2e:6c:59:ea:8c:78:0c:
ee:88:dd:a2:9f:e8:a8:07:41:0c:42:08:ba:31:f9:
2b:19:61:ed:8e:31:65:73:36:2b:0e:e6:eb:3a:a4:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5A:BF:FB:CA:FB:7E:60:9D:C2:7F:DE:E2:B3:ED:B6:04:EA:51:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/l1q_-8r7fmCdwn_e4rPttgTqUZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b105:120::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
39:f3:4b:03:49:89:ef:33:8c:e0:26:85:b4:3a:a5:20:47:83:
53:76:79:2d:48:9d:77:fe:f1:ae:bb:92:ec:97:21:13:dd:6f:
ee:86:99:63:fe:3b:fe:63:ca:18:d7:c9:3d:dc:d9:3b:f4:f8:
eb:07:36:1c:9f:cb:95:98:4d:79:c4:81:de:c6:61:03:44:8f:
8a:b7:2c:29:e2:ed:3c:7e:1b:e3:5b:94:08:5c:19:e8:44:ee:
81:15:a7:f9:7b:23:7f:6f:94:eb:38:c5:64:47:40:b9:06:c8:
21:19:ab:86:68:03:4f:48:b3:dd:ff:69:1f:af:02:49:3e:5f:
1a:11:58:f5:ad:3a:e1:0c:56:da:90:a4:10:ee:43:b2:a9:94:
88:40:d7:ea:55:a7:f0:ff:46:2a:d7:93:7b:c5:6b:38:84:7a:
5b:82:c1:4e:48:28:71:da:84:d0:0d:ad:57:3b:b6:03:90:80:
0b:50:fd:e8:04:a3:77:a0:23:e9:16:b5:c5:ce:2a:26:15:79:
48:d5:0a:c7:73:81:42:63:98:e6:90:7e:fa:da:fc:74:c7:a3:
23:5f:f8:88:b1:8d:23:95:e0:4b:fb:32:1b:f8:9e:67:86:45:
ff:40:4f:f8:8c:1b:71:24:39:53:81:8e:d4:1a:0c:71:6d:1e:
95:9e:e0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org