Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa
File: m_DjysrOzoxLpqunFwkQbeIyW-s.roa (raw, json)
Hash identifier: 72mNNOmPFGq35rotsM1uhT5Lqlf3bItPxbS+LiX2+Yw=
Subject key identifier: 9B:F0:E3:CA:CA:CE:CE:8C:4B:A6:AB:A7:17:09:10:6D:E2:32:5B:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185C40C079F974F89F2131F27F3EEF60A8C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa
Signing time: Wed 18 Jan 2023 08:43:20 +0000
ROA not before: Wed 18 Jan 2023 08:43:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:0c:07:9f:97:4f:89:f2:13:1f:27:f3:ee:f6:0a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 18 08:43:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bf0e3cacacece8c4ba6aba71709106de2325beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:f7:a7:fd:25:f8:93:86:b2:ed:44:8b:9a:
1a:0d:0d:01:12:ac:8d:6f:4d:a9:cf:c2:4c:55:4f:
eb:07:0b:bd:70:31:45:9d:28:22:19:04:c8:a2:66:
40:ae:3d:a9:34:8e:2a:d9:dd:33:5f:9e:97:87:14:
07:b8:35:ee:47:a1:56:49:6f:63:5a:04:50:03:5e:
85:24:4e:c7:c0:bf:b2:d6:fb:65:d3:71:95:12:f7:
4e:45:d5:bd:0b:93:63:38:e7:e9:ca:bc:7b:dc:e4:
23:ed:02:58:cb:9f:9b:90:c2:21:68:94:46:77:20:
e8:2b:48:49:e7:34:89:33:6e:ec:18:55:ba:94:90:
68:0a:db:e8:46:af:ab:ee:c9:3a:55:76:b3:0e:76:
ac:51:76:2e:4f:1b:b2:fd:16:c8:80:a2:bd:bd:65:
89:aa:8c:84:d0:10:8a:47:7e:38:85:5f:0f:28:98:
5e:36:04:8b:66:73:46:3b:71:a8:7a:a9:22:d4:f1:
ab:db:81:b4:d1:fc:30:44:4d:96:b1:3c:fe:8f:85:
41:88:72:20:dd:64:35:61:ef:fe:4a:5c:93:f2:3d:
9b:fd:34:cc:2d:f1:25:d3:63:51:b8:87:57:1d:dd:
b3:a5:22:8f:52:0a:ac:3f:42:42:89:1d:1a:96:20:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:E3:CA:CA:CE:CE:8C:4B:A6:AB:A7:17:09:10:6D:E2:32:5B:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
07:0f:28:30:5f:32:eb:2a:e0:9c:b4:eb:d9:4a:fe:47:29:84:
12:35:f2:84:77:61:27:04:6b:ca:9b:0b:cb:dc:43:fb:37:2e:
27:58:d4:b0:89:28:3e:2f:b5:58:f8:cc:5e:51:37:a1:ea:a2:
3a:c8:9f:1f:cc:d1:bc:74:41:a5:69:44:eb:0e:67:89:98:8a:
3c:eb:87:e2:5e:22:5f:a0:10:04:85:ed:45:06:25:ca:cf:a1:
b5:d2:82:37:e4:ff:1f:7f:23:4a:87:d5:64:ee:18:33:cd:df:
49:84:53:bc:35:5c:41:19:60:f3:0c:b0:95:30:e6:51:33:e8:
5d:b4:8b:c4:70:e9:37:e4:2f:15:c9:be:b0:59:56:72:95:eb:
c9:71:4f:3e:f1:db:a9:9a:40:8a:52:d0:52:69:31:66:74:32:
39:51:4b:67:06:45:bc:ad:0e:14:8a:89:bd:b1:af:d1:8a:57:
bd:65:66:a7:64:1f:79:72:a0:22:7a:2a:3e:88:6b:68:f2:e3:
9d:d8:f7:ca:ff:52:57:ba:16:ce:d8:22:dc:11:c3:41:b5:e4:
17:80:bf:f7:ab:44:67:40:75:1e:32:01:5c:22:75:09:ee:a6:
c2:57:1a:c4:6b:12:85:04:89:99:2b:5a:24:0a:79:ce:30:41:
7e:11:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-fra.rpki-client.org