Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mtDAfHRm4x_F5BJoMHgkCkKFFqE.roa
File: mtDAfHRm4x_F5BJoMHgkCkKFFqE.roa (raw, json)
Hash identifier: n4dvbjZXrdrTWW4KA8m772rcbiAokACt6yN4Eua4CeQ=
Subject key identifier: 9A:D0:C0:7C:74:66:E3:1F:C5:E4:12:68:30:78:24:0A:42:85:16:A1
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01891C811D188174D0F2696655E0BDF11F21
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mtDAfHRm4x_F5BJoMHgkCkKFFqE.roa
Signing time: Mon 03 Jul 2023 16:06:10 +0000
ROA not before: Mon 03 Jul 2023 16:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
185.238.188.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1c:81:1d:18:81:74:d0:f2:69:66:55:e0:bd:f1:1f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 3 16:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ad0c07c7466e31fc5e412683078240a428516a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:46:31:39:64:be:03:34:57:f7:c1:ed:64:
a1:e5:20:7e:f2:e8:2f:1a:98:58:32:83:3d:fd:e0:
ea:42:07:ee:d7:9f:40:2d:3a:f5:3a:02:71:38:d6:
2c:89:b5:a7:35:1c:fb:29:e1:db:e0:8e:75:35:5e:
fa:78:fa:42:af:02:63:21:62:06:ce:f8:83:e3:41:
f4:b6:0e:e9:cc:37:20:94:8b:de:c2:aa:05:2f:ce:
5e:c1:c6:70:94:70:ae:95:6a:c5:64:3a:75:9f:d7:
c7:05:49:fa:87:10:0d:5d:a9:1c:46:f0:db:62:d1:
03:86:1c:11:f0:fa:2b:54:62:a0:eb:ad:c8:5e:5a:
7d:85:b9:d4:41:f1:87:58:b4:eb:dd:21:81:83:96:
28:34:15:c3:8f:2c:69:7a:b5:9a:7b:a5:b1:dd:6a:
24:19:d0:22:34:5a:06:64:fa:6e:f7:f4:8f:e0:ee:
19:af:0f:a0:ab:14:75:e0:75:62:5f:d6:48:64:62:
8b:43:0c:4f:83:e7:68:8f:7a:ed:e3:92:35:18:b5:
8e:90:5e:70:2b:17:0f:e9:bb:99:77:7e:8c:8d:42:
fc:c5:2a:6d:d5:11:2a:29:45:f2:8a:c5:57:1b:76:
5b:1c:2b:31:1f:92:f8:f1:b5:26:6d:48:07:77:15:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D0:C0:7C:74:66:E3:1F:C5:E4:12:68:30:78:24:0A:42:85:16:A1
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mtDAfHRm4x_F5BJoMHgkCkKFFqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
185.232.117.0/24
185.238.188.0/22
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
02:be:2c:74:2f:46:20:99:7a:99:b5:98:86:db:fd:17:0b:4d:
dc:c0:e8:1c:a4:c1:3c:b4:60:05:41:54:cd:77:11:b2:04:74:
91:6a:23:64:30:9d:7b:be:03:c5:69:08:38:f6:35:dc:d5:10:
8d:9f:91:fe:5a:4d:ea:b9:b3:5f:b8:24:5c:cc:4c:a3:cd:1b:
67:2c:99:cb:fd:38:bf:e9:ca:60:0e:e3:56:20:e8:ac:fc:07:
2b:ba:3c:8d:cc:23:d1:72:e3:4b:e7:cd:48:3c:e6:c9:29:26:
16:07:3f:6e:70:e5:7f:97:d5:5a:12:6b:38:33:23:b2:0d:63:
3d:24:3b:40:ba:07:22:d7:bf:af:7c:76:77:8e:91:48:e6:9f:
7c:60:f3:63:a1:df:8f:c7:f2:d6:1b:82:2e:5a:45:c2:a9:e7:
7f:7d:85:bf:6b:e8:4a:ee:d6:d0:2d:4b:5e:4e:2c:e6:cf:f4:
7b:29:d6:3c:64:0f:de:ee:ae:9e:f2:ac:23:b4:b1:56:5c:26:
60:97:f7:2b:a7:88:fe:da:e1:fa:ce:af:0d:ff:37:26:05:4a:
6d:31:1e:bb:dd:f4:7f:3b:6f:8e:26:0f:80:20:4d:67:c7:03:
2a:ff:a9:af:c0:0f:92:aa:50:01:88:f8:8c:c7:82:bc:60:4a:
29:88:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org