Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/om_2n2vYUYhlbAd1rOwD05D_tqM.roa
File: om_2n2vYUYhlbAd1rOwD05D_tqM.roa (raw, json)
Hash identifier: CMvbzqLBLoXoYScgtuvq+X76uSbIiTUOgsEbEuT90mw=
Subject key identifier: A2:6F:F6:9F:6B:D8:51:88:65:6C:07:75:AC:EC:03:D3:90:FF:B6:A3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0189216FA5A1B67AF74785B7A31D7310F0BA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/om_2n2vYUYhlbAd1rOwD05D_tqM.roa
Signing time: Tue 04 Jul 2023 15:05:12 +0000
ROA not before: Tue 04 Jul 2023 15:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
185.238.188.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a06:de00:20::/44 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:6f:a5:a1:b6:7a:f7:47:85:b7:a3:1d:73:10:f0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 4 15:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a26ff69f6bd85188656c0775acec03d390ffb6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ae:78:40:10:31:e1:fd:55:c7:83:3b:cf:02:
a4:90:a1:87:d6:61:d8:ef:39:64:0e:83:83:2e:6f:
f2:14:6e:31:f6:46:b4:ca:02:5b:47:5a:e3:8e:62:
c5:18:8f:99:ec:73:99:6b:f3:dc:5b:79:b2:8a:bd:
b1:af:00:ac:f6:d6:80:ca:19:ca:cf:2c:69:e1:0f:
59:5c:d1:e1:b5:1f:63:08:46:2d:c7:ba:ec:08:c2:
20:9e:98:f7:b7:a4:39:19:46:6d:8b:f1:1c:42:22:
3f:f0:1c:3a:17:0d:ba:86:ce:14:43:14:ec:cc:83:
b1:26:49:09:25:28:0e:cd:6d:ba:23:16:b3:9b:cc:
00:29:13:1c:e3:94:77:90:66:19:27:98:b6:ed:86:
88:22:dd:e9:5f:cb:5a:41:c9:74:a9:76:31:21:d8:
eb:72:f5:61:c9:4c:fa:99:1e:7b:6b:60:c1:2d:ce:
1a:23:81:c7:12:f9:2e:74:3d:3b:5f:6f:2e:66:1c:
81:85:1b:ec:c7:49:4a:57:02:5c:98:42:0c:9b:0d:
d6:23:d9:e6:9b:f4:c6:f6:ee:8e:e1:95:0b:42:27:
60:d2:ad:10:09:ac:72:cc:59:64:ec:da:11:a0:97:
15:4e:d0:0d:58:33:10:5f:38:60:fc:dc:58:4a:f6:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6F:F6:9F:6B:D8:51:88:65:6C:07:75:AC:EC:03:D3:90:FF:B6:A3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/om_2n2vYUYhlbAd1rOwD05D_tqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
185.232.117.0/24
185.238.188.0/22
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a06:de00:20::/44
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
ca:56:b7:75:71:a2:50:0d:cb:33:5d:27:b9:1e:cd:3e:74:47:
06:24:49:04:09:18:ff:48:84:f1:81:16:f9:35:01:ba:18:f7:
d7:70:a0:d5:c7:16:06:a0:4f:1d:94:63:4e:97:fe:19:a4:36:
23:16:09:fb:75:01:aa:ab:0c:9c:e9:6b:15:2f:3c:c4:d5:6c:
30:91:36:b4:05:a8:a7:a0:92:8a:54:14:bc:42:4a:c2:f5:da:
c0:c2:be:5b:9d:3c:39:b3:eb:ab:42:06:2c:d3:dc:c9:52:b2:
b4:31:bf:be:bc:2e:f8:ed:97:63:ce:64:7c:82:dc:e9:a2:0e:
dc:b4:de:98:c8:16:e8:05:af:08:b1:0d:96:a0:bf:f5:d0:2e:
10:b6:47:c9:fa:69:9c:af:1a:3e:90:66:e1:d0:b8:e3:fb:35:
80:5d:61:02:dc:2d:bf:10:70:c5:9a:dc:79:b4:97:a4:ab:af:
f6:d8:0c:15:44:fb:a8:b3:69:35:4f:b7:d1:e5:62:16:6d:37:
ce:67:73:58:5a:c5:b2:75:15:9d:1e:cf:3d:bb:17:69:7c:2c:
15:93:3d:fb:fa:18:55:89:f8:5f:42:e1:93:df:63:30:4b:32:
09:d4:14:7b:6a:cf:cb:9d:96:4b:c0:c1:5e:e2:3b:50:68:ef:
b9:3e:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org