Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qE5YVM1fD02boDRGQgJvO7gUXa0.roa
File: qE5YVM1fD02boDRGQgJvO7gUXa0.roa (raw, json)
Hash identifier: gv7ic09IjCzV9LYXzm05t6Ysd0B3aCEQJh+u+n/A9Y8=
Subject key identifier: A8:4E:58:54:CD:5F:0F:4D:9B:A0:34:46:42:02:6F:3B:B8:14:5D:AD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185FA9900096FCBCC1F9B873BDF993515BE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qE5YVM1fD02boDRGQgJvO7gUXa0.roa
Signing time: Sat 28 Jan 2023 22:56:49 +0000
ROA not before: Sat 28 Jan 2023 22:56:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Jan 2023 22:10:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:99:00:09:6f:cb:cc:1f:9b:87:3b:df:99:35:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 22:56:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a84e5854cd5f0f4d9ba0344642026f3bb8145dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:a4:a6:6f:e5:f9:3b:50:87:e4:a8:14:69:
3a:1c:67:e0:d7:fc:d6:62:2e:ef:6f:45:0f:68:90:
59:cf:d4:08:3f:6c:df:be:e7:7a:ed:67:38:99:a1:
91:6b:41:27:34:c8:db:92:d8:ec:a3:f1:45:23:20:
7f:6e:a8:30:11:b8:2f:0b:3b:26:67:74:8d:d8:8a:
4d:67:95:de:8a:e6:28:ec:97:63:d6:a1:cf:b9:44:
ff:4d:04:87:57:b0:a7:4c:c6:fc:35:99:26:c2:2e:
31:4e:c9:28:3f:23:f3:f2:c8:51:6d:42:96:73:22:
a1:94:f4:82:90:b6:df:13:ec:19:3f:5c:3c:9f:f0:
00:1c:33:e5:38:c6:68:34:63:28:30:55:04:de:3e:
24:d1:22:24:e4:02:d8:0c:67:e3:db:c1:b3:38:d9:
1e:94:da:31:fc:19:f0:34:8a:1f:65:4a:29:ee:81:
06:f1:ed:46:53:27:87:cc:b1:18:19:ea:64:eb:0e:
b9:45:f3:85:b8:04:10:8a:f1:f6:79:c0:d6:f7:75:
bc:97:6e:9c:2c:f3:3f:80:9c:a6:cd:ca:0b:a2:2a:
65:34:ff:65:28:fb:9e:32:44:54:e8:99:8e:39:44:
c7:92:b9:1e:8b:c5:0a:a7:f3:af:5c:9e:06:74:9c:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:58:54:CD:5F:0F:4D:9B:A0:34:46:42:02:6F:3B:B8:14:5D:AD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qE5YVM1fD02boDRGQgJvO7gUXa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
04:39:a7:a1:d0:63:33:56:1b:41:bb:0b:7c:97:d4:c4:eb:a8:
9d:76:4d:ad:05:19:5b:e3:93:17:a4:09:13:9e:fd:4b:a1:80:
e8:c8:06:b7:1d:64:f9:d8:5b:6c:d8:96:77:27:73:c3:30:82:
7a:11:78:44:e1:19:20:b5:23:5c:f5:c9:8a:f3:4d:2c:6a:9a:
1e:67:41:c2:f2:07:10:81:ec:c2:d7:80:32:9f:09:75:a5:af:
d8:7f:03:d1:d0:99:68:52:80:27:1a:f5:e0:28:9c:c1:33:c0:
10:19:a6:f4:ae:0c:af:5f:18:29:66:b3:58:bd:cb:93:a1:2a:
5d:0d:a1:98:33:ba:1e:88:61:25:17:ef:ce:e0:5f:5b:45:72:
a5:c8:17:39:83:99:ae:a7:d0:60:ef:d0:81:1c:ec:62:80:f9:
30:19:0a:ca:d7:2e:a8:83:5a:8d:b7:d6:ef:fc:8e:ce:f3:36:
f4:3f:98:48:52:71:b0:a6:7e:17:e6:23:24:01:37:e9:e1:6b:
b9:ca:5a:89:15:88:d8:34:fb:a0:49:48:42:e3:75:ba:ce:35:
54:c6:ae:fd:8b:1f:51:af:b2:62:be:fe:e4:f2:89:82:a8:ca:
bc:80:a5:08:a5:64:ff:08:40:ce:cd:f4:ec:29:f2:82:04:f5:
24:1e:13:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:38 2024 by rpki-client on console-fra.rpki-client.org