Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qmOONtfZmwx407-zsiqKorzM-Es.roa
File: qmOONtfZmwx407-zsiqKorzM-Es.roa (raw, json)
Hash identifier: rWMYMRgs34q1IkVgmKwHTefIUKcOxvht4kyDKNNpM/0=
Subject key identifier: AA:63:8E:36:D7:D9:9B:0C:78:D3:BF:B3:B2:2A:8A:A2:BC:CC:F8:4B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01888A7043821EF0CC9BF9F48F354018267C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qmOONtfZmwx407-zsiqKorzM-Es.roa
Signing time: Mon 05 Jun 2023 07:23:13 +0000
ROA not before: Mon 05 Jun 2023 07:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:70:43:82:1e:f0:cc:9b:f9:f4:8f:35:40:18:26:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 5 07:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aa638e36d7d99b0c78d3bfb3b22a8aa2bcccf84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:19:b3:18:a3:73:f8:f3:5d:8b:a4:71:86:
9f:61:87:e9:83:45:bc:e1:69:d1:f9:34:76:84:66:
b6:a7:cc:69:92:88:29:20:cf:af:dc:8c:ec:99:b4:
da:27:3c:6b:cb:57:71:75:12:15:ed:55:53:9e:82:
e7:27:6b:5f:86:44:cd:6d:84:42:cc:b5:58:3b:a0:
a1:e3:bd:09:36:c2:b1:c5:6f:c3:af:f8:bb:b2:29:
6b:ac:fc:a9:5e:1c:d4:1a:1b:50:9a:82:45:f7:b4:
02:c5:63:23:84:82:ba:ad:2e:dd:3a:a1:5d:b1:16:
2b:cc:f9:e4:25:98:5f:97:ae:bf:91:2c:3b:07:fa:
27:fa:5f:b3:28:f2:5b:d4:54:b6:26:42:8a:0a:bd:
41:73:4b:6e:df:16:ca:30:1b:c6:e6:41:d0:f3:5b:
ce:f4:45:87:3c:92:bf:af:e0:8a:8c:62:c9:85:2d:
48:89:8d:36:e7:75:35:14:db:cc:7d:4a:2c:0b:87:
09:e7:95:91:d9:8f:b5:16:3c:27:df:4c:04:4f:d9:
8a:47:62:a1:b6:74:84:a6:b3:d8:00:4f:26:b5:0b:
a2:f0:de:de:a8:e5:a9:35:8a:42:62:4a:54:f6:ff:
cf:8f:aa:1c:03:7e:fc:f2:59:1d:35:64:13:fe:4a:
03:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:8E:36:D7:D9:9B:0C:78:D3:BF:B3:B2:2A:8A:A2:BC:CC:F8:4B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qmOONtfZmwx407-zsiqKorzM-Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc1::/32
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
bd:56:f1:6a:62:0b:9d:57:43:7e:4a:56:73:dc:52:e6:a8:c2:
ba:82:40:5f:5a:21:40:2b:87:67:49:5e:6b:72:42:04:3b:36:
33:fb:89:72:54:5c:f7:d7:b5:bb:4a:86:29:19:51:bc:6e:d1:
a2:6e:ab:cd:52:26:8a:69:34:57:f3:cd:d2:f9:e7:f1:34:ae:
06:f3:75:d7:b7:2e:5d:6b:bb:20:9c:3b:5b:c9:2c:0c:4c:50:
7e:18:99:4f:19:fd:74:b9:df:88:74:a4:1b:32:e2:c3:39:ac:
79:9d:fb:65:3f:d2:c3:49:4b:e5:73:16:2d:f5:0f:3c:83:ff:
52:89:05:74:2a:19:51:fa:f6:66:2e:97:8e:2c:7f:7e:d8:ed:
5b:2b:5a:76:6b:c9:99:dc:3f:06:53:b8:07:03:ea:2b:4b:38:
6e:4a:b9:c7:5a:c4:6a:99:6f:9d:5c:c7:30:38:c8:b3:5f:9e:
02:51:97:14:7c:d3:0f:73:b0:30:fc:d5:de:2f:1c:a8:1d:ee:
e9:5a:5e:a2:b8:ca:f7:53:19:2b:8d:04:4d:3e:de:af:90:9b:
24:b2:fc:48:e1:e9:e4:7b:1f:a0:24:d5:eb:ac:28:10:96:a3:
1d:29:07:8e:ba:dd:b7:a3:9d:1d:f3:4b:22:27:52:68:80:96:
9c:69:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:03 2023 by rpki-client on console-ams.rpki-client.org