Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0b3EjdVPMD8UAMEfqRgOX86VDI.roa
File: t0b3EjdVPMD8UAMEfqRgOX86VDI.roa (raw, json)
Hash identifier: vk90aGwPQSOOb/3b7WMtrEVRUWR1y8y5TCiZm/Fdp2Q=
Subject key identifier: B7:46:F7:12:37:55:3C:C0:FC:50:03:04:7E:A4:60:39:7F:3A:54:32
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018590A9285555FFAA51E29B79D9EF20333B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0b3EjdVPMD8UAMEfqRgOX86VDI.roa
Signing time: Sun 08 Jan 2023 09:14:43 +0000
ROA not before: Sun 08 Jan 2023 09:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
139.28.96.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:90:a9:28:55:55:ff:aa:51:e2:9b:79:d9:ef:20:33:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 8 09:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b746f71237553cc0fc5003047ea460397f3a5432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:49:75:32:b3:52:69:ed:7d:6a:32:ae:0c:70:
08:1d:e7:ef:81:bb:91:88:ab:3c:1b:80:30:23:7b:
24:7c:9f:28:e0:18:7f:a9:1a:11:e7:b5:44:05:60:
03:ba:fe:86:2a:0b:9a:0f:4a:8b:51:82:ea:75:45:
6e:4f:ee:40:38:17:ad:c6:98:c0:f5:5b:6b:17:3e:
21:13:11:7e:4d:a7:5d:f6:0c:0e:28:bd:42:8a:1b:
0f:1e:ef:90:7f:fb:30:80:a2:ef:98:ba:a3:f5:67:
66:f1:54:88:6e:db:d8:56:4d:7f:7f:fe:0f:de:d0:
16:94:ea:d5:61:b8:f5:30:21:70:de:a1:1d:74:90:
09:98:50:53:8b:76:ab:e6:fb:24:e9:44:73:3c:3e:
9b:38:d9:bc:63:ed:74:2e:8d:0c:e1:f6:a1:68:1a:
65:ac:9b:7b:09:0a:6c:58:13:81:e2:f5:39:b5:08:
53:38:48:8b:90:93:d2:09:27:18:4d:e7:46:ec:a9:
0b:43:56:bf:b6:d7:e8:36:4b:af:1f:65:5b:eb:a2:
11:56:b5:ed:44:bb:18:19:26:a5:42:3d:fa:00:2a:
7b:d9:d1:03:a5:58:ee:de:8f:e6:72:4c:29:06:f7:
5f:f6:75:90:46:48:6d:f6:9d:5e:43:16:29:61:5c:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:46:F7:12:37:55:3C:C0:FC:50:03:04:7E:A4:60:39:7F:3A:54:32
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/t0b3EjdVPMD8UAMEfqRgOX86VDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
22:04:ce:20:36:a5:fd:c4:3e:d1:f9:2a:f6:3f:8c:cf:c2:f6:
62:46:36:fb:71:f9:fb:14:00:40:45:28:8e:12:6c:46:4e:50:
c5:b7:31:7c:ff:19:ae:c9:b6:ad:c4:49:98:e4:10:8b:8e:63:
26:0a:bc:15:fc:f1:9d:a4:fc:4f:ae:70:c8:47:7d:86:93:b4:
e6:96:e9:7d:32:82:08:8d:69:4b:9f:6f:02:67:52:6d:f5:bb:
ee:66:74:98:d0:0e:6d:65:bd:df:c4:75:e3:87:34:d3:fb:d8:
c6:ea:f9:ba:78:f8:91:ad:55:19:e8:87:7b:18:d5:3a:31:9c:
1e:4a:ff:75:98:05:3c:24:1c:70:54:f6:98:26:68:8b:07:fc:
be:27:0f:ee:be:35:c1:7f:97:78:71:73:82:e7:25:20:97:3d:
b4:f5:00:68:44:8d:a9:a4:40:55:3e:d5:51:37:02:99:23:85:
7a:fe:67:ec:57:e8:5c:1e:ab:c5:16:e3:af:45:7e:fc:95:04:
b3:fc:c5:b0:26:9c:d7:5e:15:0c:d8:58:01:e2:b7:34:14:6e:
90:f5:4d:d6:0f:fb:84:cc:8a:dd:e8:3c:8c:70:84:33:a0:91:
b6:22:f6:d8:04:ce:46:65:d3:1b:7b:83:37:77:0b:cd:ff:93:
db:57:e9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-fra.rpki-client.org