Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa
File: wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa (raw, json)
Hash identifier: 5QmmnHhatmPOdL6JMJjJ1r5zzhNGCTZNHSPyBoPb6eA=
Subject key identifier: C2:7D:63:BB:2D:F3:F1:87:A2:27:E1:05:2D:9F:72:52:BB:26:BF:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185FA5194C11062EC8C83826F86DC37A74A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa
Signing time: Sat 28 Jan 2023 21:38:48 +0000
ROA not before: Sat 28 Jan 2023 21:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2001:7f8:119::/48 maxlen: 48
2a10:cc46:1000::/36 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1d05::/48 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:b107:6f0::/44 maxlen: 44
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a10:cc41:800::/37 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 28 Jan 2023 22:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fa:51:94:c1:10:62:ec:8c:83:82:6f:86:dc:37:a7:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 28 21:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27d63bb2df3f187a227e1052d9f7252bb26bfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:51:8b:07:10:31:ac:70:8a:e9:16:77:15:
bf:c8:9d:0a:d5:b3:eb:2a:05:5a:cf:c6:85:d4:a5:
60:e0:6c:85:e5:1f:29:f0:48:2c:c5:78:f6:f4:1c:
e3:a2:53:34:33:b8:bd:13:26:8f:87:c5:25:b0:b9:
6b:0d:0e:c1:64:0b:a4:5e:89:5a:30:68:84:42:bb:
2c:d8:c7:b1:97:eb:8d:92:75:d3:c0:f2:0d:78:91:
57:cc:b5:ce:d3:24:f4:f6:8a:6c:2d:70:b1:d2:42:
e2:9f:94:63:36:2a:44:ce:4f:01:06:1a:75:4a:d1:
1b:22:05:d7:66:38:4e:0d:90:dd:94:1e:18:da:70:
ea:46:66:11:87:8d:0f:55:ce:c5:03:4e:7c:0a:a9:
e9:22:e7:23:55:7e:6e:d5:3b:66:25:00:72:47:7f:
ed:b7:f9:2d:02:a1:51:77:67:1a:05:4c:94:e7:70:
e0:91:81:04:72:87:b1:9b:de:5e:09:f6:6d:c9:b9:
27:0b:9e:13:af:0c:16:81:5a:d4:30:ae:a9:8d:88:
d7:c1:5f:07:eb:25:eb:4f:08:84:bc:54:86:42:51:
66:bb:77:6e:ab:9f:bb:51:d7:9c:b7:90:73:08:64:
1d:18:aa:94:59:ba:39:b3:30:b3:b1:1b:6b:16:f6:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:63:BB:2D:F3:F1:87:A2:27:E1:05:2D:9F:72:52:BB:26:BF:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wn1juy3z8YeiJ-EFLZ9yUrsmv8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c4:100::/44
2a0e:b107:6f0::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:1d05::/48
2a0f:e404:102::/48
2a10:2f00:18f::/48
2a10:cc40:250::/44
2a10:cc41:800::/37
2a10:cc46:1000::/36
Signature Algorithm: sha256WithRSAEncryption
cb:2e:0d:fa:b5:6f:91:f0:51:2e:9d:75:6a:3d:9f:76:d8:f8:
a5:86:fa:19:1d:c2:9f:53:46:64:e0:e4:99:c3:b6:fa:ff:32:
3c:74:7e:35:d1:61:62:3d:c4:88:c0:3e:38:28:9d:50:18:8a:
d0:29:99:2c:d0:cd:04:c1:ba:eb:9a:7b:2e:06:ea:bb:3f:97:
19:f2:74:26:ff:3b:ad:29:d8:67:1e:7c:b5:e8:47:60:ac:1c:
aa:c3:4d:29:a0:58:79:07:72:41:e4:a1:e5:b0:3a:71:01:a5:
85:3b:af:08:28:54:4f:21:bd:7f:5e:8a:57:d1:f5:10:d9:4c:
e0:50:88:5c:60:44:d8:d3:1d:51:ff:38:db:29:13:dd:0e:47:
ee:1f:35:99:91:33:0b:54:1e:5d:47:c4:ac:8a:51:d2:8c:90:
24:81:ff:9b:85:98:8d:49:b4:dd:c3:8a:99:0e:e0:d6:65:a0:
f9:d0:8d:4a:36:5f:3b:6d:b2:51:af:01:4d:ee:ee:05:6f:50:
85:52:49:c6:dc:09:70:1a:3f:6a:5b:1d:c1:a5:47:cb:85:4a:
19:5b:da:d0:74:bb:63:3f:65:7a:6d:94:56:5e:06:c7:20:3f:
32:d7:2b:c4:f5:ad:14:5a:16:46:13:9d:24:cd:bb:54:aa:97:
4b:ee:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org