Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zv0wMMH6yHRHKQ2hXZCxuzirVjU.roa
File: zv0wMMH6yHRHKQ2hXZCxuzirVjU.roa (raw, json)
Hash identifier: Iiph1FjVaHSNQI8bqb6glOusgmHSP8PmFP1fBWrbAj4=
Subject key identifier: CE:FD:30:30:C1:FA:C8:74:47:29:0D:A1:5D:90:B1:BB:38:AB:56:35
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BAB75FD22E819FEFE4CB2FD1B60E9B9D9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zv0wMMH6yHRHKQ2hXZCxuzirVjU.roa
Signing time: Tue 07 Nov 2023 20:25:18 +0000
ROA not before: Tue 07 Nov 2023 20:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58057
IP address blocks: 194.50.94.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
31.42.183.0/24 maxlen: 24
93.88.200.0/21 maxlen: 24
193.163.85.0/24 maxlen: 24
193.163.86.0/24 maxlen: 24
139.28.96.0/22 maxlen: 24
45.148.116.0/22 maxlen: 24
45.131.184.0/22 maxlen: 24
77.81.50.0/23 maxlen: 24
185.232.117.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
109.61.104.0/21 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a04:ccc6::/32 maxlen: 48
2a0e:97c3:110::/44 maxlen: 48
2a0c:3b80::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a0e:b107:2220::/45 maxlen: 48
2a0e:97c0:1d0::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a10:cc40:250::/44 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a0e:b107:1786::/48 maxlen: 48
2a0e:97c4:120::/44 maxlen: 48
2a10:ccc0:420::/44 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0e:b107:21c0::/45 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a04:ccc0:ffff::/48 maxlen: 48
2a10:cc45:130::/44 maxlen: 44
2a0c:3b83::/32 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a0e:97c1:200::/40 maxlen: 48
2a0e:b107:2228::/45 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a0e:97c4:100::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:75:fd:22:e8:19:fe:fe:4c:b2:fd:1b:60:e9:b9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 7 20:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefd3030c1fac87447290da15d90b1bb38ab5635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:56:3f:9e:ba:1d:70:87:47:93:83:96:ce:8b:
2a:bf:a3:1e:ac:7f:a6:1b:c5:67:6a:97:ce:be:45:
9a:21:4b:f2:8c:61:26:5b:c8:c1:1c:09:1b:7e:2b:
d6:2d:8e:d5:5d:39:af:92:79:f3:72:ca:94:72:29:
e1:59:8e:9e:db:3e:c2:ce:37:1f:c7:2d:29:7f:5c:
0c:63:dd:ee:df:11:3b:df:3c:34:12:c1:ee:0f:b1:
3b:da:cf:fb:7b:c6:56:41:cb:9a:7f:cc:f0:23:4c:
3c:32:a5:50:f8:ee:28:8c:ae:86:82:83:b9:50:c8:
17:04:91:e1:60:7c:4a:54:52:7b:fa:61:01:a4:06:
f1:af:fb:20:45:a5:8e:85:16:a3:75:84:34:14:4c:
3f:39:fb:21:50:18:79:99:2c:6a:59:e0:71:96:84:
c7:db:75:93:b9:f4:43:1a:82:cb:b9:63:50:a5:cd:
a5:2c:75:0d:56:f9:81:66:fe:d2:83:84:7a:b2:b3:
11:82:85:4d:00:05:48:64:8b:5a:0c:d4:c6:b2:4a:
6e:f0:07:4c:ed:d6:c3:e2:04:f2:b7:df:24:89:89:
45:df:a5:cd:68:71:b1:18:6f:02:6a:cf:12:9c:9d:
36:d1:71:f9:21:51:04:40:55:06:61:17:46:0f:b0:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:30:30:C1:FA:C8:74:47:29:0D:A1:5D:90:B1:BB:38:AB:56:35
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zv0wMMH6yHRHKQ2hXZCxuzirVjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.183.0/24
45.12.68.0/22
45.131.184.0/22
45.136.136.0/22
45.148.116.0/22
77.81.50.0/23
85.202.203.0/24
93.88.200.0/21
94.177.122.0/24
109.61.104.0/21
139.28.96.0/22
185.232.117.0/24
193.163.85.0-193.163.86.255
194.50.92.0/24
194.50.94.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:170::/48
2a0e:97c0:1d0::/44
2a0e:97c0:260::/44
2a0e:97c1:200::/40
2a0e:97c3:110::/44
2a0e:97c4:100::/44
2a0e:97c4:120::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0e:b107:21c0::/45
2a0e:b107:2220::/44
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
2a10:cc40:250::/44
2a10:cc45:130::/44
2a10:ccc0:420::/44
Signature Algorithm: sha256WithRSAEncryption
86:f9:26:d2:5d:03:9e:86:80:a8:74:a2:71:44:66:05:ff:95:
8c:ea:ec:76:bb:7b:c5:e2:7e:2a:e0:af:64:f9:cf:50:b7:08:
5f:18:81:09:0e:38:1f:aa:b7:1b:13:a6:ba:4a:f2:6a:86:4d:
33:b6:0c:7e:78:25:94:7b:2e:db:6c:00:df:3d:66:94:32:da:
da:65:d2:df:80:7e:11:96:d0:7a:c3:88:a5:cc:d1:4d:5c:7e:
77:50:c4:83:4d:26:66:ce:a6:c1:88:34:0f:2b:6e:eb:47:72:
0b:90:3e:47:e0:01:f0:15:e0:49:49:42:6c:33:01:2c:15:5c:
54:ad:78:9b:8a:42:5e:ef:02:31:0a:7d:2f:b3:c0:e5:49:5d:
cb:69:72:82:9e:96:26:19:05:79:16:e7:a9:e6:58:66:a1:4b:
1d:c3:42:92:fd:25:4b:86:4d:5f:bc:5a:3f:a5:db:6a:63:d5:
6c:40:0a:15:fa:8c:3e:35:1f:73:e2:dc:14:dd:b2:e6:7e:78:
80:24:95:88:44:26:84:30:3f:87:8a:42:cd:95:ef:73:7f:ad:
4e:eb:d5:6d:02:57:e5:3c:e5:27:81:f2:2a:2f:a4:b8:c9:12:
fe:ca:ac:67:97:2a:8d:36:16:1c:ed:02:ee:20:75:89:1a:63:
42:25:ca:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 20 15:17:38 2023 by rpki-client on console-ams.rpki-client.org