Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/92MuShyS-yLP-RAnrZ2UtGb83MM.roa
File: 92MuShyS-yLP-RAnrZ2UtGb83MM.roa (raw, json)
Hash identifier: vx01cq+1kYFiakzp+c75eT9NBW6gLbWct3zHEr+PJ1k=
Subject key identifier: F7:63:2E:4A:1C:92:FB:22:CF:F9:10:27:AD:9D:94:B4:66:FC:DC:C3
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 0189AD18495555742D5151D648C274607FA6
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/92MuShyS-yLP-RAnrZ2UtGb83MM.roa
Signing time: Mon 31 Jul 2023 17:56:37 +0000
ROA not before: Mon 31 Jul 2023 17:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 193.28.1.0/24 maxlen: 24
193.28.4.0/24 maxlen: 24
193.28.7.0/24 maxlen: 24
178.255.144.0/21 maxlen: 32
91.90.40.0/21 maxlen: 24
91.199.193.0/24 maxlen: 24
194.99.40.0/22 maxlen: 24
185.41.240.0/22 maxlen: 24
193.138.6.0/23 maxlen: 24
176.125.232.0/22 maxlen: 22
134.90.144.0/21 maxlen: 32
134.90.148.0/24 maxlen: 24
194.127.198.0/23 maxlen: 23
194.127.199.0/24 maxlen: 24
91.205.184.0/22 maxlen: 22
193.27.45.0/24 maxlen: 24
37.202.56.0/21 maxlen: 24
31.169.48.0/21 maxlen: 32
185.35.200.0/24 maxlen: 24
185.35.200.0/22 maxlen: 24
185.12.56.0/22 maxlen: 24
194.35.228.0/22 maxlen: 24
213.163.240.0/23 maxlen: 23
185.152.32.0/23 maxlen: 23
185.152.32.0/22 maxlen: 24
217.197.164.0/22 maxlen: 24
45.152.48.0/22 maxlen: 22
91.227.248.0/22 maxlen: 24
2a02:ed01::/32 maxlen: 32
2a02:ed00::/32 maxlen: 32
2a02:ed03::/32 maxlen: 32
2a02:ed04:3580::/44 maxlen: 44
2a02:ed04:3400::/44 maxlen: 44
2a02:ed04:4400::/44 maxlen: 44
2a02:ed04:4500::/44 maxlen: 44
2a02:ed04:4600::/44 maxlen: 44
2a02:ed04:4700::/44 maxlen: 44
2a02:ed04:100::/44 maxlen: 44
2a02:ed06::/32 maxlen: 32
2a02:20c8::/32 maxlen: 48
2a07:7d80::/29 maxlen: 29
2a04:8d40::/29 maxlen: 32
2a02:ed05::/32 maxlen: 32
2a02:ed00::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Oct 2023 11:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:18:49:55:55:74:2d:51:51:d6:48:c2:74:60:7f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jul 31 17:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7632e4a1c92fb22cff91027ad9d94b466fcdcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:b6:07:92:cc:02:21:c3:50:5a:f3:3e:53:
8a:a5:16:d9:5a:6d:46:c9:a2:74:8d:b5:a3:63:d7:
dd:f3:4c:bd:18:b1:7f:68:f4:3a:84:b9:a8:c8:85:
51:bc:5a:15:63:70:f8:74:d5:4d:7f:c8:81:ee:a7:
85:2b:ac:25:28:f5:03:6e:07:38:3e:5b:99:d1:b7:
8e:a9:3a:08:b7:22:b0:bb:74:e0:aa:1c:02:bd:bd:
79:d1:5a:b2:9a:08:00:8a:51:a2:04:90:78:7a:35:
55:df:db:67:90:c4:51:59:51:79:5f:63:9b:bd:00:
c5:29:93:a5:c6:c4:32:a0:e1:ef:62:ed:9a:1a:b9:
09:ea:2d:91:bf:34:7c:33:98:83:67:08:e8:de:33:
60:d1:f4:bc:67:b8:14:31:c6:ad:59:06:bc:58:3c:
90:c0:c1:3c:9d:83:99:10:41:13:1e:c4:59:93:c8:
bf:6d:d5:d8:0e:21:f1:df:5c:77:28:1d:49:c8:b7:
b4:1f:9a:62:37:ac:5c:fb:a4:ea:59:5a:f3:45:3f:
ae:a7:ed:6a:48:28:4a:4d:f2:ba:6c:13:57:7f:0b:
bd:75:8a:4b:c8:2a:50:38:7d:f8:d8:02:17:f5:50:
d7:01:98:e1:3b:cf:71:a2:8c:df:3b:c0:36:02:10:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:2E:4A:1C:92:FB:22:CF:F9:10:27:AD:9D:94:B4:66:FC:DC:C3
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/92MuShyS-yLP-RAnrZ2UtGb83MM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.48.0/21
37.202.56.0/21
45.152.48.0/22
91.90.40.0/21
91.199.193.0/24
91.205.184.0/22
91.227.248.0/22
134.90.144.0/21
176.125.232.0/22
178.255.144.0/21
185.12.56.0/22
185.35.200.0/22
185.41.240.0/22
185.152.32.0/22
193.27.45.0/24
193.28.1.0/24
193.28.4.0/24
193.28.7.0/24
193.138.6.0/23
194.35.228.0/22
194.99.40.0/22
194.127.198.0/23
213.163.240.0/23
217.197.164.0/22
IPv6:
2a02:20c8::/32
2a02:ed00::/29
2a04:8d40::/29
2a07:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
a8:4e:9c:8b:67:37:a3:73:14:a1:94:df:ff:0f:71:b2:5a:c0:
e7:28:6e:f7:f3:ca:66:13:e0:5c:6d:02:7b:8e:99:41:a4:f7:
31:e0:fd:f1:3f:01:ac:78:11:e2:69:a9:27:f2:1b:08:2d:97:
05:dc:51:bf:37:4e:43:1f:e3:8c:73:55:f3:c9:aa:5c:ea:d6:
b1:30:5e:b1:08:81:b7:ea:f7:73:42:4d:1a:01:54:2c:72:7b:
77:0e:19:63:c1:14:e5:e1:b0:73:2e:9c:47:13:66:b4:e5:d8:
4e:c6:ce:26:29:04:c5:dc:07:86:bc:ac:30:c2:17:83:ad:9c:
f7:1e:b3:42:4c:a2:68:04:96:67:3f:c6:98:59:bc:9e:1d:c8:
3e:a2:53:aa:bd:ea:ec:e5:bb:ed:ce:a7:2c:72:87:99:e2:95:
08:4e:db:b3:a7:ef:18:5f:7b:cd:be:8a:94:07:45:5c:3b:06:
7d:2c:45:e0:2e:73:13:7b:24:d2:ca:50:88:cc:f7:a5:a4:8c:
8d:77:23:07:c9:d0:a8:98:c0:c3:ab:b4:e4:99:08:d9:3a:cd:
3a:8d:09:e2:a4:34:8e:2f:61:de:10:5b:ed:99:32:a1:cd:33:
78:aa:5b:18:25:94:1c:32:be:3b:9e:77:71:19:1f:b2:c6:83:
9e:b5:df:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:32 2024 by rpki-client on console-fra.rpki-client.org