Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/14OLzMs5l39V4NAYcVHjMO4gnR8.roa
File: 14OLzMs5l39V4NAYcVHjMO4gnR8.roa (raw, json)
Hash identifier: zKWxnJxx7PaP++GNhqq8YRHfdSUseWcad6fLp9C82v0=
Subject key identifier: D7:83:8B:CC:CB:39:97:7F:55:E0:D0:18:71:51:E3:30:EE:20:9D:1F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186BA51AFB547FF66D1EADD3104C927F0C6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/14OLzMs5l39V4NAYcVHjMO4gnR8.roa
Signing time: Tue 07 Mar 2023 04:26:00 +0000
ROA not before: Tue 07 Mar 2023 04:26:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:51:af:b5:47:ff:66:d1:ea:dd:31:04:c9:27:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 7 04:26:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7838bcccb39977f55e0d0187151e330ee209d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:66:b1:73:fd:0b:76:9b:c0:0b:d4:91:ec:
05:84:81:3c:fa:c0:2a:23:a2:fe:51:04:24:f4:cd:
e5:15:7a:60:38:d1:ba:5d:c1:ba:1a:09:12:5b:a7:
c6:37:80:89:6e:2d:5b:d6:c9:76:58:96:0a:13:5b:
1c:20:ee:b0:55:6b:b3:57:c7:34:1c:e1:cf:7f:c1:
ba:63:ca:15:4e:bc:c9:ba:11:f8:2b:e1:e5:f4:29:
a3:cf:3e:b4:c0:f4:26:2d:cd:a4:fb:5a:89:63:44:
4a:74:d7:7c:c2:da:75:d0:f1:c5:95:75:a1:28:64:
f5:df:fc:dd:84:e8:99:67:8d:6b:0a:0b:40:a7:37:
29:fe:80:b9:39:a9:8d:ce:bb:1b:3a:aa:ed:1c:e0:
f4:68:99:9f:9d:08:9f:28:0b:ab:da:04:0c:bc:36:
7b:d3:81:31:36:5a:df:b7:b7:f5:51:55:bf:03:52:
a4:1b:ba:75:a1:c2:ea:89:ef:14:ac:87:15:ca:d2:
7a:39:1e:2e:19:9b:ed:85:41:a0:50:32:d6:6a:1d:
44:44:da:19:5c:5a:e0:29:89:c9:ba:1f:f3:52:99:
f2:a3:0e:2f:96:d9:4c:c0:81:ad:8a:a8:c9:54:46:
a4:63:4a:a8:e0:8b:e6:7b:39:41:1a:43:44:b5:d7:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:83:8B:CC:CB:39:97:7F:55:E0:D0:18:71:51:E3:30:EE:20:9D:1F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/14OLzMs5l39V4NAYcVHjMO4gnR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/23
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:57:c5:7f:9d:6b:56:93:84:ab:fa:1c:fd:09:a3:fd:3f:48:
01:24:69:64:44:e6:d7:70:c6:db:14:3f:85:49:11:c9:d0:68:
e0:88:40:58:06:a3:88:6b:40:81:db:b3:30:5c:3d:b1:88:79:
3b:4b:15:11:ae:9d:a8:d7:c1:cd:b4:02:8e:e7:e1:cd:09:e4:
8c:64:9d:34:b6:ff:11:ac:8c:9d:ab:52:b2:94:c2:ea:1d:a1:
56:7e:10:ea:d9:c2:b0:79:0d:95:59:c9:cc:62:e6:6f:6a:45:
73:38:80:50:50:bd:c1:f6:19:2e:1b:9a:fe:77:a6:f8:8b:a2:
6d:a2:55:fb:7a:7d:77:21:fb:ac:5d:2b:57:95:2b:a9:3a:04:
5e:8b:0d:8d:3c:9f:36:86:9a:0c:f7:5d:c1:3d:09:46:5b:c6:
96:a7:29:4e:31:e6:be:cb:d6:a0:55:da:c8:3c:08:ce:90:c5:
99:51:c4:5f:61:56:da:d5:b1:3a:56:7d:8f:08:6f:40:5f:f1:
a4:36:26:48:39:09:60:81:1f:30:5e:d6:18:e2:6a:a1:77:8a:
f7:a5:37:c3:08:7f:06:b2:cf:5f:21:eb:91:94:26:f1:45:2c:
58:04:ed:be:32:4e:84:df:73:db:17:a0:56:ff:7a:20:0f:9a:
dd:fc:1f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org