Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1R5pW52YIBt27kveggDfEVmS_DI.roa
File: 1R5pW52YIBt27kveggDfEVmS_DI.roa (raw, json)
Hash identifier: dS/vxfRHpy/x1tfjG+7TH/197nPX0W57IFMzsJw9ngs=
Subject key identifier: D5:1E:69:5B:9D:98:20:1B:76:EE:4B:DE:82:00:DF:11:59:92:FC:32
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C53A2330BA1199381451738D8F5B11A3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1R5pW52YIBt27kveggDfEVmS_DI.roa
Signing time: Wed 18 Jan 2023 14:13:19 +0000
ROA not before: Wed 18 Jan 2023 14:13:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c5:3a:23:30:ba:11:99:38:14:51:73:8d:8f:5b:11:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 14:13:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d51e695b9d98201b76ee4bde8200df115992fc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:20:c1:5f:91:b0:8f:ba:2e:5f:99:54:94:02:
80:0d:6e:65:7d:d5:d4:12:47:88:98:d0:23:42:b8:
40:a8:1c:63:59:7f:2e:e3:ae:f1:eb:cf:f8:97:79:
c0:9b:53:9d:a1:21:38:f5:49:58:84:d3:e6:3a:5e:
4f:83:eb:3f:2f:26:e5:e4:8b:c3:5a:a2:d4:0f:a6:
e9:a8:60:3f:cf:d2:72:e9:2a:05:52:21:85:f9:1b:
88:3c:44:56:70:d5:6e:68:0f:93:5c:a8:30:03:c5:
6e:4e:bd:ee:5a:d7:c8:61:7a:51:de:2f:19:47:07:
9d:4e:a3:88:b9:e9:51:45:60:8f:40:11:14:02:a7:
25:e1:83:e5:6b:1e:cc:3a:f5:92:27:c7:4a:ae:29:
25:6f:92:13:35:e7:ac:89:ba:86:e3:c9:2b:dc:e4:
80:7c:56:d3:40:20:6d:4d:b1:fb:32:03:9a:23:6f:
af:11:3f:a4:ba:89:d9:d4:1b:09:59:79:09:57:d9:
00:26:ea:40:12:07:0a:76:e1:a1:5d:00:80:23:cd:
9b:4f:3d:1e:dd:6d:b2:6a:21:8e:96:f4:62:cd:7d:
a5:a3:f6:ce:ab:1d:70:a0:99:03:78:11:93:0d:4e:
38:71:82:6c:80:04:b1:6e:c9:8f:04:ec:ea:52:f0:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:69:5B:9D:98:20:1B:76:EE:4B:DE:82:00:DF:11:59:92:FC:32
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1R5pW52YIBt27kveggDfEVmS_DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1d:bb:d1:c1:4d:8f:27:12:9d:af:f7:99:f7:3a:78:1a:58:
25:4b:06:09:da:38:31:85:df:24:47:92:07:59:94:08:aa:24:
2a:84:14:5d:6c:68:75:a2:9b:c8:79:11:4f:84:77:33:c4:3a:
a6:7f:5f:17:a0:fd:51:9d:4d:ce:44:75:41:5c:86:a6:9e:a9:
f7:3b:ea:57:93:4b:b9:32:3e:d7:a8:52:cc:8c:9b:bb:92:47:
76:fa:69:eb:44:7b:ec:c8:3e:17:64:d9:56:23:15:dd:ee:b7:
de:72:62:6b:6d:c5:92:05:05:68:c2:dc:56:df:de:a5:1f:ef:
c4:c8:15:33:b0:8f:dd:40:4c:78:93:ba:11:8c:db:6f:08:11:
78:a6:e6:b8:e1:ec:4d:e0:b6:91:6d:74:b7:99:6f:c4:2f:5c:
38:dc:5a:8c:2a:11:63:aa:3e:73:88:8a:c8:03:06:db:44:1c:
ef:52:69:5e:5d:f2:b6:19:81:e4:a6:de:0e:e9:f2:ce:9f:c3:
63:ef:e5:f3:b6:cf:69:91:d6:46:35:78:3d:ad:79:ff:01:96:
61:3e:56:a5:75:82:67:73:ec:0c:3d:a0:0f:c7:47:9b:fb:00:
33:4b:b5:e1:e1:c0:4d:31:1d:49:aa:1c:38:5f:7c:4d:90:a9:
0b:67:77:9d
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgISAYXFOiMwuhGZOBRRc42PWxGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTE4MTQxMzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTFlNjk1YjlkOTgyMDFiNzZlZTRiZGU4MjAwZGYxMTU5OTJmYzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSDBX5Gwj7ouX5lUlAKADW5lfdXU
EkeImNAjQrhAqBxjWX8u467x68/4l3nAm1OdoSE49UlYhNPmOl5Pg+s/Lybl5IvD
WqLUD6bpqGA/z9Jy6SoFUiGF+RuIPERWcNVuaA+TXKgwA8VuTr3uWtfIYXpR3i8Z
RwedTqOIuelRRWCPQBEUAqcl4YPlax7MOvWSJ8dKriklb5ITNeesibqG48kr3OSA
fFbTQCBtTbH7MgOaI2+vET+kuonZ1BsJWXkJV9kAJupAEgcKduGhXQCAI82bTz0e
3W2yaiGOlvRizX2lo/bOqx1woJkDeBGTDU44cYJsgASxbsmPBOzqUvCAPQIDAQAB
o4IDcTCCA20wHQYDVR0OBBYEFNUeaVudmCAbdu5L3oIA3xFZkvwyMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvMVI1cFc1MllJQnQyN2t2ZWdnRGZFVm1TX0RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhQYIKwYBBQUHAQcBAf8EggF0MIIBcDCCAWwEAgABMIIB
ZAMEAD5M5wMEAMB8rAMEAMB8sgMEAsB8tAMEAMB8vgMEAMF8AwMEAMF8BgMEAMF8
CAMEAMF8hQMEAcF8ygMEAMF8zwMEAcI6JgMEAMI6KjAMAwQAwjotAwQEwjogAwQA
wjo7AwQAwlcDAwQBwlcGAwQAwlcQAwQAwlcWAwQCwlcYAwQAwlc4AwQAwldMAwQB
wldSAwQAwldoMAwDBAHCV3IDBADCV3QDBADCV3YDBADCV3sDBADCV34DBADCV4gD
BAHCV4oDBADCV5UDBADCV6MDBADCV6UwDAMEAMJXqwMEAMJXrAMEAMJXsAMEAMJX
vgMEAcJXxgMEAMJXygMEAMJXzAMEAcJX0AMEAcJX3gMEAMJX4gMEAMJX6QMEAMM6
MjAMAwQCwzo0AwQGwzoAAwQAw4UMAwQAw4U3AwQAw4VeAwQBw4XCAwQB1MAAAwQB
1MDQAwQA1MEAAwQA1MEMAwQA1MEOMA0GCSqGSIb3DQEBCwUAA4IBAQAYHbvRwU2P
JxKdr/eZ9zp4GlglSwYJ2jgxhd8kR5IHWZQIqiQqhBRdbGh1opvIeRFPhHczxDqm
f18XoP1RnU3ORHVBXIamnqn3O+pXk0u5Mj7XqFLMjJu7kkd2+mnrRHvsyD4XZNlW
IxXd7rfecmJrbcWSBQVowtxW396lH+/EyBUzsI/dQEx4k7oRjNtvCBF4pua44exN
4LaRbXS3mW/EL1w43FqMKhFjqj5ziIrIAwbbRBzvUmleXfK2GYHkpt4O6fLOn8Nj
7+Xzts9pkdZGNXg9rXn/AZZhPlaldYJnc+wMPaAPx0eb+wAzS7Xh4cBNMR1Jqhw4
X3xNkKkLZ3ed
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org