Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3wga1f6NQNYKh4n31wMh4WCa1yM.roa
File: 3wga1f6NQNYKh4n31wMh4WCa1yM.roa (raw, json)
Hash identifier: g0RgdPAix4R2ltcC6WmQ/uqFET4tcrallnKxJcI5aa0=
Subject key identifier: DF:08:1A:D5:FE:8D:40:D6:0A:87:89:F7:D7:03:21:E1:60:9A:D7:23
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185867351268798AF4C6CC713F1533E0718
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3wga1f6NQNYKh4n31wMh4WCa1yM.roa
Signing time: Fri 06 Jan 2023 09:39:42 +0000
ROA not before: Fri 06 Jan 2023 09:39:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:73:51:26:87:98:af:4c:6c:c7:13:f1:53:3e:07:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 6 09:39:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df081ad5fe8d40d60a8789f7d70321e1609ad723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:da:c6:99:ef:6f:5b:3e:e9:fd:01:b8:fc:58:
2f:b2:31:62:e8:1d:d9:ba:93:ee:63:c5:18:99:d0:
7d:d9:60:9a:3d:a6:51:14:71:d7:65:72:21:8f:1b:
aa:19:f5:4a:8d:b2:b7:49:67:91:6d:76:d0:70:0c:
48:51:03:b1:51:f0:d7:0d:4e:28:1f:8c:60:b8:9f:
36:38:24:40:fe:43:58:48:72:e8:7f:dc:87:1d:62:
04:31:81:a0:f5:50:b5:08:3b:25:a3:b6:02:39:34:
35:f2:8b:5d:ae:1a:4f:6f:6d:0c:f2:0c:46:c5:5d:
a2:42:96:ba:6b:7f:7b:b5:99:7d:87:d2:c5:02:fc:
41:f6:b4:c2:15:2d:c3:0c:a8:af:10:be:b5:c4:9d:
ea:6f:50:2e:7a:7d:5f:d6:b5:5c:5f:07:05:14:d0:
3a:ee:82:43:2c:e3:a2:89:5c:ec:3b:66:55:a6:5f:
63:1e:77:c6:3d:48:9c:26:82:a1:d7:b8:ed:50:3f:
34:c4:53:96:2e:3a:38:f5:74:a3:cc:da:42:24:61:
37:60:51:91:b0:53:2e:94:16:cd:63:8f:49:3c:85:
04:d7:cf:ab:5e:3a:89:6f:cb:2c:1f:b7:dc:6d:1e:
de:b2:67:99:11:bb:69:c2:53:11:9e:fe:77:fc:6d:
05:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:1A:D5:FE:8D:40:D6:0A:87:89:F7:D7:03:21:E1:60:9A:D7:23
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3wga1f6NQNYKh4n31wMh4WCa1yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0-193.124.4.255
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.41.0/24
193.124.45.0/24
193.124.125.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.58.0/23
194.87.6.0/23
194.87.24.0/22
194.87.36.0/24
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.116.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.190.0/24
194.87.198.0-194.87.200.255
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.30.0/24
212.192.222.0/24
212.193.0.0/24
212.193.8.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1d:c3:f3:68:5d:0a:84:04:d5:bd:56:f4:1d:a9:86:99:5e:
f3:c4:10:d1:13:17:76:d7:b7:fc:00:b1:ea:21:bc:62:f8:34:
45:ee:6b:07:fd:dc:57:c3:4d:a7:ed:88:08:db:f0:21:94:b7:
43:e3:70:bf:45:8e:98:87:73:d2:f2:b9:26:a8:55:d5:ab:93:
2b:52:db:52:7a:5f:20:cc:c0:e0:84:d3:74:57:1a:9d:db:a4:
d9:f5:b8:1b:75:c2:ff:76:69:4b:9b:99:a5:3e:7b:3d:63:c5:
79:62:b4:85:1a:f5:9c:88:f0:b1:60:18:08:9b:ee:5c:9c:b8:
4d:e6:5d:9d:fe:a4:a0:99:ad:ac:58:97:af:1f:03:8b:47:80:
df:24:b8:dd:4e:86:ef:7c:bd:c3:6a:4e:97:31:cf:e7:4e:78:
d6:7e:35:b8:14:de:f5:a9:0d:95:60:3b:5d:85:88:51:30:a0:
5c:f8:e8:2e:05:31:eb:0e:7b:d0:13:b8:a0:11:d9:f6:b9:90:
4c:fd:1e:b7:d1:d3:e3:6f:ad:52:d5:fd:92:4e:f5:69:a9:60:
cc:c8:3b:10:98:4e:74:04:e0:e2:5b:2a:c4:83:83:8c:11:db:
05:c6:5a:83:28:37:c6:76:3e:ef:52:d0:a2:4f:59:71:be:30:
fc:17:28:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org