Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Z94P7k6-pIMaisYjFgb2pTuR04.roa
File: 5Z94P7k6-pIMaisYjFgb2pTuR04.roa (raw, json)
Hash identifier: gR/R/wb4+c6XZ3Cbk/Hp1DYIB/pvBLEQZf23MmeiZ+4=
Subject key identifier: E5:9F:78:3F:B9:3A:FA:92:0C:6A:2B:18:8C:58:1B:DA:94:EE:47:4E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019103E06B5056291A8E20CB0E1BFD414F57
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Z94P7k6-pIMaisYjFgb2pTuR04.roa
Signing time: Tue 30 Jul 2024 13:42:04 +0000
ROA not before: Tue 30 Jul 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.204.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 01 Aug 2024 07:56:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:e0:6b:50:56:29:1a:8e:20:cb:0e:1b:fd:41:4f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 30 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e59f783fb93afa920c6a2b188c581bda94ee474e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:f4:d6:bb:d5:4d:f2:8a:94:f8:f5:f5:c5:
41:fc:c9:7b:ec:ae:b3:ad:a4:c9:4c:5e:59:35:56:
67:50:6b:15:98:33:a0:f0:41:2a:9e:d5:69:24:af:
09:d9:6a:13:1c:85:a5:3e:ff:ac:58:d0:78:fd:2a:
8e:a5:ef:4e:3b:b6:e0:47:2e:cb:a4:d5:20:05:5d:
19:9f:ed:a1:22:a5:26:2d:b7:1b:8f:c1:86:77:92:
7d:1f:b6:be:32:b1:04:97:88:b2:53:43:03:e3:12:
fa:85:9e:0c:da:69:d4:91:58:d1:02:a4:c6:56:b2:
75:e2:c9:9e:8f:a4:93:f0:b3:89:e7:19:93:1e:dc:
f0:66:e8:95:b9:4d:ca:1f:6a:e6:c3:c5:ad:d0:1e:
a0:b6:ee:15:98:cb:49:4d:a6:9d:ac:a8:11:79:55:
11:b4:6b:63:0c:f8:06:e7:e5:f2:f0:02:41:2b:99:
96:07:0f:19:b4:4f:b9:ee:e8:b9:c4:ea:b6:f4:92:
b7:ab:cf:24:cb:1b:05:1d:4e:c5:19:68:47:e8:f5:
69:e1:76:87:d5:10:ef:6b:ec:28:9f:d6:53:31:6c:
ca:36:17:0d:b9:c7:79:1e:47:c0:d4:ac:32:0f:8f:
79:a5:77:56:71:08:9b:5d:ac:48:9d:ff:13:a6:03:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9F:78:3F:B9:3A:FA:92:0C:6A:2B:18:8C:58:1B:DA:94:EE:47:4E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5Z94P7k6-pIMaisYjFgb2pTuR04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.204.0/24
194.58.41.0/24
194.58.44.0/24
194.58.66.0/24
194.58.155.0/24
194.58.223.0/24
194.87.44.0/24
194.87.49.0/24
194.87.52.0/24
194.87.54.0/23
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.233.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/22
195.58.63.0/24
195.133.9.0/24
195.133.15.0/24
195.133.18.0/24
195.133.21.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.39.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.215.0/24
212.192.223.0/24
212.192.246.0/24
212.192.248.0/24
212.193.1.0/24
212.193.5.0/24
212.193.24.0/24
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
88:22:b5:2a:5a:a3:b0:a2:b5:db:4d:d7:20:2e:9b:15:dd:03:
25:1c:5b:7f:8d:af:99:ce:00:73:f6:46:b7:d8:b9:d6:25:06:
bf:94:4e:b9:ea:60:9a:0c:d5:fa:7e:64:0e:9a:39:de:a1:44:
83:27:02:a6:42:61:1c:30:37:da:3f:05:f6:8d:ee:fc:bd:ed:
cd:1c:69:05:fe:df:cc:f9:d5:43:be:91:cb:0c:6d:51:20:cd:
70:92:1e:09:a9:3d:87:23:81:4b:4f:75:7e:4d:8c:96:c3:76:
bf:81:6c:41:7e:2a:6f:ad:5b:51:75:51:df:5d:db:48:ae:34:
5c:60:73:6f:56:d8:db:44:37:56:d5:4a:a7:72:06:31:f8:54:
00:78:3b:4d:21:b7:46:95:52:ca:56:4d:cc:3d:8b:a4:a5:dd:
19:f0:ea:52:1e:63:9a:4a:e7:d3:99:96:e9:23:4b:6d:3f:e3:
ed:f3:eb:e5:47:08:a3:58:cc:a4:df:60:ae:57:9b:37:0d:07:
f5:ae:ba:71:78:24:7d:33:5a:71:79:0d:24:b8:34:5c:3c:a8:
83:58:96:4f:67:54:72:0c:f9:2b:27:99:9d:bc:65:2f:dc:4e:
04:4b:79:36:0f:54:31:ef:e6:1b:02:be:69:99:4b:04:c6:63:
53:17:30:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:14 2024 by rpki-client on console-fra.rpki-client.org