Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5fKkgMG1s0xyi21tkpOCIFfr6po.roa
File: 5fKkgMG1s0xyi21tkpOCIFfr6po.roa (raw, json)
Hash identifier: 5z7vYbLaT2eUJItpjiCkefd9TKIwbE0LOIJ1IskKxTA=
Subject key identifier: E5:F2:A4:80:C1:B5:B3:4C:72:8B:6D:6D:92:93:82:20:57:EB:EA:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C290CAD6CB629B8B28FA01033293C24D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5fKkgMG1s0xyi21tkpOCIFfr6po.roa
Signing time: Thu 27 Apr 2023 11:54:41 +0000
ROA not before: Thu 27 Apr 2023 11:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:90:ca:d6:cb:62:9b:8b:28:fa:01:03:32:93:c2:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 11:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5f2a480c1b5b34c728b6d6d9293822057ebea9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:ce:49:59:d4:62:60:2a:4c:13:0b:08:0e:
2d:19:ce:95:87:97:82:9c:f2:0f:e3:c6:3b:c6:84:
63:60:3a:d8:52:f7:90:41:1e:1c:c1:32:94:2a:b8:
95:3c:ef:e3:30:e0:db:b2:db:3c:b9:f7:9c:2f:ed:
bc:fc:03:32:34:ac:ef:ff:f1:d0:d8:35:59:ff:a4:
56:7a:fc:ee:61:b6:30:c8:8c:b6:19:fd:1b:b3:c5:
d6:b2:ce:f4:0b:a3:1a:df:61:ca:be:e1:0e:3c:74:
43:49:c1:9e:8d:ab:81:25:91:b5:cd:64:0a:76:b2:
9f:bb:ba:61:65:59:fc:0d:19:21:27:29:c9:39:16:
f3:6e:5e:5b:c5:ac:2c:83:c8:27:af:aa:bf:34:fb:
5b:37:37:57:b2:ea:d2:74:03:81:89:38:62:12:4c:
df:2f:4d:8c:85:3a:f5:8e:4d:f6:e4:d9:60:27:40:
c6:75:5d:09:11:b9:50:b3:cd:6a:ad:e3:81:e2:b9:
d1:af:f0:57:5d:2f:83:5f:dd:1a:2d:f0:be:0a:49:
e1:13:e6:a1:84:1b:21:0e:0a:5a:70:6d:01:da:22:
7b:ac:b0:1a:58:09:91:61:e6:6c:9b:bb:d5:f5:67:
16:c8:25:cf:2e:98:99:f8:fd:61:dd:65:b3:f8:e3:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F2:A4:80:C1:B5:B3:4C:72:8B:6D:6D:92:93:82:20:57:EB:EA:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5fKkgMG1s0xyi21tkpOCIFfr6po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
83:5b:f5:a1:3d:09:37:a9:b4:ff:e8:e9:7c:60:4e:34:9a:3b:
e1:c3:32:0f:15:e2:ed:90:6f:48:ee:51:49:5c:d7:f0:3d:99:
69:c3:ab:30:dc:8c:03:8c:33:ea:20:39:7f:04:c7:5a:c6:2c:
56:94:a1:3c:5f:e2:ab:2f:52:21:17:75:85:08:1a:fe:dd:cd:
fa:85:c3:04:ea:fe:88:35:25:2c:bf:6a:26:53:1e:7e:4b:6c:
b4:c5:43:76:55:e4:2d:7a:1c:00:72:a5:a9:85:bd:17:83:f5:
33:78:04:e8:15:99:bd:cf:be:da:db:8a:e0:d8:31:56:bd:ab:
b7:6a:7d:45:15:53:e2:0b:a5:fb:63:2d:a9:da:2a:e3:8f:72:
e8:49:45:10:e5:4b:74:55:fd:d2:04:41:1a:11:5e:d0:d3:b0:
33:52:0b:81:1b:88:6b:c6:eb:87:32:50:76:b4:22:5e:b3:f5:
42:8b:0a:5d:93:b2:57:a0:de:8e:ef:a2:88:c0:d2:d0:9e:af:
aa:cc:49:0a:ad:f8:2c:e1:85:ae:a5:2c:30:53:49:18:4e:92:
f0:cf:f6:01:16:22:5e:41:d1:ba:69:ce:05:48:47:ea:94:76:
4b:82:4e:b0:57:3a:dd:a8:bd:45:13:94:01:4b:ca:03:a6:1f:
f4:18:b4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org