Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60mY6T8TBUEXc0uop5dheB2wiSU.roa
File: 60mY6T8TBUEXc0uop5dheB2wiSU.roa (raw, json)
Hash identifier: tow5IMCBiq/h52M9M6Fv909TLdG5ILxShHoKAIKP2vA=
Subject key identifier: EB:49:98:E9:3F:13:05:41:17:73:4B:A8:A7:97:61:78:1D:B0:89:25
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186BBC65036B4199481E6C069C6B5F1B738
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60mY6T8TBUEXc0uop5dheB2wiSU.roa
Signing time: Tue 07 Mar 2023 11:13:01 +0000
ROA not before: Tue 07 Mar 2023 11:13:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 Mar 2023 04:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:c6:50:36:b4:19:94:81:e6:c0:69:c6:b5:f1:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 7 11:13:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb4998e93f13054117734ba8a79761781db08925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7f:b4:24:1e:34:7a:e9:3c:87:fb:c5:78:92:
41:83:57:88:d3:13:0e:c1:57:f5:8c:6c:06:96:e3:
18:57:2d:80:bc:5c:3c:00:0e:a0:16:6b:87:c0:ca:
54:6f:4b:66:c8:a5:79:13:7d:96:25:0c:48:6e:94:
7c:b9:57:ed:06:bd:fe:ca:18:45:a1:f6:39:9f:4f:
f2:c1:8d:e0:54:19:5d:bc:04:be:c8:23:54:79:f4:
cd:de:3b:31:a7:4c:86:10:99:71:03:ec:5f:b0:5b:
48:55:4e:da:be:ca:fc:48:24:e7:87:f2:ca:40:08:
2e:ac:1a:b9:39:d0:3d:25:45:36:b3:c3:23:27:ff:
71:38:6b:e4:23:96:77:60:f1:eb:3a:9b:5c:0c:3d:
57:ff:2e:10:29:ad:57:8a:0c:94:b2:34:d2:fd:f2:
08:ab:a9:f0:27:68:32:c4:10:37:6c:3d:1d:c9:c9:
26:58:e9:a4:ac:35:69:17:52:47:69:b1:ec:d3:01:
b6:29:37:bd:97:5d:5b:fc:38:9e:25:bb:7b:d2:95:
94:66:f2:fc:f4:6c:b8:7f:e5:35:12:76:cd:d0:11:
a0:58:35:a4:ff:ca:d9:a3:0a:af:71:c4:b2:b9:af:
40:90:0e:af:de:65:2d:92:e3:29:d4:9a:12:fe:fb:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:49:98:E9:3F:13:05:41:17:73:4B:A8:A7:97:61:78:1D:B0:89:25
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/60mY6T8TBUEXc0uop5dheB2wiSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/23
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e3:b8:86:b5:1c:b6:97:f5:dd:d8:14:9d:c6:10:e9:78:de:
ba:7d:24:05:6d:15:54:b7:8e:31:71:e7:e5:75:e3:91:8d:e7:
0d:8c:a6:ca:0c:85:25:9d:c5:53:a9:5d:73:9e:f8:b8:ff:e3:
93:c2:ef:bd:30:83:c0:e0:e2:31:d0:21:b8:9b:40:82:0e:a7:
b2:04:ea:c8:98:c1:d7:1d:3f:29:2e:ea:40:80:35:17:b8:33:
12:60:66:91:56:fd:34:65:1e:6d:10:f8:2d:da:54:29:fd:b0:
a4:81:19:68:a4:20:5d:e8:36:d6:2b:fa:20:98:1d:4b:e6:49:
e2:03:3b:e1:93:78:b6:78:cf:d4:f6:58:3a:4a:ae:74:75:a6:
02:0b:f8:51:3c:b2:6e:c4:f8:49:69:bd:81:52:91:f0:ea:58:
21:64:f0:70:12:5a:84:c8:c2:cd:70:f2:96:37:d0:25:f2:21:
44:a9:42:34:55:f1:e3:aa:49:99:7d:bc:4a:1a:6c:49:02:24:
cc:0f:26:a7:65:db:c8:ff:40:f9:06:23:fa:de:29:3b:78:94:
2a:8a:1d:43:2c:ff:1e:cf:eb:2b:7d:ba:49:25:01:df:34:27:
49:2b:c3:75:30:be:b6:18:8e:03:3e:4f:46:e4:19:64:c2:c7:
96:c9:b9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:06 2024 by rpki-client on console-fra.rpki-client.org