Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Rw_F4JL3wCPwj8hcC58vhBSJB8.roa
File: 6Rw_F4JL3wCPwj8hcC58vhBSJB8.roa (raw, json)
Hash identifier: 83ntYf0SnK0meR2RgxDFNSlRWq2++fkDEA2dfPLGYvY=
Subject key identifier: E9:1C:3F:17:82:4B:DF:00:8F:C2:3F:21:70:2E:7C:BE:10:52:24:1F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018730D888BE50D9C9087F3DF54180688653
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Rw_F4JL3wCPwj8hcC58vhBSJB8.roa
Signing time: Thu 30 Mar 2023 04:48:29 +0000
ROA not before: Thu 30 Mar 2023 04:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:d8:88:be:50:d9:c9:08:7f:3d:f5:41:80:68:86:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 30 04:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e91c3f17824bdf008fc23f21702e7cbe1052241f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:29:08:2e:9f:7e:f5:a0:b7:ce:ff:91:d2:
d9:86:83:87:e0:ea:da:d4:ab:a2:e5:9c:e6:91:6e:
4e:d0:6f:db:b4:9b:9e:ee:65:10:51:2d:83:e9:e3:
49:7a:8b:bc:f3:df:9c:28:a4:ae:2d:00:4c:c6:df:
dd:b8:89:9d:28:9e:4b:8b:bd:77:35:5c:ea:c3:29:
f6:6e:2a:3a:4f:bb:6b:6d:23:8a:60:36:f1:f7:27:
37:45:e4:55:c8:b7:b9:aa:42:55:7c:a7:3f:56:f2:
b9:b2:12:b3:11:78:f7:76:16:9d:4f:66:66:14:58:
7c:55:61:8d:ca:10:20:1b:d7:19:49:09:6f:35:ea:
f6:4b:0b:fe:3a:29:29:bd:86:2d:f0:1e:4a:21:7f:
d6:7c:30:91:ef:ad:5a:81:a1:f5:54:f5:56:2c:dd:
11:74:21:85:da:fd:e1:73:81:db:b7:cd:7a:91:da:
37:c5:7b:36:8b:6c:ba:26:62:55:fd:64:3f:20:64:
cf:d6:61:45:16:48:5a:cc:31:7b:94:43:a0:14:99:
43:08:45:b2:ab:cd:56:aa:a0:ed:6c:0e:c6:3d:c5:
5d:87:83:b9:a5:9f:b3:3e:7a:94:32:ab:16:2b:6e:
e0:c4:66:ab:c8:c1:3c:c5:d0:1e:60:5b:2a:24:a5:
36:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1C:3F:17:82:4B:DF:00:8F:C2:3F:21:70:2E:7C:BE:10:52:24:1F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Rw_F4JL3wCPwj8hcC58vhBSJB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
194.58.38.0-194.58.40.255
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0/24
194.87.24.0/22
194.87.37.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/23
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.76.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
50:cc:6e:99:00:63:f8:d9:0f:5e:64:10:24:db:fc:22:d4:cc:
71:23:9d:63:7d:e7:a9:db:aa:4c:ad:b2:a1:6c:a8:25:44:55:
0a:eb:40:78:43:90:e3:f1:c4:76:59:e3:c2:4f:2e:ba:96:f6:
37:3b:52:a5:21:fb:69:7c:95:c6:37:33:bf:4c:6a:36:e3:be:
79:8d:1b:e9:a9:ca:56:11:33:14:88:1d:ff:d7:7d:92:90:48:
44:e7:36:2b:cb:cf:60:86:43:9b:b4:f8:d7:5d:95:64:af:53:
b1:40:f8:21:11:64:08:7e:dc:d1:0b:56:fe:09:0a:03:78:00:
7c:fe:53:64:a4:21:95:46:a7:2a:15:51:dc:a2:2e:b6:02:17:
fe:05:fd:af:a7:a8:79:f8:94:c0:0b:92:38:75:0a:d7:12:41:
43:66:09:cb:a9:12:12:3d:da:56:97:73:1c:d7:f9:26:7d:be:
17:c9:f6:91:6a:c8:20:bd:bf:54:58:b9:68:f4:28:bb:a1:f9:
23:82:d5:85:24:5e:0a:52:ce:08:fd:00:01:9c:c0:9d:41:a2:
d4:b3:10:46:52:e1:a3:33:98:97:10:10:f9:89:b3:a4:eb:a6:
b5:25:de:f0:42:43:35:37:6f:a9:02:1e:d2:65:76:4b:ac:82:
7f:b6:fb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org