Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6ULaLhwg5SNEu_oyYBVevigv4JQ.roa
File: 6ULaLhwg5SNEu_oyYBVevigv4JQ.roa (raw, json)
Hash identifier: Qm2LlWo1Qj0xlRxz6N1V6YLTuCSN+1q7WzmIRRxInac=
Subject key identifier: E9:42:DA:2E:1C:20:E5:23:44:BB:FA:32:60:15:5E:BE:28:2F:E0:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E4777BFB01A060036B0BE690144385F8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6ULaLhwg5SNEu_oyYBVevigv4JQ.roa
Signing time: Tue 24 Jan 2023 15:48:33 +0000
ROA not before: Tue 24 Jan 2023 15:48:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:77:7b:fb:01:a0:60:03:6b:0b:e6:90:14:43:85:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 24 15:48:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e942da2e1c20e52344bbfa3260155ebe282fe094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0a:04:77:af:92:24:2e:2b:0f:98:09:76:fd:
fc:aa:a8:cd:db:3b:d5:ce:47:fd:48:97:36:8e:7a:
1a:60:0d:b4:5b:b6:05:3f:12:cc:5e:f4:11:1c:fe:
eb:10:2d:9c:ca:55:e6:da:15:8d:fc:cb:1d:99:95:
f5:40:71:6a:04:d7:73:83:85:59:59:07:45:bb:97:
76:42:0c:43:e2:87:c9:ed:ff:da:3e:95:03:02:3d:
c3:0c:d0:d4:be:ed:a1:44:3f:3f:f1:25:9b:e8:1f:
96:ec:29:57:6c:0b:16:fb:a6:0b:04:8a:fe:ac:7b:
37:5e:f3:59:7b:65:ae:da:87:28:5c:c2:ca:55:9f:
41:76:ca:b1:ff:0d:50:8b:8d:c4:2c:a3:f1:9d:43:
c1:22:92:b7:53:9d:0e:63:14:d6:35:05:b6:5c:d5:
90:92:20:2f:53:12:0d:91:f5:aa:31:dc:67:de:58:
79:b1:d4:a0:41:7a:f9:8d:e3:5b:34:90:e2:59:5c:
21:f9:85:ff:fa:7d:fe:13:4b:93:13:9f:2d:4d:74:
39:df:6e:18:dc:46:32:90:1a:be:61:a3:cf:5e:b7:
f6:1b:a8:c8:5d:0b:51:be:33:d9:b5:66:58:af:a2:
7c:fb:ad:57:f0:b2:5d:5f:7e:50:d0:75:36:d8:d0:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:42:DA:2E:1C:20:E5:23:44:BB:FA:32:60:15:5E:BE:28:2F:E0:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6ULaLhwg5SNEu_oyYBVevigv4JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.11.0/24
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.165.0/24
194.87.171.0/24
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0-195.133.195.255
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.11.0-212.193.12.255
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:71:68:1c:23:45:b9:a0:e0:33:81:e6:9e:e2:b8:3d:82:a9:
7f:c5:81:b9:94:c5:b1:29:c8:a5:cb:21:5f:a0:8d:a4:61:c1:
c1:e4:42:8f:64:df:a8:29:c7:f1:fc:ca:a0:c5:70:8c:8d:f1:
a1:a2:82:e4:28:5b:f1:4a:05:00:1c:47:57:2e:de:45:d7:ff:
22:f9:89:74:9b:31:13:9c:8c:2d:b0:d7:42:b9:4b:31:ed:34:
9b:0f:12:5b:9f:08:8d:92:5b:15:ad:e3:88:0c:7c:83:a6:d5:
6c:6d:47:04:5c:b1:0a:37:0f:cc:c7:12:37:f2:d2:41:ef:5c:
cf:17:2c:a5:e5:83:ef:69:76:7b:c3:0c:73:c7:c6:b9:9f:d4:
d5:50:b1:5a:e4:66:a3:4e:8c:fa:61:98:fc:87:38:13:92:e8:
6c:b2:c4:64:08:62:fb:39:fe:c8:fe:69:ee:9c:14:8a:d5:1a:
69:94:1e:91:40:b4:87:92:6a:e9:d4:a3:aa:46:26:b4:55:df:
d2:1b:77:a1:a3:ba:aa:6b:54:00:4b:04:e9:be:5c:fc:32:df:
98:a5:08:11:0b:14:cd:9b:70:0b:96:06:3d:0f:7a:13:2b:6c:
83:f2:1a:e7:29:dc:bc:25:7a:a8:32:65:7f:6d:b8:87:fd:aa:
06:31:c8:6c
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISAYXkd3v7AaBgA2sL5pAUQ4X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTI0MTU0ODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTQyZGEyZTFjMjBlNTIzNDRiYmZhMzI2MDE1NWViZTI4MmZlMDk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQoEd6+SJC4rD5gJdv38qqjN2zvV
zkf9SJc2jnoaYA20W7YFPxLMXvQRHP7rEC2cylXm2hWN/MsdmZX1QHFqBNdzg4VZ
WQdFu5d2QgxD4ofJ7f/aPpUDAj3DDNDUvu2hRD8/8SWb6B+W7ClXbAsW+6YLBIr+
rHs3XvNZe2Wu2ocoXMLKVZ9Bdsqx/w1Qi43ELKPxnUPBIpK3U50OYxTWNQW2XNWQ
kiAvUxINkfWqMdxn3lh5sdSgQXr5jeNbNJDiWVwh+YX/+n3+E0uTE58tTXQ5324Y
3EYykBq+YaPPXrf2G6jIXQtRvjPZtWZYr6J8+61X8LJdX35Q0HU22NAziwIDAQAB
o4IDczCCA28wHQYDVR0OBBYEFOlC2i4cIOUjRLv6MmAVXr4oL+CUMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNlVMYUxod2c1U05FdV9veVlCVmV2aWd2NEpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhwYIKwYBBQUHAQcBAf8EggF2MIIBcjCCAW4EAgABMIIB
ZgMEAD5M5wMEAMB8rAMEAMB8sgMEAsB8tAMEAMB8vgMEAMF8BgMEAMF8CAMEAMF8
hQMEAcF8ygMEAMF8zwMEAMI6JgMEAMI6KjAMAwQAwjotAwQEwjogAwQAwjo7AwQA
wlcDAwQBwlcGAwQAwlcLAwQAwlcQAwQAwlcWAwQCwlcYAwQAwlc4AwQAwldMAwQB
wldSAwQAwldoMAwDBAHCV3IDBADCV3QDBADCV3YDBADCV3sDBADCV34DBADCV4gD
BAHCV4oDBADCV5UDBADCV6UDBADCV6sDBADCV7ADBADCV74DBAHCV8YDBADCV8oD
BADCV8wDBAHCV9ADBAHCV94DBADCV+IDBADCV+kDBADDOjIwDAMEAsM6NAMEBsM6
AAMEAMOFDAMEAMOFNwMEAMOFXjAMAwQAw4XBAwQCw4XAAwQB1MAAAwQB1MDQAwQA
1MEAMAwDBADUwQsDBADUwQwDBADUwQ4wDQYJKoZIhvcNAQELBQADggEBAAVxaBwj
Rbmg4DOB5p7iuD2CqX/FgbmUxbEpyKXLIV+gjaRhwcHkQo9k36gpx/H8yqDFcIyN
8aGiguQoW/FKBQAcR1cu3kXX/yL5iXSbMROcjC2w10K5SzHtNJsPElufCI2SWxWt
44gMfIOm1WxtRwRcsQo3D8zHEjfy0kHvXM8XLKXlg+9pdnvDDHPHxrmf1NVQsVrk
ZqNOjPphmPyHOBOS6GyyxGQIYvs5/sj+ae6cFIrVGmmUHpFAtIeSaunUo6pGJrRV
39Ibd6GjuqprVABLBOm+XPwy35ilCBELFM2bcAuWBj0PehMrbIPyGucp3Lwleqgy
ZX9tuIf9qgYxyGw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org