Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cnA2fx1_Occ3WPo_tWFCCf-Hkw.roa
File: 6cnA2fx1_Occ3WPo_tWFCCf-Hkw.roa (raw, json)
Hash identifier: JZNouLw/pXoA61ynvpuzPcnU/ffUuL3k7KzPXkKUiS0=
Subject key identifier: E9:C9:C0:D9:FC:75:FC:E7:1C:DD:63:E8:FE:D5:85:08:27:FE:1E:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189638ADD35F2DFFF2023E4A7ED41FEA107
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cnA2fx1_Occ3WPo_tWFCCf-Hkw.roa
Signing time: Mon 17 Jul 2023 11:09:52 +0000
ROA not before: Mon 17 Jul 2023 11:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:8a:dd:35:f2:df:ff:20:23:e4:a7:ed:41:fe:a1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 11:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9c9c0d9fc75fce71cdd63e8fed5850827fe1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:81:48:7a:8f:2e:e7:96:2a:ab:15:95:28:6d:
98:bf:58:d3:ba:0f:f6:c6:4b:f3:18:2e:d9:6b:c8:
46:07:47:dd:ba:c6:07:81:7d:f5:c9:7d:44:d1:d8:
48:47:60:a3:5e:d0:f9:fa:6c:1d:a7:16:e1:c5:16:
8d:92:b9:bd:0a:21:87:0d:d6:6b:11:4e:3f:73:b8:
f8:10:1e:b5:ec:e2:d5:1b:83:57:9b:b1:c0:c3:be:
15:36:d9:a3:82:75:f3:56:9e:02:3b:07:8d:1e:54:
61:c5:af:d6:9b:81:26:54:9b:f3:0b:bf:94:c9:4f:
aa:0f:74:8d:aa:00:f5:85:e3:5c:53:cd:ef:30:8a:
af:92:5c:80:27:73:12:85:56:a6:d7:4c:71:f3:af:
c3:ee:77:d1:c1:18:ce:00:73:99:fb:0e:5a:be:49:
5e:5b:c3:a0:29:b2:eb:fa:eb:67:45:0a:3a:6b:5d:
c6:3a:a0:32:58:d2:d4:32:3e:d5:a4:09:35:04:db:
06:f1:dc:61:2c:21:93:9d:a1:f9:6f:6b:1d:6d:53:
97:12:be:12:d8:56:28:35:59:19:26:ed:8a:27:08:
53:1f:f6:3b:cf:e2:89:1c:c4:3e:19:87:f2:88:e9:
31:dc:34:da:45:71:82:90:13:b5:2a:d2:4d:51:e5:
8f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C9:C0:D9:FC:75:FC:E7:1C:DD:63:E8:FE:D5:85:08:27:FE:1E:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6cnA2fx1_Occ3WPo_tWFCCf-Hkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.47.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.23.0-194.87.27.255
194.87.36.0/24
194.87.40.0/24
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.35.0/24
195.133.73.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
86:c8:47:4a:95:e3:61:0b:14:8e:6b:cf:45:e6:f4:e4:46:c9:
64:be:31:5f:91:d9:12:2c:ee:3d:de:22:96:ae:4e:3c:57:fd:
36:44:5f:b1:9c:0c:a5:9d:d0:38:d8:c7:55:84:ac:d9:5d:f2:
25:cd:25:2d:1f:21:c9:f5:41:13:a5:94:95:3a:0e:75:14:69:
23:73:de:f6:0f:52:0e:64:85:ba:ce:32:88:cc:03:3b:9f:38:
31:0c:83:da:1e:f0:2e:88:d6:9a:6a:0d:1f:c7:30:e6:00:21:
45:64:6d:58:83:f4:70:21:15:e1:86:f9:71:91:23:f9:8a:3f:
80:78:06:d8:8c:4e:c7:53:e2:33:11:f2:c4:7e:e3:f9:dd:22:
69:e9:2a:1b:b6:bb:b1:6f:51:88:7d:e0:b4:5a:82:5d:eb:75:
f9:1f:17:62:e4:74:15:09:f4:fa:35:c7:cf:0e:e9:3c:2f:9a:
44:1e:ed:f3:a2:f6:54:72:21:3d:d8:d1:e4:15:11:b8:18:30:
44:e9:23:61:d1:a8:ea:04:56:ac:1f:36:37:28:f1:cd:28:49:
16:f9:6e:b7:eb:35:90:db:60:6a:04:d3:97:54:cd:58:1b:d7:
e8:40:e8:f2:38:8e:c0:9d:ae:77:4a:05:73:44:6f:f1:ca:5c:
17:8b:ac:0b
-----BEGIN CERTIFICATE-----
MIIGhzCCBW+gAwIBAgISAYljit018t//ICPkp+1B/qEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzE3MTEwOTUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOWM5YzBkOWZjNzVmY2U3MWNkZDYzZThmZWQ1ODUwODI3ZmUxZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYFIeo8u55YqqxWVKG2Yv1jTug/2
xkvzGC7Za8hGB0fdusYHgX31yX1E0dhIR2CjXtD5+mwdpxbhxRaNkrm9CiGHDdZr
EU4/c7j4EB617OLVG4NXm7HAw74VNtmjgnXzVp4COweNHlRhxa/Wm4EmVJvzC7+U
yU+qD3SNqgD1heNcU83vMIqvklyAJ3MShVam10xx86/D7nfRwRjOAHOZ+w5avkle
W8OgKbLr+utnRQo6a13GOqAyWNLUMj7VpAk1BNsG8dxhLCGTnaH5b2sdbVOXEr4S
2FYoNVkZJu2KJwhTH/Y7z+KJHMQ+GYfyiOkx3DTaRXGCkBO1KtJNUeWPnwIDAQAB
o4IDkzCCA48wHQYDVR0OBBYEFOnJwNn8dfznHN1j6P7VhQgn/h5MMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvNmNuQTJmeDFfT2NjM1dQb190V0ZDQ2YtSGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBpwYIKwYBBQUHAQcBAf8EggGWMIIBkjCCAY4EAgABMIIB
hgMEAT5M5gMEAMB8sgMEAMB8tQMEAMB8vQMEAMB8vwMEAMF8EAMEAMF8UAMEAMF8
fAMEAMF8hQMEAMF8yAMEAMF8zAMEAMI6LwMEAMI6mgMEAMI63wMEAMJXAQMEAMJX
AwMEAMJXBzAMAwQAwlcLAwQAwlcMAwQAwlcQMAwDBADCVxcDBALCVxgDBADCVyQD
BADCVygDBADCVysDBADCVzgDBADCV0kDBADCV04DBADCV1MDBADCV2wDBAHCV3ID
BADCV3oDBADCV3wDBAHCV4IDBAHCV4YDBADCV5cDBADCV6IDBADCV6YDBADCV6gD
BADCV7EDBADCV7MDBADCV7sDBADCV74DBADCV8gDBADCV8wDBADCV94DBADCV/AD
BADChxgDBADDOjYDBAHDOjoDBAHDOj4DBADDhQADBAHDhQYDBADDhR4DBADDhSMD
BADDhUkDBAHDhVQDBAHDhcIDBADUwAgDBADUwAoDBADUwPEDBADUwPQwDAMEANTA
9wMEAtTA+DANBgkqhkiG9w0BAQsFAAOCAQEAhshHSpXjYQsUjmvPReb05EbJZL4x
X5HZEizuPd4ilq5OPFf9NkRfsZwMpZ3QONjHVYSs2V3yJc0lLR8hyfVBE6WUlToO
dRRpI3Pe9g9SDmSFus4yiMwDO584MQyD2h7wLojWmmoNH8cw5gAhRWRtWIP0cCEV
4Yb5cZEj+Yo/gHgG2IxOx1PiMxHyxH7j+d0iaekqG7a7sW9RiH3gtFqCXet1+R8X
YuR0FQn0+jXHzw7pPC+aRB7t86L2VHIhPdjR5BURuBgwROkjYdGo6gRWrB82Nyjx
zShJFvlut+s1kNtgagTTl1TNWBvX6EDo8jiOwJ2ud0oFc0Rv8cpcF4usCw==
-----END CERTIFICATE-----
Generated at Thu Jul 20 11:15:39 2023 by rpki-client on console-fra.rpki-client.org