Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8vqS-KOr_HvUy6QCxqbVHmISr0M.roa
File: 8vqS-KOr_HvUy6QCxqbVHmISr0M.roa (raw, json)
Hash identifier: BIUPgoJvDWNZPrvr+CSKA19mHQBvjabzELd0JmDp8Ds=
Subject key identifier: F2:FA:92:F8:A3:AB:FC:7B:D4:CB:A4:02:C6:A6:D5:1E:62:12:AF:43
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019206B578219FB774208E0CC18A587BD9B6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8vqS-KOr_HvUy6QCxqbVHmISr0M.roa
Signing time: Wed 18 Sep 2024 19:56:48 +0000
ROA not before: Wed 18 Sep 2024 19:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 62.76.233.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.35.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.36.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/24 maxlen: 24
212.193.27.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Sep 2024 11:58:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:06:b5:78:21:9f:b7:74:20:8e:0c:c1:8a:58:7b:d9:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 19:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2fa92f8a3abfc7bd4cba402c6a6d51e6212af43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:98:84:59:82:2d:b5:30:00:0b:07:d7:5c:0e:
3a:3f:47:7b:71:33:46:ca:e7:1c:8a:61:8b:a5:2b:
5c:cb:e7:f6:5f:cb:fb:33:c8:78:1d:e6:40:aa:63:
54:88:05:7d:48:83:13:dd:9d:cf:df:c5:f0:df:5e:
f6:ff:6d:6b:3e:5b:24:cc:58:b0:cb:a5:18:ff:02:
32:ab:e8:35:10:e8:9f:74:85:a7:50:bf:b3:da:a2:
33:74:74:93:1f:ee:5a:48:ee:e4:0a:1e:64:e6:47:
cb:ed:ce:82:0e:17:62:2e:c1:97:a8:0e:21:6b:03:
34:55:f1:27:c0:2a:6c:28:91:45:ef:1b:9f:c6:7b:
f0:c5:81:cc:b5:2c:b3:d9:4e:31:42:35:41:c6:bb:
8d:f5:3c:29:dc:a3:e3:13:7b:13:a4:f6:be:60:52:
83:a5:15:51:99:2e:a0:ad:54:a1:7d:b6:fd:08:38:
67:51:d7:24:39:17:74:70:f0:a4:69:0f:5a:99:39:
b2:33:34:fe:dc:4b:99:62:60:3c:a1:a5:8e:66:37:
48:8b:a4:54:29:0d:30:1a:e6:a0:7f:cc:bc:58:4d:
8b:93:59:0e:58:5a:f7:a7:dd:33:1b:39:49:0d:42:
2a:90:40:ed:0d:7a:fb:79:8f:a1:a6:6d:df:8d:b9:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FA:92:F8:A3:AB:FC:7B:D4:CB:A4:02:C6:A6:D5:1E:62:12:AF:43
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8vqS-KOr_HvUy6QCxqbVHmISr0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.108.115.0/24
193.124.35.0/24
193.124.47.0/24
194.58.57.0/24
194.87.26.0/23
194.87.43.0-194.87.44.255
194.87.49.0/24
194.87.56.0/24
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.86.0/24
194.87.104.0/24
194.87.115.0/24
194.87.118.0/24
194.87.130.0/23
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0-194.87.202.255
194.87.208.0/24
194.87.215.0/24
194.87.220.0-194.87.222.255
194.87.226.0/24
194.87.243.0/24
194.87.250.0/24
194.135.36.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.58.61.0/24
195.133.14.0/23
195.133.20.0/23
195.133.24.0/23
195.133.27.0/24
195.133.30.0/24
195.133.50.0/24
195.133.63.0/24
195.133.73.0/24
195.133.76.0/24
195.133.81.0/24
195.133.194.0/24
212.192.217.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f2:7a:21:de:e1:4b:60:8e:4d:c5:76:56:a3:57:9a:d8:dc:
9c:4d:70:26:63:e9:e6:43:80:69:16:28:31:d4:d7:51:8d:42:
17:b3:26:ed:9b:76:06:a0:c9:cf:81:f3:7e:76:61:ce:9e:f9:
96:4e:da:0d:95:aa:51:cd:98:1c:8d:1c:28:53:e0:50:e0:d4:
45:d1:f6:b1:12:b5:8d:5f:73:09:f2:0d:40:66:3f:a2:28:8d:
6c:e1:6b:e4:8e:a7:ca:cf:74:66:0f:ef:e9:9e:ca:c1:85:c9:
74:8e:2e:95:e1:b5:a3:d3:3f:82:24:e6:bf:8a:07:52:c6:1b:
6b:e3:08:77:1a:57:f5:d5:e5:88:c5:5d:a8:09:f6:4a:03:12:
64:50:a5:24:45:7e:3a:8e:d3:bb:a4:17:66:51:c4:5d:62:49:
fb:82:be:33:76:21:11:5b:ee:46:dc:b1:b3:33:42:b1:fd:2c:
58:a6:51:24:26:3f:e3:3d:1a:b4:de:e2:0d:08:a5:7a:0f:f2:
4a:8f:f1:05:c0:2a:0b:8d:a0:61:22:d2:0c:3d:ef:82:eb:4c:
7e:bc:73:4d:cf:ce:0c:76:5d:e4:35:20:cf:d4:9b:58:19:9f:
05:2e:08:94:0a:45:ab:d9:b9:3f:93:3c:c1:5e:55:3c:67:48:
b9:e0:0b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 14:02:15 2024 by rpki-client on console-fra.rpki-client.org