Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9bLZ2ZmlHAKJkUQZ19ZOFnLckAg.roa
File: 9bLZ2ZmlHAKJkUQZ19ZOFnLckAg.roa (raw, json)
Hash identifier: FL/0gadULsIFJf1yhhRxjiKJuhTyr9GKvggsb9oEaF4=
Subject key identifier: F5:B2:D9:D9:99:A5:1C:02:89:91:44:19:D7:D6:4E:16:72:DC:90:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887BEDF427CC964AADE5F7BE3CA52FD605
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9bLZ2ZmlHAKJkUQZ19ZOFnLckAg.roa
Signing time: Fri 02 Jun 2023 11:46:12 +0000
ROA not before: Fri 02 Jun 2023 11:46:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.209.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 10:52:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:ed:f4:27:cc:96:4a:ad:e5:f7:be:3c:a5:2f:d6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 2 11:46:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5b2d9d999a51c0289914419d7d64e1672dc9008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:cd:5e:30:85:55:a6:be:12:18:48:10:6b:
e3:cc:ce:65:f5:95:c8:4d:38:44:0a:9d:f6:11:f7:
8f:66:3d:a3:47:85:d0:86:46:14:19:c9:70:06:2a:
d4:8f:a0:e0:d3:aa:86:51:05:34:c5:44:6e:08:32:
c6:0e:36:55:96:88:a9:96:13:fe:b9:d2:63:be:1f:
10:fe:71:aa:65:96:c3:2d:75:09:33:fd:58:35:8c:
89:91:f2:da:23:fe:91:dc:df:ec:a3:04:dd:02:45:
73:e2:0e:75:92:3d:3d:84:3e:8d:40:10:e2:96:01:
00:18:13:1a:9e:15:da:ed:73:3f:6a:5b:b1:4d:9e:
ee:4a:af:b5:cb:c4:e6:22:6d:23:d1:d8:d7:ad:08:
44:03:e8:53:85:9e:99:ee:d4:d0:3a:d5:6c:e0:09:
4a:77:dd:a8:d3:c9:91:f1:30:cd:d1:23:5e:ca:be:
35:ed:73:22:9b:d4:c7:c6:15:8d:23:c5:98:10:eb:
57:06:ef:88:c1:1a:98:ae:3f:b3:f6:50:4a:d9:4d:
3d:92:5c:6b:cc:87:0a:56:c9:4d:e6:6d:c9:89:7e:
cd:11:11:c9:a7:59:1b:01:9f:04:63:4b:e9:e3:67:
57:57:17:3c:7f:61:ee:eb:cf:b3:b8:6f:a5:99:fe:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B2:D9:D9:99:A5:1C:02:89:91:44:19:D7:D6:4E:16:72:DC:90:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9bLZ2ZmlHAKJkUQZ19ZOFnLckAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.209.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
99:b1:22:fe:5a:ae:72:e1:c9:26:52:3e:78:af:50:6d:f6:29:
15:f2:d0:c1:6b:d3:f5:50:a9:13:44:6f:ef:d8:37:23:4b:26:
1d:04:6a:e5:9d:de:45:1b:44:76:b4:64:05:0d:5f:2f:76:40:
45:a4:f4:bc:01:e1:9f:ff:0e:82:0b:26:b9:b1:20:f5:1b:d5:
86:c6:58:43:d8:ed:e9:96:89:75:f2:64:18:2e:ac:ba:33:12:
3f:0d:79:53:c7:49:75:71:3b:62:2b:a8:e3:24:66:4c:ea:de:
ca:73:ee:18:25:b0:70:f6:6c:6f:cb:d7:c8:cb:fe:89:f6:cc:
34:25:db:19:88:90:fb:56:3a:d9:dc:38:e5:b0:ff:72:35:da:
e9:0c:f7:6e:cf:fd:3e:11:b4:e2:c9:8e:b4:7d:a8:b2:df:95:
a0:2a:f0:65:b3:5e:2b:e9:c6:0f:aa:29:05:f0:f8:51:f9:60:
d8:6f:0f:69:bd:11:b6:67:8a:c7:4b:c6:b2:be:e6:16:df:a4:
42:de:b1:12:06:73:d0:f3:64:07:c4:fa:a9:dd:68:fb:ab:f4:
4a:80:9a:b0:50:99:02:8a:2a:b1:0d:eb:70:c0:e4:b8:0e:cf:
97:4a:37:5e:e0:20:f4:f8:c2:ea:db:a4:7e:a8:80:7d:03:4a:
ec:69:cf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:07 2024 by rpki-client on console-fra.rpki-client.org