Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA2aaTtdo4ENuHgrXJnSKc0bZmo.roa
File: CA2aaTtdo4ENuHgrXJnSKc0bZmo.roa (raw, json)
Hash identifier: gUxacQpfC7mIdtdM5/anjBZ4W+54iM6b7Rj0Tgut+Ig=
Subject key identifier: 08:0D:9A:69:3B:5D:A3:81:0D:B8:78:2B:5C:99:D2:29:CD:1B:66:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187A4CEB0658409CA0C1AA052420B6B4C48
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA2aaTtdo4ENuHgrXJnSKc0bZmo.roa
Signing time: Fri 21 Apr 2023 17:13:41 +0000
ROA not before: Fri 21 Apr 2023 17:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:ce:b0:65:84:09:ca:0c:1a:a0:52:42:0b:6b:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 21 17:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=080d9a693b5da3810db8782b5c99d229cd1b666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:9c:9c:35:cc:d1:75:d8:a4:5f:28:4a:ba:
c0:21:93:e4:68:bd:d6:25:2c:93:59:c2:6a:c2:33:
86:35:1e:9c:36:de:b7:5f:d3:5e:8a:24:82:48:6c:
b4:c5:b3:b7:f5:b5:09:9b:7c:b6:c8:a0:d1:2e:49:
16:70:ec:08:72:2c:74:49:94:ba:d0:ba:70:51:df:
8e:83:63:83:2a:aa:07:e1:2f:b9:32:66:48:a9:6d:
4e:eb:a8:2d:4a:a3:48:7d:1f:9d:87:0e:cc:8b:16:
59:af:d5:6c:a2:80:09:e5:1a:3a:90:05:cb:c3:1c:
51:b8:8a:a5:74:eb:b2:db:42:42:a3:05:2d:c2:90:
88:6a:66:01:a5:9b:43:5a:42:76:bd:46:02:58:8e:
7f:03:e8:ff:40:f2:82:75:e8:d2:85:5b:9b:c4:21:
88:58:7e:11:ef:b9:3a:5d:1b:18:a9:06:60:4b:18:
28:96:a2:73:63:de:9a:2d:7e:af:1d:0c:98:12:99:
86:5f:9f:63:8d:64:18:a6:5a:7b:fe:31:e2:ad:31:
26:99:69:d5:25:a3:af:91:5c:40:cf:98:3c:ca:d5:
b5:fd:71:26:62:45:48:a5:9e:75:71:c4:e6:5e:5b:
0e:be:8c:66:e0:19:fd:cf:45:c7:84:b6:28:d7:50:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:0D:9A:69:3B:5D:A3:81:0D:B8:78:2B:5C:99:D2:29:CD:1B:66:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CA2aaTtdo4ENuHgrXJnSKc0bZmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/24
194.58.38.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.20.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:3e:2d:8c:ce:1e:24:b3:d1:33:24:a6:42:9b:fe:cd:c5:06:
21:80:07:5c:90:0d:93:3d:fc:56:f2:89:27:5f:81:37:e9:07:
fd:67:bd:4d:47:dc:36:89:69:6e:b3:00:05:b6:47:53:38:a8:
cc:63:8a:7f:ae:3a:df:be:f0:cc:9a:7d:b8:ed:1a:89:c1:76:
db:35:7d:c0:f6:f4:62:c6:18:ac:1d:fd:4f:e2:75:80:44:b8:
91:de:c0:18:f8:89:b7:3b:87:8a:52:da:83:0f:4e:d2:b4:96:
ba:92:5b:dc:66:5e:59:b7:e9:25:92:9a:e8:02:82:9f:2d:6e:
21:43:2c:19:77:87:cc:1f:a9:ce:87:30:79:21:6a:48:b1:5d:
8e:da:c2:fc:03:91:c7:79:55:e2:05:e4:bf:fd:80:4f:7f:5f:
22:c2:7e:3b:43:f0:da:81:5f:97:dc:22:c2:8d:8d:e0:f7:e5:
aa:62:07:70:f8:36:ca:06:90:11:d9:9d:ee:07:a2:c0:82:52:
8d:4b:00:56:f8:1c:c0:a8:21:6f:36:c2:b1:a1:ca:9e:70:b7:
80:f3:53:d2:48:d2:36:3b:c3:f0:16:84:91:2a:6a:40:78:eb:
7f:91:f1:1c:c5:6f:94:35:84:10:49:2d:4e:e5:62:43:15:e2:
c6:12:c9:ff
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgISAYekzrBlhAnKDBqgUkILa0xIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDIxMTcxMzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODBkOWE2OTNiNWRhMzgxMGRiODc4MmI1Yzk5ZDIyOWNkMWI2NjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGOcnDXM0XXYpF8oSrrAIZPkaL3W
JSyTWcJqwjOGNR6cNt63X9NeiiSCSGy0xbO39bUJm3y2yKDRLkkWcOwIcix0SZS6
0LpwUd+Og2ODKqoH4S+5MmZIqW1O66gtSqNIfR+dhw7MixZZr9VsooAJ5Ro6kAXL
wxxRuIqldOuy20JCowUtwpCIamYBpZtDWkJ2vUYCWI5/A+j/QPKCdejShVubxCGI
WH4R77k6XRsYqQZgSxgolqJzY96aLX6vHQyYEpmGX59jjWQYplp7/jHirTEmmWnV
JaOvkVxAz5g8ytW1/XEmYkVIpZ51ccTmXlsOvoxm4Bn9z0XHhLYo11BG7QIDAQAB
o4IESzCCBEcwHQYDVR0OBBYEFAgNmmk7XaOBDbh4K1yZ0inNG2ZqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvQ0EyYWFUdGRvNEVOdUhnclhKblNLYzBiWm1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICXwYIKwYBBQUHAQcBAf8EggJOMIICSjCCAkYEAgABMIIC
PgMEAD5M4QMEAT5M5gMEAMB8qgMEAMB8sgMEAsB8tAMEAMFscwMEAMF8AwMEAMF8
BgMEAcF8CAMEAMF8EAMEAMF8LAMEAMF8MQMEAMF8UAMEAMF8WgMEAMF8XQMEAMF8
hQMEAMF8yQMEAMF8zAMEAMF84gMEAMI6JgMEAMI6KAMEAMI6KgMEAMI6LwMEAMI6
OwMEAMI6QwMEAMI6mjAMAwQAwlcBAwQCwlcAAwQBwlcGMAwDBAHCVwoDBADCVwwD
BADCVxADBADCVxIwDAMEAcJXFgMEAsJXGAMEAMJXJTAMAwQAwlcrAwQAwlcsAwQA
wlczAwQAwlc4AwQAwlc/AwQAwldJMAwDBADCV00DBADCV04DBADCV1MDBAHCV2gD
BAHCV3IDBADCV3oDBADCV3wDBAHCV4IDBADCV4oDBADCV5UDBADCV6ADBADCV6YD
BADCV6gwDAMEAcJXqgMEAMJXrAMEAsJXsAMEAMJXtgMEAMJXuwMEAMJXvgMEAMJX
yAMEAMJXygMEAMJXzAMEAMJX3gMEAMJX8AMEAMJX8wMEAMJX9gMEAMKHEjAMAwQA
wocXAwQAwocYAwQAwocuMAwDBADDOiMDBADDOiQDBADDOjMDBADDOjYDBADDOjgD
BADDhQADBADDhRQDBADDhRYDBADDhRoDBADDhR4DBADDhSADBADDhSMDBALDhUAD
BADDhUoDBADDhUwDBADDhU8DBADDhVQDBAHDhcIDBADUwAEDBADUwAoDBALUwPgw
DQYJKoZIhvcNAQELBQADggEBAGo+LYzOHiSz0TMkpkKb/s3FBiGAB1yQDZM9/Fby
iSdfgTfpB/1nvU1H3DaJaW6zAAW2R1M4qMxjin+uOt++8MyafbjtGonBdts1fcD2
9GLGGKwd/U/idYBEuJHewBj4ibc7h4pS2oMPTtK0lrqSW9xmXlm36SWSmugCgp8t
biFDLBl3h8wfqc6HMHkhakixXY7awvwDkcd5VeIF5L/9gE9/XyLCfjtD8NqBX5fc
IsKNjeD35apiB3D4NsoGkBHZne4HosCCUo1LAFb4HMCoIW82wrGhyp5wt4DzU9JI
0jY7w/AWhJEqakB463+R8RzFb5Q1hBBJLU7lYkMV4sYSyf8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:52 2023 by rpki-client on console-ams.rpki-client.org