Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DOuqZpqZ8jTmuXIu_w0IoeEZ3FE.roa
File: DOuqZpqZ8jTmuXIu_w0IoeEZ3FE.roa (raw, json)
Hash identifier: 0EZAnUd5uX9/QsSZutBrKuLBrynEn/0MrSeI3XMm+9k=
Subject key identifier: 0C:EB:AA:66:9A:99:F2:34:E6:B9:72:2E:FF:0D:08:A1:E1:19:DC:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185736E887113BECE035A6CF8DF303221BF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DOuqZpqZ8jTmuXIu_w0IoeEZ3FE.roa
Signing time: Mon 02 Jan 2023 17:01:41 +0000
ROA not before: Mon 02 Jan 2023 17:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 06:59:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:6e:88:71:13:be:ce:03:5a:6c:f8:df:30:32:21:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 17:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cebaa669a99f234e6b9722eff0d08a1e119dc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:86:21:8c:5f:f8:d6:b9:5c:65:6f:00:a6:
c7:1a:d3:ad:a6:51:59:c9:e8:ef:20:15:50:6e:1b:
9f:df:4f:b3:c4:62:29:5e:f4:ba:e1:e3:c2:93:c9:
7d:c2:c4:ef:e2:b9:6c:68:7e:e5:c1:9d:44:a6:0f:
39:e5:c4:25:9c:35:27:73:23:af:11:45:b1:87:35:
3f:73:9c:7c:f5:33:a4:d5:90:53:cf:d2:8a:1a:22:
a2:52:23:ce:fe:f2:71:74:e5:53:08:6e:0e:36:07:
2a:95:5a:c3:e6:40:d9:11:5c:ee:8c:84:99:d2:79:
f1:79:ef:4e:4b:0e:e1:35:a2:b9:00:d2:eb:43:1d:
a2:de:08:f0:eb:b8:fc:71:74:41:a2:25:f7:b6:b1:
7d:c7:98:37:48:49:a8:9f:88:12:37:fd:0a:fc:cc:
b3:76:61:dc:13:03:13:53:83:1b:80:be:e6:b5:ec:
af:ea:6b:a0:aa:02:60:72:15:0a:62:af:c6:8b:2e:
4c:ab:89:8c:b5:7e:d4:2b:98:4b:d2:98:5b:be:80:
f9:34:fe:e2:af:ac:89:24:1f:75:c4:65:fa:ea:7a:
8b:b4:c1:21:41:84:b7:0e:7b:7d:4e:89:41:e9:f1:
fd:c8:c7:ec:e4:46:75:da:66:21:ed:71:36:83:25:
ff:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:AA:66:9A:99:F2:34:E6:B9:72:2E:FF:0D:08:A1:E1:19:DC:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/DOuqZpqZ8jTmuXIu_w0IoeEZ3FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0-193.124.4.255
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.125.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.58.0/23
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.116.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0-194.87.200.255
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
50:80:7d:df:67:31:9c:73:76:f1:32:05:40:e2:74:c7:18:7f:
86:e5:4f:11:68:7e:d5:6e:ab:96:e7:a2:fa:6c:b2:9e:bf:05:
d5:7d:ea:5e:cf:14:7c:5b:53:e6:6e:5b:65:01:1b:86:27:85:
2d:7e:0a:a7:35:b7:4c:57:13:68:38:ba:3b:f1:19:0b:bd:ab:
eb:3d:a6:62:85:6d:72:2e:e5:db:c0:7d:34:0c:57:2e:7d:1b:
a5:64:03:9a:0f:bb:e2:45:c9:f4:0a:62:df:22:ea:4b:2e:ee:
2b:9a:2c:17:65:6d:d5:a1:0f:26:25:64:7e:9a:cd:60:62:cb:
e0:f5:79:bc:35:b6:06:2b:d8:c3:bb:03:75:7f:fe:2d:ef:c7:
26:f2:29:e2:b6:ce:9e:99:6f:66:0e:9b:3a:c9:72:18:08:6a:
79:3d:0e:73:98:87:66:7d:87:9b:a1:a0:41:8e:6c:0d:c5:01:
a6:4c:e1:4c:08:5d:0e:18:30:b3:98:88:fd:0f:cb:43:88:eb:
9d:22:8b:13:f7:a8:3a:19:28:45:0d:75:23:ec:57:92:ce:83:
ca:b2:9f:20:22:c7:86:54:30:4b:25:c4:0e:e2:9e:50:9a:6a:
76:85:5b:c0:9f:0a:de:57:cb:45:a4:40:9d:b0:65:73:8d:f6:
3b:9c:99:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:10 2024 by rpki-client on console-fra.rpki-client.org