Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HA2DjA-c_nxCUwZiGPO9V6QGoGI.roa
File: HA2DjA-c_nxCUwZiGPO9V6QGoGI.roa (raw, json)
Hash identifier: WR0cVwcw/7ywfJKOL7FlzDbz9cDxHjX8gMofAFiQ22s=
Subject key identifier: 1C:0D:83:8C:0F:9C:FE:7C:42:53:06:62:18:F3:BD:57:A4:06:A0:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C6E75367BED69E25FD07D27C5521B71A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HA2DjA-c_nxCUwZiGPO9V6QGoGI.roa
Signing time: Fri 28 Apr 2023 08:07:41 +0000
ROA not before: Fri 28 Apr 2023 08:07:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:e7:53:67:be:d6:9e:25:fd:07:d2:7c:55:21:b7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 28 08:07:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c0d838c0f9cfe7c4253066218f3bd57a406a062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:0e:a0:f1:6e:7c:78:b7:eb:1c:96:ac:ac:
96:cf:7f:a5:1d:e7:45:ef:70:06:3f:5b:52:33:be:
9c:1a:e0:9a:5d:06:23:fe:2c:bf:80:0f:7a:9d:44:
e6:ae:cc:ae:96:d9:7c:81:97:1e:d9:a6:dc:6d:f6:
46:ad:7e:ea:c9:98:5c:16:4e:99:8b:73:66:f1:d8:
91:c3:ae:7a:df:5d:da:a8:bc:82:1d:d3:0b:9b:8a:
14:76:1c:e3:f8:97:63:6e:a5:af:0d:63:eb:2d:f9:
a8:db:11:81:1b:dc:18:99:78:2d:52:a9:bc:dd:f0:
a9:05:c8:8c:d1:49:83:33:7f:2a:2e:87:e1:11:44:
4b:ef:f6:4c:9d:84:4b:2f:af:1d:d6:07:7a:30:58:
f7:f5:ad:ad:5c:04:9a:fc:bc:59:1f:9c:0d:87:3c:
ef:bf:b0:f1:75:80:18:6b:5e:37:31:89:af:51:e4:
90:8d:1a:bc:b7:92:b3:0f:5b:5e:1f:99:44:0d:e3:
93:65:5d:07:2a:ce:69:43:a0:f4:21:51:b8:81:9b:
6f:46:a7:c2:af:a4:a8:86:30:95:94:5c:20:0e:0c:
ec:bd:a6:73:85:6f:e3:89:de:4e:88:8f:6d:73:8c:
cc:07:04:b2:75:a1:b3:ee:2a:38:82:eb:14:4f:a7:
15:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:83:8C:0F:9C:FE:7C:42:53:06:62:18:F3:BD:57:A4:06:A0:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HA2DjA-c_nxCUwZiGPO9V6QGoGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
1b:04:d7:c3:a3:8b:d1:c0:29:04:54:2c:f7:04:3e:9c:3d:b7:
f4:31:97:f1:67:be:54:13:6e:65:46:c5:27:92:ca:28:d8:ee:
f3:1d:dc:ef:16:4c:df:f5:0c:10:49:02:be:fe:53:67:6b:54:
de:4a:08:17:e6:aa:11:59:00:89:b9:d1:9c:c2:bf:ec:6d:a6:
09:c8:8e:a1:93:9e:66:98:91:44:3d:2e:5d:a5:14:7c:81:6d:
18:b2:d4:20:91:05:0b:c2:ea:85:70:bf:78:32:e1:6d:6b:ee:
ae:65:d2:41:eb:38:90:be:56:23:f7:7f:57:0c:fd:97:cb:87:
ab:e0:f7:ca:b5:df:0a:63:f7:2d:9a:a5:59:f5:be:d7:da:ca:
66:1f:36:0a:86:30:08:91:b3:71:1a:95:b2:3e:13:87:9a:bc:
0b:4f:ac:d0:94:c5:81:16:b6:87:b2:3a:79:ac:9f:70:99:c1:
eb:94:f2:1b:6a:8c:94:aa:22:f0:af:3e:0b:01:b8:64:52:6e:
5a:d4:19:ce:5f:53:aa:65:52:83:2a:67:74:e9:1c:ca:f7:10:
0f:aa:2e:b2:9f:96:d0:ed:df:a1:b0:ca:05:c6:be:59:54:8e:
86:50:d2:9b:f7:b4:35:3d:58:77:f2:45:7d:2f:bb:c6:48:22:
2c:89:32:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-ams.rpki-client.org