Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HZqNj9D-n2mjp0BPeOQc7sLICnY.roa
File: HZqNj9D-n2mjp0BPeOQc7sLICnY.roa (raw, json)
Hash identifier: w2FPwcczVCICtGI4QEF6dqMPhmMvBWrWMISrmt169Mw=
Subject key identifier: 1D:9A:8D:8F:D0:FE:9F:69:A3:A7:40:4F:78:E4:1C:EE:C2:C8:0A:76
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01882D5B8CA0F898AE2F66E594A57FA3F445
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HZqNj9D-n2mjp0BPeOQc7sLICnY.roa
Signing time: Thu 18 May 2023 05:35:54 +0000
ROA not before: Thu 18 May 2023 05:35:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.209.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 07:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2d:5b:8c:a0:f8:98:ae:2f:66:e5:94:a5:7f:a3:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 18 05:35:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d9a8d8fd0fe9f69a3a7404f78e41ceec2c80a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:04:e6:ec:80:25:db:75:fc:69:8d:0e:57:
b1:50:bc:39:72:4e:ea:5c:fa:c7:79:dc:41:4f:13:
92:2d:19:5b:5e:4d:03:3e:50:b2:f7:b2:1f:49:4e:
b0:5d:19:c9:1c:00:65:b4:69:b2:8d:9f:ee:bf:3b:
33:a7:26:e7:1e:78:03:d3:76:af:1c:b4:8a:4c:02:
b4:ab:cc:85:a1:ca:29:4a:b4:1c:ff:8f:ee:a0:d0:
0e:8d:da:ed:0e:02:b7:97:e9:d3:99:63:0f:68:24:
30:41:c3:84:58:2f:16:d9:4d:d7:e9:c6:a5:fa:83:
ba:f1:e5:e3:31:4a:24:94:99:e6:67:e0:4e:69:67:
03:10:c2:d0:be:27:07:86:7f:be:79:4d:82:78:f0:
be:4c:c0:fc:ae:7e:ef:7a:3d:a3:e6:3b:67:51:27:
bd:8d:4e:f0:43:d4:ea:31:f0:5c:81:4b:70:a1:24:
61:4d:e0:ff:78:38:05:72:e2:78:c8:c7:4c:9e:12:
c4:39:58:93:95:a2:f7:b2:cc:06:3b:e5:7e:f7:d2:
35:74:4d:cb:58:04:81:5e:15:2c:d2:35:75:d3:08:
59:05:80:38:10:ed:7f:af:a0:25:d1:36:49:c4:63:
02:1e:ed:19:8d:a0:07:71:a9:05:44:b7:a9:1a:e2:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9A:8D:8F:D0:FE:9F:69:A3:A7:40:4F:78:E4:1C:EE:C2:C8:0A:76
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HZqNj9D-n2mjp0BPeOQc7sLICnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.36.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.67.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/23
194.87.179.0/24
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.209.0/24
194.87.221.0-194.87.222.255
194.87.227.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.53.0-195.58.54.255
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.41.0/24
195.133.74.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
42:22:a8:1c:d5:97:07:ec:2e:8d:dc:f3:e7:6b:c0:04:b7:ce:
73:cd:17:54:78:cb:7f:c0:d4:7c:82:53:a9:23:61:f3:fd:25:
36:3b:e9:d9:60:d1:ea:83:0a:29:54:43:57:22:a2:3b:19:fd:
8d:06:c9:4c:df:88:d0:35:b6:1b:99:12:4e:8c:c6:c6:ae:88:
8d:a0:19:f4:04:50:78:31:7e:c1:eb:18:d7:12:6d:0d:32:c4:
6d:06:7b:03:7c:f9:ea:49:db:c5:11:3c:f9:93:d1:69:8f:2e:
5c:95:0f:2a:42:f1:24:bd:7d:e8:0e:fb:cb:58:f7:c4:ee:56:
27:e1:3e:98:2b:e7:f7:62:c2:35:ca:66:64:0f:8a:8a:e2:e7:
25:f2:da:98:0a:b1:a0:1d:35:01:33:81:fc:9f:c8:31:64:fc:
3c:e6:30:c8:10:97:1f:58:6a:7d:5c:82:14:f6:4b:81:0c:57:
ea:ba:d4:5b:63:f7:d3:14:48:98:e3:b0:2a:3d:03:28:fc:99:
05:2f:82:db:2f:b2:39:3c:67:9e:8e:11:e7:6e:b9:ea:57:6e:
c1:71:6d:e7:92:c2:78:d5:fe:58:3e:92:63:62:b6:12:7b:0c:
fa:aa:fd:15:57:07:03:ed:00:ff:b8:3f:f8:10:2b:26:0a:6d:
57:38:b9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org