Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IVLOZKIl2mWeKY4LXfjHHY_OvB8.roa
File: IVLOZKIl2mWeKY4LXfjHHY_OvB8.roa (raw, json)
Hash identifier: GVnHnJE7vwnh5grxCUopNntkCNKNjd7P+WAhuWB2faY=
Subject key identifier: 21:52:CE:64:A2:25:DA:65:9E:29:8E:0B:5D:F8:C7:1D:8F:CE:BC:1F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186EDEB5186F583DD1323F2E3F3CBE510A9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IVLOZKIl2mWeKY4LXfjHHY_OvB8.roa
Signing time: Fri 17 Mar 2023 04:54:27 +0000
ROA not before: Fri 17 Mar 2023 04:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Mar 2023 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ed:eb:51:86:f5:83:dd:13:23:f2:e3:f3:cb:e5:10:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 17 04:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2152ce64a225da659e298e0b5df8c71d8fcebc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:a9:88:6d:46:c0:4c:65:2e:8b:d2:5f:69:
61:bb:a5:c6:e4:70:4c:f9:b2:8f:3f:ff:70:07:1e:
b4:14:19:6c:0d:02:1d:19:07:9f:fe:ed:0c:49:5a:
4f:1b:41:a4:c9:89:2c:d3:92:b1:77:f6:8d:88:0e:
5f:39:69:87:36:fa:33:4e:94:f9:85:73:b7:09:87:
08:46:ee:0d:85:73:ef:a0:4d:17:05:cd:14:a2:b1:
c5:46:36:2d:a7:61:69:92:ee:27:98:b7:e2:7b:d2:
6c:a7:61:fa:d1:86:94:58:1f:36:7e:75:50:19:bc:
7b:a0:26:5b:5b:e0:7e:62:ba:8e:37:0a:b7:ea:4f:
1e:0f:a5:69:d9:48:1e:95:d7:4c:d8:72:3c:ab:8f:
36:3f:af:6a:4f:d7:c2:bd:d4:ec:7e:37:db:0a:47:
2b:bf:99:cc:a2:fc:83:71:09:14:08:18:2e:12:c3:
aa:d9:34:8f:fb:4a:d6:1e:ab:da:ca:fc:9d:b6:56:
a5:b3:d8:10:22:20:00:f9:2a:1d:b8:95:e1:e2:96:
c1:3c:9a:56:64:b7:83:26:25:56:7b:b6:e7:2d:7f:
25:73:c3:ca:f5:b1:79:ee:44:5f:75:81:e9:ca:ee:
15:df:a5:b8:30:42:64:46:9b:e0:9b:04:70:3d:7a:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:52:CE:64:A2:25:DA:65:9E:29:8E:0B:5D:F8:C7:1D:8F:CE:BC:1F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IVLOZKIl2mWeKY4LXfjHHY_OvB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0-194.58.40.255
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.36.0/23
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.76.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e0:e1:44:51:82:94:02:ac:f6:4d:74:3e:aa:d7:19:93:29:
b8:6c:d7:64:b2:0d:ac:96:21:d3:7d:91:ce:7f:e4:81:be:f0:
01:24:c4:b3:7d:50:d6:9d:e0:3a:08:75:67:8c:56:54:e1:d4:
2f:ff:f9:be:64:1b:54:8b:0d:47:ff:fe:94:c2:4a:96:03:fa:
57:92:62:7d:65:9b:64:be:a9:78:2c:b8:67:11:12:59:91:53:
b6:4a:df:ce:a7:81:fd:af:c2:aa:dc:ce:d3:e9:9d:69:65:0b:
85:4f:63:a5:64:21:c8:06:43:ad:eb:be:da:37:94:ed:f9:cf:
a8:7c:30:03:70:b6:e0:c7:cb:c5:97:7e:90:08:bd:48:04:0c:
4a:7d:45:bf:2b:51:49:43:d8:46:a7:ef:3e:07:6f:2d:1d:9b:
15:1f:29:1e:56:c3:d6:b8:32:87:4e:4d:3d:43:bd:ab:49:63:
b6:80:ab:54:32:a1:28:f9:a6:fb:a8:0a:ca:a4:40:d3:9f:10:
7f:0e:4e:17:44:cb:49:c4:f8:47:c2:23:a1:28:c5:af:a7:ff:
01:e7:fb:15:36:b3:22:3f:47:34:9e:e7:44:31:b6:18:91:dd:
f4:2e:30:40:d8:99:67:0b:f3:04:b0:1d:ea:54:3e:40:09:1f:
41:0f:5c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:12 2024 by rpki-client on console-fra.rpki-client.org