Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzcWRpoe9RMnCuuY85ShStj2V8M.roa
File: JzcWRpoe9RMnCuuY85ShStj2V8M.roa (raw, json)
Hash identifier: oONSNWnjnTzxHeqCAJ+vTQ288P6QJR+UBg8wZ8O+QwA=
Subject key identifier: 27:37:16:46:9A:1E:F5:13:27:0A:EB:98:F3:94:A1:4A:D8:F6:57:C3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A9E8CD78CD379E4D23E53899A078D5A7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzcWRpoe9RMnCuuY85ShStj2V8M.roa
Signing time: Fri 13 Jan 2023 06:54:44 +0000
ROA not before: Fri 13 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:e8:cd:78:cd:37:9e:4d:23:e5:38:99:a0:78:d5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 13 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=273716469a1ef513270aeb98f394a14ad8f657c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b0:29:72:81:37:73:53:6e:0b:d8:4c:84:ff:
bc:04:f5:18:4c:40:dd:13:c0:d6:d5:7b:11:0f:44:
4b:52:5d:bc:74:42:fd:18:76:a4:70:58:f0:04:49:
32:0c:98:7f:5b:38:df:36:23:1b:36:08:d4:dc:dc:
41:cc:ba:5f:19:75:c1:0c:19:cc:ba:e0:74:d9:b2:
74:7a:2a:c0:42:ad:39:cc:20:5f:69:f1:26:b4:e2:
fe:0a:52:54:02:64:97:65:95:ff:5f:61:62:5c:da:
80:e6:a8:c7:12:fa:bd:d6:44:5d:e7:a2:85:ab:c8:
b3:8b:9e:07:2a:a4:71:e7:bf:77:d8:79:e3:c5:f3:
b6:f9:f0:98:73:30:e4:1e:d5:f9:a5:63:1a:e7:91:
5c:82:1c:5a:86:cd:cc:d2:50:20:79:ca:22:be:6a:
3e:9b:48:0f:af:d1:1d:42:fd:a8:d2:83:73:ec:27:
a5:df:8f:5e:0a:62:c4:54:aa:18:16:7d:82:9d:d0:
1f:74:0a:68:cc:b8:7e:f6:bf:17:8b:6d:26:96:38:
2c:0a:4c:3c:02:eb:e7:5d:d1:62:a6:11:c2:5c:4a:
08:4b:ef:ce:01:99:06:da:00:d4:51:72:ed:15:dd:
93:42:7d:e6:17:2d:69:15:ae:b6:38:00:7c:89:32:
a8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:37:16:46:9A:1E:F5:13:27:0A:EB:98:F3:94:A1:4A:D8:F6:57:C3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/JzcWRpoe9RMnCuuY85ShStj2V8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.58.155.0/24
194.87.6.0/23
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0/24
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.86.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.30.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:f8:66:e1:fb:76:38:55:2e:49:3f:b8:60:b2:eb:12:86:
1c:c2:a3:b5:08:90:8e:f9:1c:90:20:9f:57:2b:8a:44:08:35:
25:03:02:24:c3:a7:ac:14:47:9e:9b:f3:92:fa:d5:a0:0e:bb:
ed:46:19:5d:7f:8a:7c:5d:ea:1b:4b:d8:8b:2c:e8:52:b0:e7:
a6:a7:c4:96:b4:3f:5a:88:45:a6:6e:64:6a:f8:77:66:f3:ac:
1f:40:c5:8f:39:ea:37:5b:07:ec:75:46:af:54:50:35:2b:a7:
06:7c:eb:ec:ca:1e:4c:fc:32:4e:a7:27:f5:5e:a2:fd:15:2a:
00:48:d0:2f:ea:a8:ca:ef:d7:5a:60:c9:7b:31:22:0d:39:d7:
ab:3c:04:de:d3:c5:76:e7:8b:53:81:8d:6c:0d:85:d6:db:00:
b2:54:29:b9:9a:37:0b:df:45:4a:7d:e8:f4:71:d0:f1:11:07:
cc:58:08:4e:24:13:4d:d8:2b:2e:f2:5c:0b:97:22:fb:c8:77:
27:ef:05:79:da:c8:ff:de:e6:25:aa:4a:80:25:c3:dd:1b:77:
05:5e:b4:47:71:49:c3:88:a6:95:9c:84:0a:02:00:7e:46:1a:
97:ea:72:7f:2b:6f:d5:f1:be:96:4e:9d:39:b5:f2:ef:0f:ba:
8f:a2:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org