Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KSWn4O0LgBDawhL-eQIjyY2by9Q.roa
File: KSWn4O0LgBDawhL-eQIjyY2by9Q.roa (raw, json)
Hash identifier: 2AoHNyzlqRSuXhd8ILF88tRRtXf/wUZvIQ3vF1mndFc=
Subject key identifier: 29:25:A7:E0:ED:0B:80:10:DA:C2:12:FE:79:02:23:C9:8D:9B:CB:D4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018891180C8E819512219B5F6A759AC80D85
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KSWn4O0LgBDawhL-eQIjyY2by9Q.roa
Signing time: Tue 06 Jun 2023 14:24:12 +0000
ROA not before: Tue 06 Jun 2023 14:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:18:0c:8e:81:95:12:21:9b:5f:6a:75:9a:c8:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 6 14:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2925a7e0ed0b8010dac212fe790223c98d9bcbd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:3b:a1:43:66:18:2a:6b:9a:2c:f8:ae:6a:
04:b2:0b:f9:35:a6:b4:90:ad:8c:03:1a:f3:e6:59:
d9:95:02:02:32:48:8e:e9:49:18:c9:65:61:f1:eb:
f6:a1:7d:f5:6b:53:92:c6:96:b3:69:d7:a6:e3:f9:
01:50:a3:ed:f1:f8:fe:87:a5:65:c9:e6:23:a0:5f:
4a:ad:1b:44:2f:5a:89:fa:e5:c0:46:35:17:91:27:
46:b9:d8:35:57:ab:10:18:98:c0:1f:85:a2:86:a1:
7c:66:69:b4:31:81:a5:46:9b:53:35:33:22:ea:c0:
d2:d1:32:4a:e2:f8:f8:a7:b5:ef:64:25:2f:e9:fc:
b3:47:78:5f:fd:78:c5:4c:60:82:c4:ac:57:8a:00:
19:b4:58:83:8a:be:01:2a:71:e5:95:76:9d:a8:24:
e2:14:6e:59:53:93:a8:18:3b:60:06:de:b2:68:82:
42:60:e6:3e:35:cc:7d:5e:62:1f:b0:b6:ce:91:b3:
c9:2b:5a:23:dc:9a:08:7d:31:fe:5a:ce:9b:d6:2c:
68:5c:44:62:f8:ea:aa:36:d7:11:09:c1:d1:a4:ec:
f6:f9:8c:cd:40:36:44:e6:fb:a4:4e:93:1b:46:88:
be:d0:bd:7b:01:2d:c3:ad:da:24:32:14:e1:a7:0a:
8d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:25:A7:E0:ED:0B:80:10:DA:C2:12:FE:79:02:23:C9:8D:9B:CB:D4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KSWn4O0LgBDawhL-eQIjyY2by9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.46.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
5e:71:a8:d9:27:35:06:59:56:ff:f1:67:8d:47:f2:fe:46:63:
97:e2:f6:9f:56:23:14:50:bd:dc:b5:01:36:d5:82:d5:17:63:
46:84:a7:56:c9:32:db:fc:90:d7:fc:e0:58:9f:60:ac:70:90:
b3:d0:43:d8:fc:9f:2e:3a:bf:28:d2:c2:5e:54:c9:0a:37:94:
16:cd:2d:1d:13:69:af:18:04:89:29:36:ed:9f:c8:1b:29:be:
d2:24:2a:75:72:77:65:7b:22:59:1d:c0:8f:d7:ab:1a:ac:3c:
59:0a:5d:ea:44:3a:48:35:fa:84:56:f4:93:20:44:aa:92:61:
7c:94:ac:c8:67:4b:30:ae:b6:c9:67:ae:51:0c:82:b2:b6:56:
73:9f:ae:52:72:f6:c2:98:86:95:61:02:d6:48:60:cb:88:e1:
36:8c:f6:49:fd:c8:d0:a2:2b:f3:90:b4:a3:51:ef:62:55:e0:
07:65:91:a5:ae:0f:27:ff:e1:01:78:0d:2d:1c:8b:d6:99:82:
17:86:07:9f:51:1d:23:a7:b1:43:e3:1b:86:ce:ed:ce:38:34:
6f:b0:a4:30:a9:a3:6c:18:bf:73:07:ed:64:40:72:d9:eb:cd:
1f:d7:6f:a6:5a:b0:9d:eb:cf:ae:cb:a1:03:8e:be:db:7e:99:
58:8c:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org