Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KZyrlsudFdxG6JM3IFwjPvDhR-w.roa
File: KZyrlsudFdxG6JM3IFwjPvDhR-w.roa (raw, json)
Hash identifier: cPd/nBB3a/PpKM7MFOJrfKXRUs3D4X+uHV2P1DJtWWE=
Subject key identifier: 29:9C:AB:96:CB:9D:15:DC:46:E8:93:37:20:5C:23:3E:F0:E1:47:EC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B8292549623A93893AE3D2CCC2368488
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KZyrlsudFdxG6JM3IFwjPvDhR-w.roa
Signing time: Wed 14 Jun 2023 04:28:04 +0000
ROA not before: Wed 14 Jun 2023 04:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:29:25:49:62:3a:93:89:3a:e3:d2:cc:c2:36:84:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 04:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=299cab96cb9d15dc46e89337205c233ef0e147ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:de:58:46:24:7e:61:d5:53:c8:fc:95:71:
3b:1d:ed:54:8e:d3:ae:32:86:47:72:ca:25:f9:68:
8f:4d:22:0c:91:99:1e:0f:85:0f:dd:21:22:db:bf:
f7:41:20:0f:4c:88:f5:16:f6:b6:17:98:55:ab:26:
37:d0:ae:78:b8:d7:02:91:cd:39:c5:fa:13:d8:c2:
92:ef:4c:7d:93:09:47:8c:ef:d4:45:9b:d7:08:58:
f4:de:00:93:69:57:c5:0e:56:42:e1:9e:dd:18:72:
72:66:cf:e0:46:87:d3:5c:09:52:1f:bb:78:67:15:
39:60:37:93:70:09:c5:fc:ae:8e:f1:a3:62:e5:bc:
15:ca:32:1f:85:28:fa:3d:f2:fc:f0:6e:95:07:4d:
48:40:f1:d4:cc:74:ba:53:6a:3e:cb:63:c8:8e:61:
68:23:6f:d3:8c:c9:e7:1e:55:5c:98:5f:52:cc:e9:
14:40:67:4e:20:49:24:f7:03:c9:40:1c:0a:02:bf:
78:8f:7d:3f:f7:bc:e1:ad:c3:b6:ed:80:e3:0e:d4:
0b:0f:ae:07:f2:b6:38:39:54:8a:fa:c1:82:34:05:
ac:0a:75:20:01:7b:7a:53:f4:db:24:b8:0f:20:62:
7d:ca:1b:c0:d7:f2:d7:9c:e1:db:29:f0:df:7d:bd:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:AB:96:CB:9D:15:DC:46:E8:93:37:20:5C:23:3E:F0:E1:47:EC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KZyrlsudFdxG6JM3IFwjPvDhR-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b7:17:da:4b:1d:a2:52:7d:f2:c0:81:f5:70:f6:a2:78:7e:
7f:3f:95:ed:b6:5e:46:d8:2c:34:bf:15:67:1f:05:5c:cc:1b:
2e:08:43:6c:43:bd:27:3f:74:87:aa:2b:6e:11:8a:87:2c:31:
43:66:a7:6f:dc:2f:4c:8b:ba:73:a3:10:a9:69:c4:95:a7:e4:
4a:d6:59:ae:d9:01:86:b1:9b:34:b5:81:1e:c3:a4:e2:b5:34:
57:a9:4c:7a:5a:47:95:b6:c7:55:86:53:7c:5c:a4:74:33:16:
c7:f8:3e:7f:e7:a7:e6:a1:39:72:f0:37:ce:06:a5:83:d5:f3:
60:c3:6f:58:56:3c:3d:ec:d4:92:81:57:08:a3:80:9e:d8:01:
3e:e7:15:3a:e2:cb:98:fa:29:ab:1e:3b:b3:5a:3e:8b:0e:da:
0e:f6:a5:a2:55:ca:a2:ed:ef:e4:09:5f:82:7e:e8:fa:0e:e1:
e3:d2:f5:98:f4:9c:5a:4e:db:6e:dc:76:b7:ae:e4:ed:95:e3:
d9:59:20:db:f2:6e:25:25:f2:ef:e9:9a:9f:91:5a:c3:df:ef:
71:53:f3:09:b2:1e:91:2e:36:bd:01:d1:89:e8:4f:16:d1:8b:
de:83:1c:46:12:b7:80:9d:6d:04:72:74:d1:d3:ef:69:db:76:
82:40:8f:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org