Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KzXwqBbfuV9_7VZ6erJtH1O8fKs.roa
File: KzXwqBbfuV9_7VZ6erJtH1O8fKs.roa (raw, json)
Hash identifier: 5KoZNPreOKDaaGfZw11QlTEru0vV+byWvEiqARdOCwE=
Subject key identifier: 2B:35:F0:A8:16:DF:B9:5F:7F:ED:56:7A:7A:B2:6D:1F:53:BC:7C:AB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C3AA10A3C8D42AA5DA8F76E57DE7B424
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KzXwqBbfuV9_7VZ6erJtH1O8fKs.roa
Signing time: Wed 18 Jan 2023 06:56:20 +0000
ROA not before: Wed 18 Jan 2023 06:56:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 09:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:aa:10:a3:c8:d4:2a:a5:da:8f:76:e5:7d:e7:b4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 06:56:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b35f0a816dfb95f7fed567a7ab26d1f53bc7cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fc:06:6b:a8:5a:53:14:cd:48:5c:4c:e6:b9:
3b:7e:4b:f0:01:36:74:af:66:38:cf:c3:27:15:46:
4a:80:6f:b5:dc:e5:63:30:3b:9a:62:cc:70:8b:d3:
9d:80:4f:f3:18:54:98:a8:17:e9:cb:b8:ad:30:b6:
0c:05:40:23:7e:23:34:d2:94:47:f8:b2:b6:e0:6c:
af:22:c2:d2:bf:7f:94:bc:6e:6c:fb:7e:26:46:4b:
89:f8:95:a7:08:ea:b1:aa:b4:71:5f:c5:ad:ed:fe:
e2:89:7b:7c:d3:3d:d6:28:81:f1:65:49:23:40:77:
7f:60:0d:20:0b:8e:c5:5a:63:61:5f:a3:cd:8f:06:
ee:07:02:69:ef:ae:08:da:df:f7:82:3a:d3:eb:77:
c6:3b:9f:7d:4d:c5:c6:37:61:1e:4c:bf:f5:3d:f2:
aa:5f:8d:38:3f:8d:34:f0:3c:6c:d2:94:6e:61:01:
2f:66:50:d7:a4:f1:ee:3a:4a:6b:a3:75:98:9d:a8:
d1:27:cd:c6:42:f2:f4:0a:94:40:e2:9e:5a:92:63:
86:ab:fe:e4:ba:81:b8:06:d6:a0:52:66:fa:cc:63:
ef:25:12:f6:72:79:6d:07:da:10:a5:fd:3c:c6:23:
da:72:71:64:4b:81:63:30:35:bc:a1:02:d8:c5:33:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:F0:A8:16:DF:B9:5F:7F:ED:56:7A:7A:B2:6D:1F:53:BC:7C:AB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KzXwqBbfuV9_7VZ6erJtH1O8fKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.6.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
01:54:6b:93:e5:64:2d:9e:2f:4b:f8:ce:89:cb:60:6a:38:bb:
9d:a6:d7:72:8a:35:5e:8a:7c:c2:bf:ff:b9:4a:0d:07:e5:1f:
e9:ac:f9:03:30:05:ba:a1:78:c9:9c:bc:cc:16:a6:ee:6f:18:
02:00:c7:e3:fd:f1:fd:18:52:1b:73:e2:74:63:1c:33:c5:18:
cc:a1:25:42:be:f9:50:55:0e:c0:d6:e6:1d:53:7e:3b:10:68:
f1:79:7f:13:a9:d9:ba:5a:5b:f7:cc:57:a5:05:26:3c:28:20:
b8:a3:07:89:68:da:6d:e2:70:f0:1d:90:3b:d4:05:1e:ca:be:
ad:fe:7d:4a:ff:a5:88:97:cc:37:ac:4f:63:e0:3a:94:b5:1b:
6c:d8:15:f9:86:fb:9e:8c:fa:b2:15:ba:5d:5e:70:3a:8d:83:
36:4e:ec:b7:53:b5:69:97:b0:b5:a3:20:62:cb:f7:27:b4:58:
8e:6d:be:5e:92:07:20:4d:a9:99:6a:d3:8b:93:f8:a4:6c:ba:
04:3f:60:3d:ba:c3:88:be:56:29:8c:1c:76:25:75:b2:46:7a:
4d:52:01:73:99:09:48:65:aa:e7:47:cc:3b:e3:9d:a8:1a:78:
6c:2d:0e:cd:1f:18:c0:3e:9b:05:18:88:c6:7c:d5:ee:94:15:
76:c5:5a:94
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISAYXDqhCjyNQqpdqPduV957QkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTE4MDY1NjIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjM1ZjBhODE2ZGZiOTVmN2ZlZDU2N2E3YWIyNmQxZjUzYmM3Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvwGa6haUxTNSFxM5rk7fkvwATZ0
r2Y4z8MnFUZKgG+13OVjMDuaYsxwi9OdgE/zGFSYqBfpy7itMLYMBUAjfiM00pRH
+LK24GyvIsLSv3+UvG5s+34mRkuJ+JWnCOqxqrRxX8Wt7f7iiXt80z3WKIHxZUkj
QHd/YA0gC47FWmNhX6PNjwbuBwJp764I2t/3gjrT63fGO599TcXGN2EeTL/1PfKq
X404P4008Dxs0pRuYQEvZlDXpPHuOkpro3WYnajRJ83GQvL0CpRA4p5akmOGq/7k
uoG4BtagUmb6zGPvJRL2cnltB9oQpf08xiPacnFkS4FjMDW8oQLYxTPOowIDAQAB
o4IDazCCA2cwHQYDVR0OBBYEFCs18KgW37lff+1WenqybR9TvHyrMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvS3pYd3FCYmZ1VjlfN1ZaNmVySnRIMU84ZktzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfwYIKwYBBQUHAQcBAf8EggFuMIIBajCCAWYEAgABMIIB
XgMEAD5M5wMEAMB8rAMEAMB8sgMEAsB8tAMEAMB8vgMEAMF8AwMEAMF8BgMEAMF8
CAMEAMF8hQMEAcF8ygMEAMF8zwMEAcI6JgMEAMI6KjAMAwQAwjotAwQEwjogAwQA
wjo7AwQAwlcDAwQBwlcGAwQAwlcQAwQAwlcWAwQCwlcYAwQAwlc4AwQAwldMAwQB
wldSAwQAwldoMAwDBAHCV3IDBADCV3QDBADCV3YDBADCV3sDBADCV34DBADCV4gD
BAHCV4oDBADCV5UDBADCV6MDBADCV6UwDAMEAMJXqwMEAMJXrAMEAMJXsAMEAMJX
vgMEAcJXxgMEAMJXygMEAMJXzAMEAcJX0AMEAcJX3gMEAMJX6QMEAMM6MjAMAwQC
wzo0AwQGwzoAAwQAw4UMAwQAw4U3AwQAw4VeAwQBw4XCAwQB1MAAAwQB1MDQAwQA
1MEAAwQA1MEGAwQA1MEMMA0GCSqGSIb3DQEBCwUAA4IBAQABVGuT5WQtni9L+M6J
y2BqOLudptdyijVeinzCv/+5Sg0H5R/prPkDMAW6oXjJnLzMFqbubxgCAMfj/fH9
GFIbc+J0YxwzxRjMoSVCvvlQVQ7A1uYdU347EGjxeX8Tqdm6Wlv3zFelBSY8KCC4
oweJaNpt4nDwHZA71AUeyr6t/n1K/6WIl8w3rE9j4DqUtRts2BX5hvuejPqyFbpd
XnA6jYM2Tuy3U7Vpl7C1oyBiy/cntFiObb5ekgcgTamZatOLk/ikbLoEP2A9usOI
vlYpjBx2JXWyRnpNUgFzmQlIZarnR8w7452oGnhsLQ7NHxjAPpsFGIjGfNXulBV2
xVqU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:13 2024 by rpki-client on console-fra.rpki-client.org