Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M6eYTDVY0ZTcAKRyL7Ks1qBJRPI.roa
File: M6eYTDVY0ZTcAKRyL7Ks1qBJRPI.roa (raw, json)
Hash identifier: KJ5Kywm/LeyPty6Ftu44uZtrIfveCH1QLdA5ooDdjRI=
Subject key identifier: 33:A7:98:4C:35:58:D1:94:DC:00:A4:72:2F:B2:AC:D6:A0:49:44:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186930A163BC713B2C295860E59F26B060A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M6eYTDVY0ZTcAKRyL7Ks1qBJRPI.roa
Signing time: Mon 27 Feb 2023 13:22:37 +0000
ROA not before: Mon 27 Feb 2023 13:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:0a:16:3b:c7:13:b2:c2:95:86:0e:59:f2:6b:06:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 13:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33a7984c3558d194dc00a4722fb2acd6a04944f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:41:f5:74:d1:14:9a:38:94:3a:a9:86:66:
6d:53:a4:2c:3c:c4:10:7b:7f:fa:c7:a4:ea:e7:4b:
d8:94:1f:98:0f:27:d6:54:3f:55:e3:9b:30:79:27:
3e:7f:7b:93:c2:55:63:3f:8c:54:d2:64:02:59:f1:
90:34:8d:d8:f7:c1:82:fc:e2:f5:e2:2b:c0:bc:8f:
3d:31:4b:36:a3:cc:3e:48:0d:44:e4:bc:6a:c0:4b:
47:86:ad:bc:28:1b:63:9e:26:fb:79:f6:f8:be:4a:
58:b5:fb:07:e2:f5:ec:87:1c:93:f3:1d:c6:94:84:
97:58:86:01:8f:c8:0d:08:37:26:dd:13:2d:e5:f2:
e4:ba:41:c3:a2:72:cb:67:2e:b0:82:42:4c:02:24:
9e:0f:8a:38:88:3f:42:98:88:ad:ab:28:e0:90:30:
bf:72:62:c3:f7:65:f7:bd:22:fc:59:8b:cb:7f:01:
fc:62:06:94:96:f7:a4:3a:ef:32:4c:13:5a:6e:cd:
7c:14:ee:87:48:20:26:00:fc:3f:d3:06:e8:6b:8e:
b8:49:f0:d2:8c:d9:50:f4:32:14:1c:ae:34:91:63:
c6:62:b9:fc:bd:70:8f:3c:c0:24:2e:e7:35:2d:c2:
82:9f:56:ab:a2:dd:cf:c1:ed:31:18:e2:fc:8a:1e:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A7:98:4C:35:58:D1:94:DC:00:A4:72:2F:B2:AC:D6:A0:49:44:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M6eYTDVY0ZTcAKRyL7Ks1qBJRPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/23
194.87.42.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c8:ed:b4:e8:1c:81:fa:c1:71:a0:ac:c7:47:7f:26:0d:79:
eb:4a:f2:f7:f4:51:1b:50:12:ab:e7:8a:a4:24:ab:8d:8c:65:
80:0e:e9:64:82:f1:00:2b:2a:59:fa:df:ee:a6:d3:92:3e:68:
12:ef:c6:fb:aa:91:ec:5e:f6:69:69:70:81:b9:7c:5d:e3:ee:
40:b9:20:eb:55:e0:65:ff:64:a2:b1:1e:42:b2:4e:d1:91:6f:
c7:75:54:63:fd:62:3b:6b:86:11:59:56:c4:f8:41:c4:6d:17:
20:84:f7:1a:04:bf:ce:72:7c:db:92:4c:a0:06:9f:83:87:db:
c1:f4:e3:e6:5e:48:ac:46:d7:65:5e:d0:7b:08:9c:ea:10:c0:
1e:27:2c:b4:e8:12:b3:d5:0f:45:25:6f:5b:95:51:56:6d:dc:
a0:06:e0:36:15:e4:7a:f2:57:a4:27:d2:6f:07:4e:19:b2:1f:
03:6d:79:6e:1f:b5:19:72:bd:fa:f4:25:a4:84:60:b6:ca:9b:
b0:9b:30:62:cd:65:fb:df:fd:bf:f3:bd:8c:c3:ab:51:29:b0:
43:c9:c5:58:51:f4:82:02:81:49:5c:0a:08:34:a2:a5:d4:49:
a3:05:a4:b5:f2:aa:4a:b0:13:e3:30:a0:b4:a3:fe:ab:c6:ab:
2b:a7:2f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org