Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7as4ZuHVRVEmW1aTaFOmQr5Z8Q.roa
File: M7as4ZuHVRVEmW1aTaFOmQr5Z8Q.roa (raw, json)
Hash identifier: GNkAErOZpz4tUcRNNnjv09pCOmXP0CIYaZlzUqM+mgA=
Subject key identifier: 33:B6:AC:E1:9B:87:55:15:44:99:6D:5A:4D:A1:4E:99:0A:F9:67:C4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01926BC9DB3A4083EDFDE9DA45967E431742
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7as4ZuHVRVEmW1aTaFOmQr5Z8Q.roa
Signing time: Tue 08 Oct 2024 11:00:43 +0000
ROA not before: Tue 08 Oct 2024 11:00:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 17:45:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:c9:db:3a:40:83:ed:fd:e9:da:45:96:7e:43:17:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 8 11:00:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33b6ace19b87551544996d5a4da14e990af967c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:55:44:ce:92:c6:a9:30:6f:c3:b9:e4:92:
4b:a6:56:3d:7d:48:4d:f2:a0:0d:8d:6f:bf:ed:58:
e9:50:47:8b:55:c3:46:1a:b0:e7:7c:95:27:95:31:
e6:a4:6c:5a:60:b3:a2:94:7c:de:12:ec:55:c2:03:
21:9f:09:68:f2:46:da:5d:b9:2c:3b:3b:89:68:77:
1c:48:13:65:53:c6:18:cd:1b:d0:60:14:d0:49:75:
d7:e1:91:8f:e6:8d:61:33:ee:5c:71:0e:c7:24:d7:
59:76:19:0a:b1:cc:0f:ad:5b:aa:74:ec:c0:2b:e5:
0c:8d:7b:7f:34:65:64:56:46:02:34:dc:2a:3c:a5:
19:52:7c:bb:be:f3:64:4b:8d:52:de:33:be:54:0b:
89:8a:83:3e:46:1b:a6:59:7e:43:24:10:ce:1c:a3:
71:aa:e6:22:fc:6d:59:a3:6d:c5:f5:c1:01:7b:c5:
3d:ef:fe:d0:b0:40:eb:f9:e8:a6:1f:08:34:fb:6f:
64:55:26:b0:2b:f6:94:dc:fe:01:e3:b6:2e:96:d4:
fa:05:ae:eb:42:e5:0e:b5:a7:f2:35:43:37:17:8e:
99:67:aa:20:2e:ea:62:54:21:9c:f5:c6:3f:86:2a:
07:42:0e:be:e5:3d:2c:40:41:51:af:9e:20:b9:40:
e4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:AC:E1:9B:87:55:15:44:99:6D:5A:4D:A1:4E:99:0A:F9:67:C4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7as4ZuHVRVEmW1aTaFOmQr5Z8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
193.124.2.0/23
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.49.0/24
193.124.91.0/24
193.124.94.0/24
193.124.133.0/24
193.124.201.0/24
193.124.226.0/23
194.58.38.0/24
194.58.43.0/24
194.58.46.0/24
194.58.58.0-194.58.60.255
194.58.67.0/24
194.87.6.0/23
194.87.16.0/24
194.87.23.0/24
194.87.34.0/24
194.87.42.0/24
194.87.53.0/24
194.87.63.0/24
194.87.78.0/24
194.87.105.0/24
194.87.116.0/23
194.87.120.0/23
194.87.160.0/24
194.87.163.0/24
194.87.176.0/23
194.87.180.0-194.87.182.255
194.87.205.0/24
194.87.240.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.22.0/24
195.133.58.0/23
195.133.80.0/24
195.133.82.0/24
195.133.195.0/24
212.192.0.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
212.192.241.0/24
212.192.247.0/24
212.193.10.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
81:c0:39:97:58:f4:01:cd:53:d0:a9:fb:e9:db:68:a6:fe:5e:
6f:7d:b7:41:1b:2c:92:0c:5e:67:76:93:48:86:5b:1c:29:af:
44:b7:34:a2:3a:7b:18:d5:9d:b0:c4:34:40:e2:b1:0f:7f:c6:
4c:d9:a1:77:fe:fd:a1:a1:52:46:94:a8:f3:8b:f6:2c:aa:8d:
8a:c8:25:53:d2:37:f3:a3:de:20:ae:60:00:4a:c8:5e:95:a2:
67:0b:95:f9:e9:71:63:e7:cc:ab:d9:ee:f8:31:02:ab:74:e8:
65:a9:28:3b:89:00:01:7d:4f:64:c0:26:f8:a3:ed:4e:f1:3d:
10:9a:d1:0d:48:a6:f5:f5:57:b6:d4:9b:da:c4:e2:19:a3:ea:
98:e6:44:71:d8:ab:d0:c2:55:c0:ed:a3:95:e6:71:67:8b:7a:
24:53:e3:d0:de:65:99:cd:85:ea:45:fc:87:a7:49:f6:03:83:
eb:3e:34:13:7a:da:1c:ef:2a:61:c2:f6:ad:6a:95:46:a1:dd:
fc:78:66:66:24:ea:42:aa:54:ad:f2:c5:87:6d:84:94:ad:ca:
79:b6:cf:87:00:87:50:20:22:6b:bd:f4:c4:04:f3:80:eb:35:
fb:06:5b:71:8e:18:9f:8e:65:7a:c6:8c:52:0f:1f:7d:4b:fc:
4d:f2:f7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 21:00:42 2024 by rpki-client on console-ams.rpki-client.org