Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N-Tqo12_FrQbHlaSnzTZ4IESWfU.roa
File: N-Tqo12_FrQbHlaSnzTZ4IESWfU.roa (raw, json)
Hash identifier: Yxvk7qQ/viRz3EHk42bol5UP2I/tIn6jK8Ju8d6ZPXM=
Subject key identifier: 37:E4:EA:A3:5D:BF:16:B4:1B:1E:56:92:9F:34:D9:E0:81:12:59:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0196A555DFF07CCE1A9F9C2FE7F8B583F72A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N-Tqo12_FrQbHlaSnzTZ4IESWfU.roa
Signing time: Tue 06 May 2025 11:23:10 +0000
ROA not before: Tue 06 May 2025 11:23:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jun 2025 10:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:55:df:f0:7c:ce:1a:9f:9c:2f:e7:f8:b5:83:f7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 6 11:23:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37e4eaa35dbf16b41b1e56929f34d9e0811259f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:3a:7b:3c:5f:10:79:d5:86:0e:51:00:59:
06:bf:23:93:5d:84:1d:50:ab:d2:55:f1:76:5c:4d:
86:01:8c:cf:88:23:1f:6b:ec:46:20:84:b7:12:34:
d0:6e:03:da:63:fe:92:03:23:1e:af:75:bf:05:b9:
df:94:4c:1f:f7:5d:c5:eb:35:b9:9a:d4:40:f4:39:
ce:2f:df:67:eb:c3:e0:ed:41:4c:e6:34:64:6d:34:
1c:42:71:1f:a8:28:42:16:8d:77:28:f0:88:c2:96:
5c:87:dd:f6:2d:5d:2e:7c:04:0f:56:0a:67:03:a7:
27:6e:af:ce:97:c1:b2:0e:41:ad:6c:1d:be:62:7d:
ad:ba:6b:4a:fd:72:70:20:ca:06:7a:8b:48:77:31:
eb:53:ba:01:97:85:4c:70:cb:10:4f:db:2e:3f:e5:
13:a9:0d:ad:ec:3b:ef:b8:77:92:0e:d0:49:81:fb:
4e:4c:2d:88:9a:fa:8a:f4:77:6e:26:53:78:11:5f:
49:9a:1e:0d:a4:c3:d9:4e:9b:57:f4:48:bc:39:23:
09:fa:28:42:56:5e:f8:49:4f:81:87:52:3c:41:e9:
74:af:a9:44:f3:ba:84:f1:99:d0:58:22:39:d6:c1:
bb:3c:71:6d:07:a8:34:56:29:a7:98:b3:89:2c:1e:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E4:EA:A3:5D:BF:16:B4:1B:1E:56:92:9F:34:D9:E0:81:12:59:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N-Tqo12_FrQbHlaSnzTZ4IESWfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
62.76.235.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.91.0/24
193.124.94.0/24
193.124.133.0/24
193.124.226.0/24
194.58.43.0/24
194.58.58.0/24
194.58.60.0/24
194.58.67.0/24
194.87.6.0/23
194.87.16.0/24
194.87.34.0/24
194.87.42.0/24
194.87.63.0/24
194.87.78.0/24
194.87.116.0/23
194.87.120.0/23
194.87.160.0/24
194.87.163.0/24
194.87.176.0/23
194.87.180.0-194.87.182.255
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.0.0/24
195.133.12.0/24
195.133.19.0/24
195.133.58.0/24
195.133.80.0/24
195.133.82.0/24
195.133.195.0/24
212.192.210.0/23
212.193.10.0/24
212.193.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3e:38:dd:ac:95:a5:3b:a0:30:c3:3e:65:3a:16:50:fd:01:
90:60:fe:c7:da:5f:20:03:fd:60:2b:70:4f:d5:77:d5:9a:d8:
42:4a:59:f2:62:22:78:b3:7c:4f:4a:a2:c7:f0:ab:73:c2:a2:
7f:d5:ce:32:6b:18:1b:4c:f0:ab:14:b5:da:93:13:d8:59:d6:
24:d8:2e:2c:3d:d8:7d:22:2b:92:de:74:b2:49:56:c3:f1:c1:
67:32:99:5a:a8:b6:aa:8e:8a:ea:ee:4b:23:98:55:0b:ff:20:
23:dd:f8:ab:02:b3:a6:f0:9c:b2:e1:d3:29:2d:6e:20:81:cb:
e9:69:2f:6d:78:bb:2b:fb:d6:1d:00:a2:d7:c9:ff:aa:d6:b9:
8a:f4:1c:46:8f:69:26:d1:34:14:d1:dd:e6:c7:4a:63:8a:8b:
a1:9c:14:86:23:6b:96:35:2c:ea:53:19:f7:5c:7d:11:ac:23:
03:8b:b9:49:c1:e2:5d:ec:a4:7a:5e:b9:e5:4a:8c:bb:a4:03:
d4:1b:8a:c9:eb:3c:dd:81:98:d9:77:59:d4:72:fc:21:01:fe:
98:07:38:f7:9b:6d:07:5d:22:e0:a6:26:de:bb:82:e8:e8:5d:
e9:ee:f8:0d:3d:e8:10:b1:9d:6f:58:e1:40:d2:35:c6:1b:dc:
b0:7d:74:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:37:16 2025 by rpki-client