Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NAJNztLW5j1h2-FCv3HZd2OLPTk.roa
File: NAJNztLW5j1h2-FCv3HZd2OLPTk.roa (raw, json)
Hash identifier: uDjXUUSn/0rf6BIvd+wtTUl5AKYCzC+7cLzR6drCnf4=
Subject key identifier: 34:02:4D:CE:D2:D6:E6:3D:61:DB:E1:42:BF:71:D9:77:63:8B:3D:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D7842BE6DC8C99A972776306285A529FA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NAJNztLW5j1h2-FCv3HZd2OLPTk.roa
Signing time: Mon 05 Feb 2024 07:54:16 +0000
ROA not before: Mon 05 Feb 2024 07:54:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 62.76.227.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.4.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.24.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.31.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.62.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 09:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:42:be:6d:c8:c9:9a:97:27:76:30:62:85:a5:29:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 5 07:54:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34024dced2d6e63d61dbe142bf71d977638b3d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ec:45:02:f2:93:4d:2f:e5:02:01:09:5e:d4:
db:62:04:0a:95:5f:60:39:1e:15:62:62:92:9d:33:
32:5c:46:42:53:25:b5:1d:f1:65:70:8a:a7:fc:e1:
ee:c3:d0:18:fb:39:98:0d:81:a3:1d:c8:ce:b6:21:
70:21:86:ae:dd:cc:41:41:9c:fc:dc:f4:e0:d1:c5:
05:6c:36:cb:81:6a:51:49:05:02:fc:7a:ba:a3:63:
70:ef:78:87:34:0d:94:07:6f:60:13:d3:cc:07:c8:
ef:03:6a:2f:40:d0:47:cd:2e:fc:42:8d:08:bc:83:
27:a5:56:00:33:b4:a3:7d:b3:42:08:4a:12:f2:e4:
3a:ef:5a:41:c4:c1:8f:3d:1c:ae:a4:d8:27:51:c6:
f3:2f:0c:60:0a:e0:8f:d0:e6:0c:c6:d0:69:bd:ea:
c5:ee:90:72:05:af:d1:84:c2:60:ad:46:e1:61:0f:
3b:ed:9a:ff:cb:fa:e6:ed:8f:58:8d:c2:e3:0e:a6:
54:e3:ce:42:44:37:60:12:56:db:88:69:99:7a:e9:
08:9f:c5:6d:d3:a2:c2:7e:31:c7:1d:96:ef:62:c3:
d3:0c:de:6c:11:eb:03:4c:6a:d2:76:c4:2d:0e:bd:
ff:54:ab:dd:34:44:c3:ba:e7:58:6c:a9:61:eb:b0:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:02:4D:CE:D2:D6:E6:3D:61:DB:E1:42:BF:71:D9:77:63:8B:3D:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NAJNztLW5j1h2-FCv3HZd2OLPTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
62.76.233.0/24
185.72.10.0/24
192.124.180.0/22
192.124.188.0/24
192.124.190.0/24
192.124.209.0/24
193.124.4.0/24
193.124.17.0/24
193.124.36.0/24
193.124.44.0/24
193.124.47.0/24
193.124.204.0/24
194.58.41.0/24
194.58.44.0/24
194.58.66.0/24
194.58.154.0/23
194.58.223.0/24
194.87.24.0/24
194.87.26.0/23
194.87.33.0/24
194.87.44.0/24
194.87.49.0/24
194.87.51.0-194.87.52.255
194.87.54.0/23
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.90.0/24
194.87.104.0/24
194.87.115.0/24
194.87.128.0/24
194.87.130.0/24
194.87.133.0/24
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.178.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.224.0/24
194.87.226.0/24
194.87.229.0/24
194.87.231.0/24
194.87.233.0/24
194.87.250.0/24
194.135.33.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0-195.58.38.255
195.58.63.0/24
195.133.8.0/23
195.133.14.0/23
195.133.18.0/24
195.133.21.0/24
195.133.27.0/24
195.133.31.0/24
195.133.35.0/24
195.133.56.0/23
195.133.60.0/22
195.133.73.0/24
195.133.81.0/24
195.133.94.0/24
195.133.194.0/24
212.192.8.0/24
212.192.214.0/23
212.192.217.0/24
212.192.223.0/24
212.192.242.0/24
212.192.246.0/24
212.192.248.0/24
212.193.1.0/24
212.193.5.0/24
212.193.24.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:6b:80:f9:c7:65:f5:67:be:9f:72:17:f3:70:8d:28:51:cf:
97:1a:42:1e:5b:73:f2:d1:0c:ac:70:6b:1b:aa:a7:46:52:9c:
72:a6:66:c8:8e:4b:d3:ca:42:1b:c4:13:6b:59:83:b8:0c:ea:
3f:be:dc:cb:d1:a7:a2:33:77:b1:7f:5c:f1:8c:17:8e:df:09:
b1:fc:93:8f:e6:b7:7f:05:e3:75:be:58:64:18:ca:40:5f:5e:
7f:6e:32:6b:97:31:a2:f4:d8:0d:03:bf:89:4b:6e:74:fb:e2:
1d:12:4c:08:af:aa:2d:db:44:2b:c1:47:15:83:f7:ad:f7:42:
95:72:d2:73:4a:81:ca:62:1a:02:b0:ef:54:ab:76:73:b2:3c:
04:01:70:a5:5c:37:21:f1:e8:4e:f6:18:09:e3:66:36:cc:72:
9e:02:d8:05:eb:72:b8:9d:ed:99:e6:d4:7c:63:85:91:0d:8e:
8a:49:4a:4f:2a:5a:31:46:52:32:ea:9c:e5:ae:ee:d2:eb:81:
13:b2:f5:21:d3:a5:93:cf:23:a5:cd:d0:f9:af:5d:f8:9e:fc:
9b:9a:cb:ff:88:c2:e4:4b:44:19:b9:c7:76:29:db:b7:b4:e6:
9b:9e:6f:4d:72:d9:f5:b9:78:de:68:8b:50:f9:58:c1:15:af:
77:4f:c5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:14 2024 by rpki-client on console-fra.rpki-client.org