Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PYuJubCCNexCOvzGe_0v5H8VDXo.roa
File: PYuJubCCNexCOvzGe_0v5H8VDXo.roa (raw, json)
Hash identifier: 0KgxIzwMGyykjUpWQtchJ6nGvkW2QcGoro89cUTZJAI=
Subject key identifier: 3D:8B:89:B9:B0:82:35:EC:42:3A:FC:C6:7B:FD:2F:E4:7F:15:0D:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E2AA1F043B409782669BFCF200225AB2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PYuJubCCNexCOvzGe_0v5H8VDXo.roa
Signing time: Tue 24 Jan 2023 07:24:37 +0000
ROA not before: Tue 24 Jan 2023 07:24:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:aa:1f:04:3b:40:97:82:66:9b:fc:f2:00:22:5a:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 24 07:24:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d8b89b9b08235ec423afcc67bfd2fe47f150d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:54:5b:b6:47:b0:b0:1a:37:38:d2:14:45:c9:
d6:0d:fe:18:54:7c:34:71:f8:21:1d:7f:cb:2a:cc:
6a:b0:92:53:e6:a2:fc:08:66:c4:33:b2:27:3c:91:
35:af:8b:98:1b:b7:a5:cb:fd:da:89:93:83:83:a4:
12:65:15:ec:1c:8d:23:45:79:c1:aa:b1:a0:c6:fa:
3d:12:52:b3:1c:7f:76:ad:df:46:1e:cb:52:9d:6e:
fa:a4:d5:c5:d8:a0:23:5f:e9:20:61:f9:72:74:5a:
35:40:a4:50:63:31:63:9e:c4:23:0a:b9:42:11:8b:
4a:82:14:8b:9e:c7:6d:ec:1d:47:8b:1e:4d:80:92:
2a:66:5f:95:6b:24:60:d1:42:dc:77:fe:16:17:98:
ad:0e:87:3e:ae:aa:76:f8:2a:9c:dc:7a:c6:23:4d:
87:de:8e:85:cc:89:b0:7d:6c:16:cb:04:2c:0d:5a:
0d:10:af:ec:84:5c:34:9c:f3:4e:78:80:31:a0:87:
15:6b:62:3d:68:07:ae:15:e5:5c:10:c1:f6:37:8d:
b2:a1:82:22:d9:c4:f4:db:4d:5b:09:ab:4b:c5:84:
58:7a:c1:59:d5:1f:68:61:cf:ee:d3:b0:65:4d:44:
cf:f9:0b:67:f6:23:97:3a:e9:a6:e3:51:90:fd:1e:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8B:89:B9:B0:82:35:EC:42:3A:FC:C6:7B:FD:2F:E4:7F:15:0D:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PYuJubCCNexCOvzGe_0v5H8VDXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.11.0/24
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0/24
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0-195.133.195.255
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.11.0-212.193.12.255
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c5:a5:ce:37:d9:ae:8e:8f:5e:d7:53:50:ef:33:37:d3:ca:
63:77:13:40:0a:4b:ed:98:50:f5:67:d9:b8:2e:07:d1:0e:43:
89:ae:ca:92:1c:27:60:82:ec:31:ff:91:41:3d:1f:75:d4:78:
0e:9f:97:f2:89:22:9f:3e:77:46:3f:5c:a1:02:ec:30:55:f3:
b0:96:a1:e8:1a:90:eb:d0:be:58:a7:2f:aa:a9:a4:9d:00:63:
a0:4a:0f:d6:e9:f6:79:36:27:04:e6:96:98:76:eb:74:93:c9:
a4:f6:cf:7a:a5:34:33:0e:8d:65:e9:2b:ec:00:8e:ee:33:9c:
27:ba:02:31:ec:5e:1d:9c:ca:e4:6a:7d:32:b7:cc:93:9e:fb:
18:f3:f8:47:49:1c:85:3b:71:69:e8:3d:86:25:0d:01:c9:0a:
3f:1e:cd:aa:05:ef:45:74:00:9a:d3:40:98:22:b3:63:b7:e0:
80:a0:57:c3:3c:25:56:9f:12:31:be:5b:33:5e:2d:7d:df:cd:
42:5e:ac:71:82:21:10:87:d7:97:77:01:7c:7f:3a:35:93:14:
cf:6c:9c:df:26:ca:17:4f:be:79:c7:51:4e:c5:3a:48:a4:86:
db:7e:9a:d4:65:ff:43:06:9e:da:57:d5:f3:21:94:48:b4:b8:
9d:93:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org