Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QHy2iaoP4lPWEEXd_zxcEG6Ekdw.roa
File: QHy2iaoP4lPWEEXd_zxcEG6Ekdw.roa (raw, json)
Hash identifier: JQhml20s5iP7szmM3JTLY2JoxFCGJXZRp4HKCe0Ujig=
Subject key identifier: 40:7C:B6:89:AA:0F:E2:53:D6:10:45:DD:FF:3C:5C:10:6E:84:91:DC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185F1DC5BCCBB6B2371B325CFFAC9300D85
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QHy2iaoP4lPWEEXd_zxcEG6Ekdw.roa
Signing time: Fri 27 Jan 2023 06:13:48 +0000
ROA not before: Fri 27 Jan 2023 06:13:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.8.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Jan 2023 08:35:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f1:dc:5b:cc:bb:6b:23:71:b3:25:cf:fa:c9:30:0d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 27 06:13:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=407cb689aa0fe253d61045ddff3c5c106e8491dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c5:b2:20:24:85:3a:bb:50:25:d8:48:00:1b:
15:9f:07:11:34:08:17:52:73:f0:de:dc:64:d9:14:
00:41:b5:2b:fa:7f:7b:d2:93:03:4e:93:32:1d:5a:
c4:39:3f:87:ec:b5:96:ac:ba:78:7d:81:ca:67:cd:
02:9d:a4:31:54:5b:13:37:dc:c8:95:fb:15:79:42:
f7:55:d4:e4:ec:5a:70:d9:7c:d4:30:b7:55:d9:40:
b6:a8:2a:70:29:c1:77:74:78:75:85:fb:52:b1:f7:
f3:aa:63:07:60:a8:ce:3d:a0:c1:a9:c8:0e:4d:49:
ba:4e:74:20:b3:82:43:8d:9a:cd:5e:b9:fa:56:95:
10:7c:8b:a6:26:4d:ee:96:9e:e2:ed:54:e3:b0:e2:
b0:be:c3:ad:b2:c2:4d:46:0f:a4:cd:d8:1b:0d:62:
42:e9:2c:01:fe:97:4c:bc:6b:e6:04:71:f0:32:30:
56:99:8a:40:9b:f1:7c:f8:c5:5b:7a:2d:cf:54:f3:
01:90:e7:fe:e6:f0:3d:b1:1b:9d:55:8c:c6:c7:e9:
b1:23:1b:aa:2f:cc:f9:a0:ce:a3:bb:99:61:42:62:
a1:28:cd:be:41:87:0a:4e:6c:a8:e4:e8:84:4b:05:
83:8f:5f:fb:e8:c2:4a:53:91:af:6d:69:59:14:84:
34:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7C:B6:89:AA:0F:E2:53:D6:10:45:DD:FF:3C:5C:10:6E:84:91:DC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QHy2iaoP4lPWEEXd_zxcEG6Ekdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.8.0/24
193.124.80.0/24
193.124.133.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.165.0/24
194.87.171.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0-195.133.195.255
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
77:41:bd:e7:49:7a:e4:1d:93:2f:ca:a5:19:c6:4f:dd:30:9a:
d3:18:44:10:5b:a6:17:1e:5a:a3:48:df:6e:23:c7:15:64:59:
c1:7a:6e:f5:67:3c:89:86:c2:b6:48:a4:02:23:e1:06:02:42:
2f:c4:c9:8a:e1:60:1f:70:bd:0c:01:27:a9:06:a7:7b:f6:01:
a8:a5:b9:fd:d1:21:83:70:0e:bb:29:3a:6d:e7:fd:d6:8f:d6:
0f:06:20:bb:35:d6:b1:bd:4b:42:8f:3e:56:38:c4:2f:cf:ed:
89:e2:cf:c7:c5:83:c1:1d:2e:26:82:54:93:65:4f:80:7d:e3:
d0:90:bd:fe:74:4d:ee:09:9b:d8:36:74:64:f5:6f:31:a8:f5:
97:a6:52:ad:6e:20:03:6d:87:70:33:fa:67:d6:a7:88:de:fa:
29:2d:ff:f3:44:0e:4c:6c:26:36:b8:da:26:65:84:89:b0:38:
93:50:f7:79:42:52:5e:f0:d8:33:f4:e5:ee:0c:df:fd:04:62:
08:eb:25:83:d6:54:9e:26:43:62:06:eb:13:88:48:22:cb:69:
a6:2b:c1:8b:b0:01:8f:45:2c:3b:cc:5a:71:c8:05:ca:ee:a3:
dc:39:18:e0:92:77:79:38:c5:3f:46:89:6e:e6:9d:42:3c:d5:
84:13:42:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org