Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QVAHOpdWha0t-sT2dYLZMeXpLCk.roa
File: QVAHOpdWha0t-sT2dYLZMeXpLCk.roa (raw, json)
Hash identifier: AuiWI75YKxyidEapvty02Gf+O1j2dhx4jZ3/DjZm1VY=
Subject key identifier: 41:50:07:3A:97:56:85:AD:2D:FA:C4:F6:75:82:D9:31:E5:E9:2C:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E49DEF033E86CC51199C39FAA0CC7961
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QVAHOpdWha0t-sT2dYLZMeXpLCk.roa
Signing time: Tue 24 Jan 2023 16:30:33 +0000
ROA not before: Tue 24 Jan 2023 16:30:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Jan 2023 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:9d:ef:03:3e:86:cc:51:19:9c:39:fa:a0:cc:79:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 24 16:30:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4150073a975685ad2dfac4f67582d931e5e92c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:1c:5f:15:9a:b4:0f:4c:34:1f:19:c7:b3:
ba:ff:e1:99:ca:78:fa:29:d3:99:50:5b:5e:e8:1d:
e7:e3:8c:ef:67:17:34:a6:d0:f1:8d:3f:d0:d8:c1:
d8:08:52:b0:fb:a0:2d:b7:39:19:f4:a3:2a:ff:2c:
a4:9d:e7:d2:61:0a:89:94:14:ed:d9:d7:d8:cc:d7:
b7:11:48:f6:57:64:2c:39:cb:b5:70:a2:38:3d:38:
c3:52:07:52:fb:5d:5f:e0:a8:56:1f:fa:ab:a5:e8:
0c:c0:1b:de:08:fa:5a:91:b1:d4:b9:77:a7:79:bb:
ec:9e:fe:e0:22:c6:df:00:d0:b8:b0:44:53:67:30:
be:8c:cc:9b:32:44:4e:eb:b1:7c:be:44:40:7a:02:
31:56:61:71:d4:c0:08:1c:dc:ee:4a:17:ea:35:ae:
a2:5f:e0:73:df:04:01:55:84:30:3b:07:39:9f:35:
54:10:17:23:06:e9:62:3c:80:31:19:59:d8:9b:c9:
00:71:5d:be:69:0b:b3:09:32:59:7f:85:d4:37:ae:
3b:be:59:e4:42:c9:bb:96:c2:e6:a7:96:8c:26:2b:
9a:1c:60:e6:98:8c:29:73:54:79:93:bd:3f:5c:1c:
e7:ad:64:05:30:9d:95:ef:2e:2d:8d:6d:54:b3:ef:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:50:07:3A:97:56:85:AD:2D:FA:C4:F6:75:82:D9:31:E5:E9:2C:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QVAHOpdWha0t-sT2dYLZMeXpLCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.11.0/24
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.165.0/24
194.87.171.0/24
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0-195.133.195.255
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.11.0-212.193.12.255
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
21:38:13:97:0b:2f:a8:24:25:20:73:25:c1:e0:74:a0:4c:ad:
25:e1:c3:a7:af:65:8a:d2:5e:a5:98:40:23:68:14:e4:76:ed:
30:fb:59:d9:12:05:b8:ee:d6:bf:d3:14:9f:12:24:ce:4c:f1:
fa:fa:b0:1f:cd:0e:16:09:6e:1f:29:97:8f:76:cc:7e:ea:f1:
45:0f:dd:af:fc:ae:64:fa:f9:34:53:c5:ba:83:10:36:2a:2f:
8a:a1:99:55:19:08:b3:ca:f6:02:5e:9d:45:e0:ba:3c:93:22:
69:1c:d4:4f:bb:ca:91:92:1b:f9:74:b5:e5:50:60:02:9a:1f:
ae:99:e0:02:73:69:6c:7d:4f:3f:5c:b5:61:65:ce:60:95:30:
0e:69:13:3e:b8:6f:14:05:66:08:32:fe:72:86:99:4b:4e:69:
6c:29:70:84:02:f7:a0:3a:8f:93:8c:2e:b3:0e:d1:12:42:41:
37:12:47:30:85:41:c9:cd:63:ca:c5:84:c2:dc:7b:21:fe:96:
77:08:74:4d:2a:3b:0d:44:15:53:6c:0c:4c:4f:96:24:aa:71:
e6:6d:0c:d2:af:cb:f3:f9:00:63:02:70:b8:54:7e:89:7a:b3:
58:d4:81:a2:53:b5:d2:24:0e:f8:20:89:a6:a4:70:9a:25:77:
5a:e3:eb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org