Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RMNq-wWSRh6MLiSgsyQ07K1oyLA.roa
File: RMNq-wWSRh6MLiSgsyQ07K1oyLA.roa (raw, json)
Hash identifier: KGtSDCMxsp1JZnjZ3WcCVRWUHpML6Xl0uQDDNscp8Kk=
Subject key identifier: 44:C3:6A:FB:05:92:46:1E:8C:2E:24:A0:B3:24:34:EC:AD:68:C8:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185B964FB4A30AF0AD2D575645B32BA886E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RMNq-wWSRh6MLiSgsyQ07K1oyLA.roa
Signing time: Mon 16 Jan 2023 07:04:40 +0000
ROA not before: Mon 16 Jan 2023 07:04:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 09:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:64:fb:4a:30:af:0a:d2:d5:75:64:5b:32:ba:88:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 16 07:04:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44c36afb0592461e8c2e24a0b32434ecad68c8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:03:f2:ab:47:4e:0b:37:2b:59:a0:0a:e1:d7:
c6:79:11:81:51:c4:1a:e6:e0:fb:46:df:9a:2f:82:
ea:07:d6:6f:02:18:2d:25:63:28:55:92:98:53:c7:
9b:93:1d:4f:c0:d9:e9:96:a7:9d:02:3b:27:0e:4d:
f4:ab:c4:93:b9:b4:c7:71:e8:49:c2:df:10:ee:41:
51:79:17:50:a3:11:d9:16:7c:15:5b:a0:49:f5:b5:
8e:54:56:bd:69:36:22:a9:dd:b1:7c:68:77:47:b1:
fc:16:79:5f:94:dd:b1:b6:d3:bd:a7:06:45:84:cf:
12:c0:6b:6d:ab:42:29:07:83:e2:5a:94:48:1e:70:
f1:db:65:78:4d:97:e4:fd:eb:48:8a:ad:82:65:14:
5c:89:ab:48:67:65:8b:ef:36:4f:44:24:ae:e7:6b:
c7:b2:b6:ff:bc:bb:a0:5b:8b:86:71:bc:87:27:09:
8b:ea:95:3d:f7:ff:ad:39:94:02:47:f1:a3:70:cb:
34:01:3e:63:3d:ef:3a:f5:b9:8d:48:5f:a2:b3:54:
8d:0a:28:1a:84:a0:83:70:b5:fa:5f:c1:56:72:b1:
ef:97:ec:40:e0:0d:01:f5:a8:56:ce:54:e5:64:aa:
5a:77:27:de:82:f5:e9:bc:d1:90:00:75:35:b0:c6:
ad:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C3:6A:FB:05:92:46:1E:8C:2E:24:A0:B3:24:34:EC:AD:68:C8:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RMNq-wWSRh6MLiSgsyQ07K1oyLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.58.155.0/24
194.87.6.0/23
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.86.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.30.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
05:6e:53:4c:84:6c:78:8d:d5:e0:00:3f:73:f6:9a:b3:2c:20:
c5:28:b1:81:50:73:08:08:b4:48:04:35:ad:ec:be:89:a2:5b:
69:f2:29:ed:34:59:f0:48:1e:6a:8c:28:73:5d:6c:02:5b:88:
15:01:84:2c:f7:4c:50:27:b2:bd:e3:d7:8b:e7:f6:d8:21:ab:
b8:9a:ff:d5:bb:42:2f:38:3a:bb:59:b4:d8:c7:4e:f1:83:0e:
b8:32:75:88:bd:05:dc:e8:56:82:3d:3b:82:50:e7:08:6c:24:
d3:db:a2:fb:5e:fe:42:bf:72:e2:fa:c6:08:54:b0:52:8c:59:
d4:6e:b6:d7:00:39:bf:d7:2a:77:14:17:88:82:46:b8:0d:44:
f5:39:a8:0c:21:bf:07:be:ac:c2:7d:2f:79:a4:24:89:cb:22:
35:09:8f:26:58:3c:f7:65:00:b3:80:85:5b:1f:d3:b5:76:f9:
aa:a3:73:ee:ee:21:1a:e7:44:e6:02:d4:ea:85:76:8c:81:55:
96:be:e2:f5:90:ec:bb:77:3e:a9:c3:80:a4:9d:d5:44:e7:79:
51:a0:25:ef:1e:9e:4f:98:62:94:2c:5e:bd:7c:51:7d:fb:03:
ef:03:d7:8d:4b:41:25:55:dd:6b:2a:fa:0e:97:93:3c:b3:65:
3f:0f:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org