Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SHClDm9CEV2lhtaT7eks9nI42F4.roa
File: SHClDm9CEV2lhtaT7eks9nI42F4.roa (raw, json)
Hash identifier: 9in6pinmAgNSD3bYNvWcn7gTWKo8N862yNC9/eDVe8I=
Subject key identifier: 48:70:A5:0E:6F:42:11:5D:A5:86:D6:93:ED:E9:2C:F6:72:38:D8:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187AE10FE3697FD8C85228EF04C01400120
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SHClDm9CEV2lhtaT7eks9nI42F4.roa
Signing time: Sun 23 Apr 2023 12:22:41 +0000
ROA not before: Sun 23 Apr 2023 12:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Apr 2023 04:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ae:10:fe:36:97:fd:8c:85:22:8e:f0:4c:01:40:01:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 23 12:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4870a50e6f42115da586d693ede92cf67238d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:be:10:fa:8c:63:69:d0:f1:e0:33:80:c4:fa:
85:c5:90:0e:37:23:28:d1:b2:55:55:15:c8:0d:37:
23:6c:ae:cd:c8:2c:dd:46:df:1e:e9:f5:50:aa:85:
88:e6:02:70:d0:c5:a5:7e:94:a3:74:a6:49:4f:85:
15:55:ad:8b:14:df:f7:60:83:d1:80:51:38:aa:c9:
07:97:f0:6b:d7:fd:33:dd:ca:f9:f0:c7:36:07:22:
98:40:9f:a4:09:ec:6d:ae:2d:9c:a2:08:68:0b:11:
25:c9:59:84:0c:56:b6:6a:c2:cf:43:06:37:08:48:
a6:e5:b7:f1:dc:c7:d4:39:d9:28:d6:ff:a7:cd:d1:
1c:c8:4f:c5:f1:ff:d9:7f:10:8f:84:ee:0c:2c:cf:
06:20:d7:69:db:fc:13:37:3a:02:65:38:09:be:2f:
24:df:f6:25:84:e7:1d:fc:b3:8b:ff:56:9d:5b:f9:
12:1b:ca:ac:87:32:77:2e:9f:01:31:47:fd:ba:4f:
36:57:8d:d1:f9:ad:2b:55:b8:22:92:e8:71:bc:40:
e4:c5:51:fd:21:5b:df:64:2f:90:af:f3:fb:17:f5:
f5:3d:e7:d7:e3:49:00:0a:59:41:b9:50:66:7f:43:
a9:75:a8:b3:dc:5c:bc:69:84:8e:d6:a1:f4:3b:7a:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:70:A5:0E:6F:42:11:5D:A5:86:D6:93:ED:E9:2C:F6:72:38:D8:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SHClDm9CEV2lhtaT7eks9nI42F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/24
194.58.38.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.20.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
35:9e:d4:28:43:4e:31:60:68:a6:1f:45:af:71:7c:69:0c:c8:
c9:eb:72:34:5f:fb:da:44:07:ca:a4:79:25:a7:ba:18:a4:3c:
7e:a8:34:9e:26:6a:8c:d7:a7:f8:dd:6b:1f:b4:2f:21:e9:f1:
81:bf:7c:2b:09:1f:51:7c:8b:dd:e2:b5:00:3b:20:f0:e4:fe:
56:af:24:f9:34:8d:a8:54:17:7a:eb:2f:3c:57:25:6e:cf:34:
a2:95:40:5e:73:11:0f:25:e1:b4:c3:e5:cd:92:d2:f7:94:34:
b8:1d:d3:68:d7:9b:3c:e5:a6:c5:ae:c0:93:1a:33:44:27:0e:
d5:19:ad:da:66:a9:49:fb:ad:32:96:d5:f9:1e:be:ed:44:be:
a1:eb:57:db:81:04:d4:72:47:ba:c0:27:42:be:bf:26:89:91:
e8:2c:c8:56:3e:a5:ec:e3:6e:32:f5:1d:26:1f:f8:0a:31:a1:
43:c9:53:5d:86:60:9a:58:2f:31:31:e8:c7:23:76:32:b4:3a:
cf:8d:7a:d5:74:ca:2d:aa:f5:aa:c5:98:b6:ca:e9:33:96:00:
20:b3:5a:51:f9:f4:17:34:a5:a3:be:21:dc:06:db:f6:9d:3f:
3f:16:ca:ff:87:2f:5d:eb:5b:39:de:f2:12:94:cd:c4:85:cf:
94:b2:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org