Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SOfQIaX1M8MctPNkoZqtMxtqu3s.roa
File: SOfQIaX1M8MctPNkoZqtMxtqu3s.roa (raw, json)
Hash identifier: 1ejAQUZA7VtEgRVeB0Sdb5FSC+BCwB6me2jrn2M8D5A=
Subject key identifier: 48:E7:D0:21:A5:F5:33:C3:1C:B4:F3:64:A1:9A:AD:33:1B:6A:BB:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188D8DDA51B362E44E36EE8440E2656B6F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SOfQIaX1M8MctPNkoZqtMxtqu3s.roa
Signing time: Tue 20 Jun 2023 12:53:04 +0000
ROA not before: Tue 20 Jun 2023 12:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:dd:a5:1b:36:2e:44:e3:6e:e8:44:0e:26:56:b6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 20 12:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e7d021a5f533c31cb4f364a19aad331b6abb7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:7d:a2:83:92:06:87:4c:76:22:9b:1c:76:
5c:78:dd:09:f1:fe:55:7b:6b:1f:b1:d4:02:a3:79:
a6:a1:3c:7f:94:29:ba:84:84:31:3c:b1:b6:54:e6:
18:88:9c:dd:02:ac:0a:12:94:0b:93:79:83:06:79:
88:d7:0c:ba:ca:28:f5:3e:24:75:f9:a1:26:8f:c4:
d6:1a:f7:28:6f:97:8a:0f:8c:c9:25:ed:cd:20:9e:
19:83:66:a7:33:49:66:a5:75:d2:d4:63:81:01:38:
e2:c3:49:93:fe:f0:76:82:fb:4e:5f:ba:47:82:30:
6d:87:85:e8:d5:cf:86:9d:d7:8b:44:ba:95:d7:86:
f6:0f:dd:73:21:af:18:a3:06:f1:7c:53:31:ae:cd:
8d:95:d7:68:ac:f6:29:c5:0d:73:e5:50:c0:15:9f:
28:6c:7b:57:84:ab:06:55:0e:f2:a4:ff:a5:bb:8e:
d4:a0:66:7f:4b:9e:f9:c4:28:fd:a1:26:7e:16:5f:
35:a8:ac:15:39:69:0a:6d:36:0a:9f:56:5a:26:c6:
1b:f0:64:d4:9a:27:be:b0:1e:93:05:8a:8a:c1:52:
a4:ce:2c:6f:aa:91:5e:f2:e6:25:35:b2:1a:38:12:
23:07:0e:30:21:14:ed:94:5b:82:1f:0e:e1:78:c2:
29:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E7:D0:21:A5:F5:33:C3:1C:B4:F3:64:A1:9A:AD:33:1B:6A:BB:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SOfQIaX1M8MctPNkoZqtMxtqu3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.202.0/24
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.22.0/24
195.133.30.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.223.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
7f:2f:47:8d:a6:c8:60:2d:d3:ae:2b:64:0e:6c:63:0d:3d:4e:
f0:d3:da:51:9e:1e:ae:c2:41:ee:27:67:03:2d:f4:5f:1f:40:
13:91:b9:eb:e7:70:4e:fa:7d:3d:6d:6f:4f:14:2d:3a:0c:80:
bd:09:e6:83:71:08:eb:36:75:a4:31:56:d8:52:50:ca:f3:54:
5b:ed:c7:83:ca:ee:43:75:6c:f9:18:0b:46:22:5b:35:29:d0:
23:6d:11:34:6a:0d:93:f8:50:34:bf:84:d6:b7:39:d3:a6:89:
90:e4:5a:db:7e:97:7d:e9:79:50:39:e5:44:1f:77:af:c8:08:
6e:5f:6c:20:0d:e8:8c:30:30:ee:11:8f:bf:9f:16:cc:6e:be:
63:4f:3d:1b:90:1c:e1:48:d9:f2:dc:b6:d2:f2:92:df:62:43:
0e:bb:13:04:ff:14:4b:1b:80:b2:53:4c:35:88:1b:2a:28:b2:
f0:60:80:27:2a:fe:ba:b4:41:ec:ea:9a:e2:92:a6:26:9a:62:
63:d3:40:1a:30:3b:8b:74:d0:67:13:c7:22:c5:94:af:8c:cb:
01:43:dd:af:d5:ba:c8:7b:e5:cd:a0:ff:f9:d3:ba:54:d9:a8:
c0:32:8d:51:a2:bc:df:14:31:f6:89:91:ba:b3:fa:1c:22:a2:
4b:fe:8f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org