Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TE61dZ24wQmKEYYyf6O0_8WUAv8.roa
File: TE61dZ24wQmKEYYyf6O0_8WUAv8.roa (raw, json)
Hash identifier: Upvv/XiF4Oy+24wPk54Y/RR9Xp/2b9Z7bICzS4EWvkI=
Subject key identifier: 4C:4E:B5:75:9D:B8:C1:09:8A:11:86:32:7F:A3:B4:FF:C5:94:02:FF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01893E07DDA1A4FC7863A5BA0593CD603A8E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TE61dZ24wQmKEYYyf6O0_8WUAv8.roa
Signing time: Mon 10 Jul 2023 04:20:50 +0000
ROA not before: Mon 10 Jul 2023 04:20:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:07:dd:a1:a4:fc:78:63:a5:ba:05:93:cd:60:3a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 10 04:20:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c4eb5759db8c1098a1186327fa3b4ffc59402ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ea:3f:38:f4:05:2c:26:91:af:53:78:ab:35:
85:5e:20:08:44:86:da:81:5c:98:44:fd:d9:5c:82:
62:35:7f:9d:0b:38:2c:5b:4a:3b:cb:12:af:9d:19:
7a:1f:7a:d9:b6:09:d7:86:91:6e:bd:92:a1:9e:45:
d9:a8:c9:82:2e:56:b9:88:1d:76:10:af:f0:a3:d6:
a6:fb:3e:94:10:a7:3e:0d:22:79:0c:f1:46:b7:08:
68:5c:16:44:c0:bc:33:5f:6d:31:c6:65:fb:d5:3c:
c4:87:c7:08:85:97:7c:55:d8:52:ca:01:d0:8e:2a:
ff:2b:5a:53:40:9c:d0:2d:db:24:7c:18:4b:9b:ff:
36:56:4b:62:5a:9a:ba:fd:2e:1f:13:a4:84:1d:0d:
1c:4d:3e:56:a4:e7:27:00:de:3c:06:49:da:47:6a:
1e:53:ec:77:c1:8f:b6:f6:2b:52:96:6e:28:72:43:
34:b8:87:2c:dc:ff:7f:96:1a:34:6f:ec:b6:6d:fb:
d8:d8:2a:8b:f3:6e:ca:a2:9a:02:9e:2e:17:7b:8d:
df:9d:1a:f0:ff:08:db:91:82:14:f3:f9:c0:61:33:
17:57:ba:12:8c:40:c9:b8:18:ad:47:e3:b0:26:e1:
f3:59:29:05:94:d7:4c:50:c4:e4:3b:58:a4:df:ea:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:4E:B5:75:9D:B8:C1:09:8A:11:86:32:7F:A3:B4:FF:C5:94:02:FF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TE61dZ24wQmKEYYyf6O0_8WUAv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/24
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.30.0/24
195.133.35.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
84:4d:8d:23:73:e9:6b:d8:8b:6c:32:77:22:7e:ae:6d:18:2e:
b5:4b:3a:de:65:6a:b2:1a:fa:2c:f7:b8:41:4d:fd:5f:5f:7c:
3f:3b:85:05:eb:72:df:b6:9e:77:f3:d7:43:8d:35:f3:f8:21:
e0:3a:8c:c0:c8:4f:c4:33:e8:e3:db:6a:ec:28:34:69:34:b1:
af:d5:f1:96:d0:70:df:1d:d8:65:5d:e7:16:b3:ab:af:c4:c2:
eb:96:80:dc:c2:0d:89:40:84:4b:8b:a3:0e:66:91:0e:49:7c:
cf:97:9a:95:06:63:1b:a0:6c:b3:b9:19:ec:2b:cf:0a:1d:c6:
46:2c:43:f7:57:4f:e6:ec:e9:2e:f0:f0:ce:c3:54:c8:6e:4e:
82:69:63:2e:5b:2a:66:16:df:ad:18:ea:42:0d:b8:d0:25:04:
c4:30:cf:75:37:9d:a2:05:29:22:04:54:09:0a:72:2c:30:b5:
5f:98:84:eb:8e:26:38:5e:01:93:47:15:32:73:15:69:05:08:
b9:c1:5e:00:67:a1:07:be:07:4c:b9:bd:44:a0:c0:8e:58:53:
d5:64:c5:61:f1:27:14:b7:1c:90:12:3a:00:2b:13:37:03:b7:
f0:6e:ae:88:b8:9d:cc:f1:1d:7f:92:55:5e:28:d4:9b:cd:37:
4d:b2:a0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org