Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TuP32YzMxWWEO8_Yky1aVuKBMt8.roa
File: TuP32YzMxWWEO8_Yky1aVuKBMt8.roa (raw, json)
Hash identifier: YEtb3C0Vz3qrO/4X7YCaGBSL26qNRXnZvmuhxfyYAmM=
Subject key identifier: 4E:E3:F7:D9:8C:CC:C5:65:84:3B:CF:D8:93:2D:5A:56:E2:81:32:DF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188FC53E66A8A328B6E17307954FB951B31
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TuP32YzMxWWEO8_Yky1aVuKBMt8.roa
Signing time: Tue 27 Jun 2023 10:08:56 +0000
ROA not before: Tue 27 Jun 2023 10:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:53:e6:6a:8a:32:8b:6e:17:30:79:54:fb:95:1b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 27 10:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ee3f7d98cccc565843bcfd8932d5a56e28132df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:ca:ba:5f:05:af:0c:58:9e:db:8e:f5:93:
92:3f:6e:d9:c7:7d:42:e0:09:9e:9c:58:19:1d:3b:
9a:6b:cf:31:f8:28:78:83:31:ed:b1:94:46:41:65:
40:91:7b:8a:26:51:5a:01:dd:3f:7d:7b:23:d3:25:
cd:03:54:9d:80:9a:a4:16:0d:74:c8:80:01:ad:1f:
0b:9d:88:7f:39:a9:87:96:43:02:88:56:2f:fc:09:
45:31:84:32:00:a3:24:07:1b:87:90:26:95:b9:21:
74:ad:a1:9d:85:9a:21:de:d6:99:9a:ab:e1:48:be:
58:41:96:2f:4b:e0:a4:e0:9c:57:a0:d8:1d:32:0e:
0d:28:48:eb:64:28:04:eb:62:2a:cc:dc:34:9a:8d:
27:9e:31:d2:bd:bf:ee:26:19:bb:41:61:59:78:64:
6d:4e:a2:20:8b:06:cf:11:4d:7a:bf:a2:4b:1e:0c:
d4:f4:d2:64:92:85:4a:d7:9b:18:39:29:c8:c3:bc:
7e:cb:46:6e:fe:1d:e4:7b:42:44:b7:c9:86:b8:2e:
a1:b6:15:1d:26:fd:35:09:3a:21:37:f2:1a:c3:4d:
9a:04:cc:34:45:82:68:a9:99:45:8b:17:8f:07:3a:
e1:6b:12:1b:80:be:61:4b:3f:7d:b9:33:70:6c:ce:
3e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:F7:D9:8C:CC:C5:65:84:3B:CF:D8:93:2D:5A:56:E2:81:32:DF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TuP32YzMxWWEO8_Yky1aVuKBMt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.124.3.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.202.0/24
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.22.0/24
195.133.30.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.223.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
09:98:04:37:42:e4:d1:7e:b2:7a:89:4e:07:32:62:10:21:28:
e6:96:2d:f9:cd:8d:c0:28:c3:32:0e:10:61:aa:b6:d1:ed:57:
d6:7e:d6:ba:a4:2a:49:0e:02:85:2c:c4:e4:86:44:58:d0:d6:
7f:de:c8:75:d8:26:ef:d4:7f:ac:c3:3e:5b:d8:f2:86:68:33:
f9:88:c6:f1:ee:a8:6f:bd:f5:dc:3e:83:b3:61:0c:23:b7:5f:
40:48:53:c2:81:be:1b:17:ae:12:4a:ad:76:56:26:52:19:53:
32:f8:0e:c1:48:c4:9e:83:d3:50:38:e5:3c:7a:8e:28:f2:af:
98:cb:7e:6f:c6:a0:da:e3:78:f5:e8:fc:a6:87:d3:04:b3:bf:
1a:58:ee:5a:4f:47:9e:51:7c:00:27:04:c8:16:ce:c5:f7:3f:
0f:82:2c:dc:fe:e9:de:a3:fa:ce:d8:79:e0:87:50:a6:ac:a0:
26:7a:44:dc:1a:b7:ee:ad:55:44:4c:b2:79:03:4f:ae:b5:36:
66:13:ec:ec:32:cf:73:fa:c1:25:fc:4f:43:52:d8:39:71:39:
ae:5c:79:b2:51:68:eb:d7:8b:73:cf:5a:9e:1a:6f:8b:c7:02:
8c:92:6b:7f:84:10:1b:e4:81:a1:93:af:a6:f8:0b:3f:c4:77:
28:d8:af:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org