Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UrRjMXyQ0Au9bEnk2h5eUDL3gHI.roa
File: UrRjMXyQ0Au9bEnk2h5eUDL3gHI.roa (raw, json)
Hash identifier: efRJX9nifc+sWPkJI/jVtfPan9BMH/kwrJ3926cAPbg=
Subject key identifier: 52:B4:63:31:7C:90:D0:0B:BD:6C:49:E4:DA:1E:5E:50:32:F7:80:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191B735CFB996C768E2D467EEC1D81DD0DB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UrRjMXyQ0Au9bEnk2h5eUDL3gHI.roa
Signing time: Tue 03 Sep 2024 09:27:22 +0000
ROA not before: Tue 03 Sep 2024 09:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.233.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.58.0/23 maxlen: 23
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Sep 2024 13:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:35:cf:b9:96:c7:68:e2:d4:67:ee:c1:d8:1d:d0:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 3 09:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=52b463317c90d00bbd6c49e4da1e5e5032f78072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:d5:cc:ac:3e:31:2a:ea:81:4e:82:42:c3:
ae:18:c0:69:e9:a9:e2:c7:60:6c:e9:5e:d8:0d:1c:
f7:f8:37:ea:55:c5:3e:12:eb:38:43:d0:23:84:bd:
c8:ad:30:73:72:0a:54:8d:7b:cf:a7:5f:f5:8c:0a:
78:f4:fe:2f:7b:99:b1:bb:e1:d9:2f:11:63:32:09:
d8:7d:f2:2f:be:50:a3:7c:36:89:82:3b:d7:5e:7b:
41:38:a4:fb:97:90:85:4f:b9:ee:dc:bd:50:7d:28:
bf:c0:4d:41:97:39:41:85:e8:e5:ea:59:c8:45:57:
c8:21:d3:f3:53:17:16:5c:95:1a:ac:96:97:81:60:
c3:54:85:33:b8:3c:ad:99:55:be:4c:c0:fa:10:22:
49:44:84:cf:ca:8d:91:c3:43:c0:5c:48:80:7a:3f:
a4:f9:27:c1:0a:51:85:7a:1e:fc:53:59:46:6f:3e:
56:11:e7:e9:39:91:1a:6a:89:7d:c5:5d:34:0e:ed:
3a:9a:55:11:02:92:45:b0:74:f9:d6:b9:82:e9:ae:
21:e5:38:61:87:c8:ef:cb:4a:42:ad:06:ca:0a:1a:
c7:76:aa:ef:64:87:5b:16:d0:53:3b:b8:9a:bb:54:
2f:c8:2e:58:65:06:0c:87:d5:8b:54:6b:0f:a6:b4:
d2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:63:31:7C:90:D0:0B:BD:6C:49:E4:DA:1E:5E:50:32:F7:80:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UrRjMXyQ0Au9bEnk2h5eUDL3gHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.124.47.0/24
194.58.57.0/24
194.58.155.0/24
194.87.26.0/23
194.87.44.0/24
194.87.49.0/24
194.87.58.0/23
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.243.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.133.14.0/23
195.133.18.0/24
195.133.21.0/24
195.133.24.0/23
195.133.27.0/24
195.133.30.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.217.0/24
212.192.246.0/24
212.192.248.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
04:ba:f6:0c:43:21:e2:84:5c:78:65:02:6f:1d:c9:60:24:33:
b1:30:48:23:82:fc:66:c0:42:77:58:c0:b6:53:ac:3f:32:01:
71:a0:7b:9d:f8:e0:d1:c9:0d:fe:e7:2d:57:26:d7:33:cc:0c:
90:97:a9:ef:bc:57:d9:84:46:b1:a0:01:57:1b:c0:45:1d:16:
f1:89:3b:3e:43:7b:0f:d2:9f:b3:49:52:65:bd:42:de:1f:95:
30:5b:8f:2e:d0:67:1e:49:28:29:05:8c:85:ca:b7:5b:69:88:
dc:30:2a:6d:47:2d:f7:66:c4:dd:bd:59:ef:7c:9f:a6:66:af:
03:e1:cd:f3:b6:37:a8:2b:cb:8d:b9:1e:7a:17:49:da:5f:d3:
92:e1:64:c2:3e:1f:9a:d9:15:85:b9:09:8d:bd:70:91:0f:a7:
24:55:1c:b4:ba:53:0c:2d:f1:9b:00:23:d4:b0:ad:ca:16:7f:
fe:33:51:f1:68:84:80:d3:35:95:6a:0d:89:14:34:ec:6f:8e:
2c:7c:d5:47:1b:94:3d:33:9c:4e:0b:63:d1:de:8c:17:96:0a:
7e:ad:78:a7:ec:3e:50:61:06:df:39:af:24:96:62:e1:0d:c7:
3f:ec:19:f7:3c:3b:35:31:0a:2c:e1:9b:b1:2c:02:ab:c9:5f:
10:32:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 18:42:07 2024 by rpki-client on console-ams.rpki-client.org