Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Y4E8f4WolvX3obiJA5kaVN9RsXE.roa
File: Y4E8f4WolvX3obiJA5kaVN9RsXE.roa (raw, json)
Hash identifier: casw7q9Ghl3Q4+euCTOQU8zfCk33Dl8KGDmACS6U54c=
Subject key identifier: 63:81:3C:7F:85:A8:96:F5:F7:A1:B8:89:03:99:1A:54:DF:51:B1:71
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01864A822F9FEC687ED0583DBEF981EA71E8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Y4E8f4WolvX3obiJA5kaVN9RsXE.roa
Signing time: Mon 13 Feb 2023 11:21:31 +0000
ROA not before: Mon 13 Feb 2023 11:21:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 23
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:82:2f:9f:ec:68:7e:d0:58:3d:be:f9:81:ea:71:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 11:21:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63813c7f85a896f5f7a1b88903991a54df51b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:70:38:fc:69:28:32:75:8a:10:8a:0e:a2:8c:
f5:21:2c:65:fe:f8:18:16:57:80:66:3b:16:71:4a:
cb:10:13:60:1a:9c:81:41:7b:11:60:e8:65:8d:18:
68:6a:3b:a5:61:69:41:f1:df:b5:f0:78:18:6a:02:
b1:c7:f3:a3:b8:46:01:0d:fa:07:1e:e7:12:fd:9a:
38:82:a9:5f:c5:11:4d:ae:7a:14:4d:a5:64:e2:18:
94:be:8a:fd:48:85:a5:45:ff:ea:79:41:2f:f8:45:
cc:92:a0:d1:1a:f3:42:82:ff:55:dc:86:81:a5:3d:
93:81:73:16:87:5f:19:e0:5a:ea:8f:51:f4:11:81:
55:08:37:ae:86:f4:3a:cd:d1:b8:b3:23:85:b5:60:
fb:b9:5e:70:72:a2:83:dc:23:35:d8:4d:4a:46:fe:
a7:54:3b:3f:cd:c4:34:d3:58:a9:f5:90:e2:53:36:
20:f4:6d:4c:64:57:5f:12:85:bb:92:71:d5:d6:d3:
2f:ef:8e:54:12:ce:8c:2a:7e:6a:f6:26:87:9c:24:
12:1b:4c:f0:b2:b2:eb:48:bb:2b:09:01:1a:8b:5f:
96:58:e3:17:34:6c:c2:e0:3b:5e:69:ca:85:7a:68:
31:f5:d4:68:56:8a:58:93:a2:9e:69:60:61:76:9d:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:81:3C:7F:85:A8:96:F5:F7:A1:B8:89:03:99:1A:54:DF:51:B1:71
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Y4E8f4WolvX3obiJA5kaVN9RsXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.37.0/24
194.87.42.0/24
194.87.56.0/24
194.87.73.0/24
194.87.76.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:10:5e:ed:d5:40:7f:75:8b:dd:e6:77:ca:62:94:97:75:e4:
a1:ae:d9:7a:87:6d:59:2d:4d:4a:4f:54:1c:42:b0:56:d7:ac:
d8:71:8e:62:5b:19:08:fd:5d:5e:7b:4f:e4:af:c3:6c:3e:0f:
5a:34:53:28:28:87:d5:54:32:28:d5:f0:ba:8d:1c:ab:f4:bc:
a0:3f:ab:31:bb:3e:a1:96:8f:e2:7b:85:9b:c9:ec:e7:94:f6:
6d:12:6b:21:60:db:e8:e1:e2:01:57:36:41:6a:04:03:1e:0d:
02:7a:e5:c1:8b:b6:8d:9e:cf:34:8f:04:5e:5a:07:c6:42:67:
43:55:7f:24:17:f0:79:88:c5:dc:63:b0:58:c1:af:7a:51:65:
da:7f:93:66:fe:ad:55:8a:60:c8:28:1c:93:06:35:b1:6e:b9:
c2:05:83:15:57:6b:0a:a3:e9:12:ba:18:74:8c:f8:10:3a:d2:
f0:69:f7:38:be:7d:95:9a:ee:9c:42:1f:97:7e:48:91:5c:d3:
31:50:3e:51:cf:1e:15:18:d5:e7:6f:ca:c0:f7:89:98:d1:d2:
eb:20:cb:45:ef:3e:0f:39:94:ce:28:fd:11:df:fe:c0:7a:24:
bd:cb:32:dc:67:80:d3:f4:2c:38:1e:ff:38:61:73:b1:13:f1:
c9:a2:58:9e
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgISAYZKgi+f7Gh+0Fg9vvmB6nHoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjEzMTEyMTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzgxM2M3Zjg1YTg5NmY1ZjdhMWI4ODkwMzk5MWE1NGRmNTFiMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3A4/GkoMnWKEIoOooz1ISxl/vgY
FleAZjsWcUrLEBNgGpyBQXsRYOhljRhoajulYWlB8d+18HgYagKxx/OjuEYBDfoH
HucS/Zo4gqlfxRFNrnoUTaVk4hiUvor9SIWlRf/qeUEv+EXMkqDRGvNCgv9V3IaB
pT2TgXMWh18Z4Frqj1H0EYFVCDeuhvQ6zdG4syOFtWD7uV5wcqKD3CM12E1KRv6n
VDs/zcQ001ip9ZDiUzYg9G1MZFdfEoW7knHV1tMv745UEs6MKn5q9iaHnCQSG0zw
srLrSLsrCQEai1+WWOMXNGzC4DteacqFemgx9dRoVopYk6KeaWBhdp1Z/wIDAQAB
o4IDiTCCA4UwHQYDVR0OBBYEFGOBPH+FqJb196G4iQOZGlTfUbFxMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWTRFOGY0V29sdlgzb2JpSkE1a2FWTjlSc1hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnQYIKwYBBQUHAQcBAf8EggGMMIIBiDCCAYQEAgABMIIB
fAMEAD5M4QMEAT5M5gMEAD5M6QMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8BgMEAMF8
CQMEAMF8EAMEAMF8LAMEAMF8UAMEAMF8XQMEAMF8yQMEAMF8zwMEAcI6JgMEAMI6
LwMEAMI6OwMEAMJXATAMAwQAwlcDAwQAwlcEAwQAwlcHMAwDBADCVwsDBADCVwwD
BADCVxADBALCVxgDBADCVyUDBADCVyoDBADCVzgDBADCV0kDBADCV0wDBADCV1MD
BADCV2gDBAHCV3IDBADCV3oDBAHCV4IDBADCV5UDBADCV6YDBADCV6gwDAMEAcJX
qgMEAMJXrAMEAsJXsAMEAMJXtgMEAMJXuwMEAMJXvgMEAMJXyAMEAMJXygMEAMJX
3gMEAMJX8AMEAMKHEgMEAMKHFzAMAwQAwzojAwQAwzokAwQAwzoyAwQAwzo4AwQA
w4UAAwQAw4UaAwQAw4UeAwQAw4UjAwQBw4XCAwQA1MABAwQA1MAKAwQA1MAfMA0G
CSqGSIb3DQEBCwUAA4IBAQB6EF7t1UB/dYvd5nfKYpSXdeShrtl6h21ZLU1KT1Qc
QrBW16zYcY5iWxkI/V1ee0/kr8NsPg9aNFMoKIfVVDIo1fC6jRyr9LygP6sxuz6h
lo/ie4WbyeznlPZtEmshYNvo4eIBVzZBagQDHg0CeuXBi7aNns80jwReWgfGQmdD
VX8kF/B5iMXcY7BYwa96UWXaf5Nm/q1VimDIKByTBjWxbrnCBYMVV2sKo+kSuhh0
jPgQOtLwafc4vn2Vmu6cQh+XfkiRXNMxUD5Rzx4VGNXnb8rA94mY0dLrIMtF7z4P
OZTOKP0R3/7AeiS9yzLcZ4DT9Cw4Hv84YXOxE/HJolie
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:06 2023 by rpki-client on console-fra.rpki-client.org