Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YQyIVbaT2QyrDQLHcYY8wS7vuq8.roa
File: YQyIVbaT2QyrDQLHcYY8wS7vuq8.roa (raw, json)
Hash identifier: wdYGIDP72kLjAcY9DNalxuH0DkNPUzYaE5qRUrLN3Uw=
Subject key identifier: 61:0C:88:55:B6:93:D9:0C:AB:0D:02:C7:71:86:3C:C1:2E:EF:BA:AF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C27812703F8C55326584C8292960C438
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YQyIVbaT2QyrDQLHcYY8wS7vuq8.roa
Signing time: Thu 27 Apr 2023 11:27:41 +0000
ROA not before: Thu 27 Apr 2023 11:27:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:78:12:70:3f:8c:55:32:65:84:c8:29:29:60:c4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 11:27:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=610c8855b693d90cab0d02c771863cc12eefbaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:08:3c:5f:5a:e2:82:82:26:11:c9:76:d7:
46:d2:85:57:0b:ea:53:40:42:ac:ee:84:82:3d:92:
c1:9c:98:68:a6:bf:b3:95:60:88:5f:e5:70:5d:94:
6d:d3:f0:0f:ac:7f:bd:ca:55:16:29:43:1b:2a:f3:
9d:b2:2a:dc:31:43:7e:56:b1:ca:28:e8:fa:95:c8:
41:1b:d7:55:6d:aa:a3:2d:81:68:3e:a7:12:43:5e:
31:ce:1b:06:f6:45:69:5e:83:36:1d:ba:20:9a:19:
4a:15:05:77:50:aa:76:f6:9b:fe:0b:44:be:b2:66:
59:d2:f6:3a:00:14:7a:5a:7c:fb:a1:4f:3a:91:5b:
08:cc:12:27:f3:22:a4:00:39:a6:27:4d:74:5a:c7:
60:da:27:de:b6:c1:78:4b:d6:18:32:57:ac:de:ac:
92:b7:0b:4b:ea:36:74:67:b9:a8:57:38:39:63:ba:
86:5b:b5:7e:5c:32:f9:20:46:f8:9a:34:e1:5d:60:
e8:1f:f5:81:5b:29:ac:2c:a0:ca:ee:36:be:20:91:
98:5b:7e:aa:75:4e:64:0d:30:0c:80:d5:d4:68:cb:
79:02:f7:48:e8:fd:5e:f0:87:d3:1c:22:d6:d0:0b:
12:c8:71:02:cd:61:77:5b:d0:95:ba:8b:aa:8a:6b:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:88:55:B6:93:D9:0C:AB:0D:02:C7:71:86:3C:C1:2E:EF:BA:AF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YQyIVbaT2QyrDQLHcYY8wS7vuq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.20.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
05:c3:c4:54:b1:a6:37:a4:dd:39:4c:16:7a:4d:73:79:11:fc:
67:c4:2b:d2:25:ec:0b:ef:ea:0d:ed:91:b8:d9:4d:d7:c5:b8:
41:b5:27:63:72:ef:ad:7a:0d:53:f9:b3:87:b2:9a:a2:8c:34:
09:e5:1f:6c:ee:1b:40:a2:60:28:d8:67:7f:cf:15:32:f0:b0:
dc:6a:a1:81:ec:3b:99:1c:fd:51:50:8a:a6:f6:68:c5:ee:ee:
8e:ea:66:0e:3c:ee:b1:25:0e:44:dc:29:62:5b:8c:46:0b:e5:
77:4b:a5:22:b5:40:43:82:e1:be:25:8b:47:c7:b5:49:7f:23:
c8:03:b3:ca:3e:3f:29:a4:f2:40:38:e7:53:50:b5:26:8a:7e:
b1:d6:37:03:05:a2:c2:ac:df:58:d0:9f:e7:d2:31:a3:32:ce:
7a:c8:aa:e1:81:ce:bc:bf:f0:bc:55:9b:12:cc:15:24:79:84:
bf:9a:f4:47:de:c9:e7:3b:80:1d:b4:2a:74:ed:ea:2b:d1:ad:
46:73:c1:45:5e:14:a9:32:5d:08:32:9b:e0:08:20:37:4d:be:
0d:e2:eb:44:98:16:eb:74:81:44:c1:ec:38:8e:96:d0:17:46:
31:6c:94:6d:cb:31:8a:1a:d9:b0:6b:08:00:a0:ac:3d:dd:ac:
14:15:3b:8e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgISAYfCeBJwP4xVMmWEyCkpYMQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNDI3MTEyNzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTBjODg1NWI2OTNkOTBjYWIwZDAyYzc3MTg2M2NjMTJlZWZiYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn4IPF9a4oKCJhHJdtdG0oVXC+pT
QEKs7oSCPZLBnJhopr+zlWCIX+VwXZRt0/APrH+9ylUWKUMbKvOdsircMUN+VrHK
KOj6lchBG9dVbaqjLYFoPqcSQ14xzhsG9kVpXoM2HbogmhlKFQV3UKp29pv+C0S+
smZZ0vY6ABR6Wnz7oU86kVsIzBIn8yKkADmmJ010Wsdg2ifetsF4S9YYMles3qyS
twtL6jZ0Z7moVzg5Y7qGW7V+XDL5IEb4mjThXWDoH/WBWymsLKDK7ja+IJGYW36q
dU5kDTAMgNXUaMt5AvdI6P1e8IfTHCLW0AsSyHECzWF3W9CVuouqimurDwIDAQAB
o4IETzCCBEswHQYDVR0OBBYEFGEMiFW2k9kMqw0Cx3GGPMEu77qvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWVF5SVZiYVQyUXlyRFFMSGNZWTh3Uzd2dXE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICYwYIKwYBBQUHAQcBAf8EggJSMIICTjCCAkoEAgABMIIC
QgMEAD5M4QMEAT5M5gMEAMB8qgMEAMB8sgMEAsB8tAMEAMFscwMEAMF8AwMEAMF8
BgMEAcF8CAMEAMF8EAMEAMF8LAMEAMF8MQMEAMF8UAMEAMF8WgMEAMF8XQMEAMF8
hQMEAMF8yQMEAMF8zAMEAMF84gMEAMI6KAMEAMI6KgMEAMI6LwMEAMI6OwMEAMI6
mjAMAwQAwlcBAwQCwlcAAwQBwlcGMAwDBAHCVwoDBADCVwwDBADCVxADBADCVxIw
DAMEAcJXFgMEAsJXGAMEAMJXJTAMAwQAwlcrAwQAwlcsAwQAwlczAwQAwlc4AwQA
wlc/AwQAwldJMAwDBADCV00DBADCV04DBADCV1MDBAHCV2gDBAHCV3IDBADCV3oD
BADCV3wDBAHCV4IwDAMEAMJXhQMEA8JXgAMEAMJXigMEAMJXlQMEAMJXoAMEAMJX
pgMEAMJXqDAMAwQBwleqAwQAwlesAwQCwlewAwQAwle2AwQAwle7AwQAwle+AwQA
wlfIAwQAwlfKAwQAwlfMAwQAwlfeAwQAwlfwAwQAwlfzAwQAwocSMAwDBADChxcD
BADChxgDBADChy4wDAMEAMM6IwMEAMM6JAMEAMM6MwMEAMM6NgMEAMM6OAMEAMOF
AAMEAMOFFAMEAMOFFgMEAMOFGgMEAMOFHgMEAMOFIAMEAMOFIwMEAsOFQAMEAMOF
SgMEAMOFTAMEAMOFTwMEAMOFVAMEAcOFwgMEANTAAQMEANTACjAMAwQA1MD3AwQC
1MD4MA0GCSqGSIb3DQEBCwUAA4IBAQAFw8RUsaY3pN05TBZ6TXN5EfxnxCvSJewL
7+oN7ZG42U3XxbhBtSdjcu+teg1T+bOHspqijDQJ5R9s7htAomAo2Gd/zxUy8LDc
aqGB7DuZHP1RUIqm9mjF7u6O6mYOPO6xJQ5E3CliW4xGC+V3S6UitUBDguG+JYtH
x7VJfyPIA7PKPj8ppPJAOOdTULUmin6x1jcDBaLCrN9Y0J/n0jGjMs56yKrhgc68
v/C8VZsSzBUkeYS/mvRH3snnO4AdtCp07eor0a1Gc8FFXhSpMl0IMpvgCCA3Tb4N
4utEmBbrdIFEwew4jpbQF0YxbJRtyzGKGtmwawgAoKw93awUFTuO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:06 2023 by rpki-client on console-fra.rpki-client.org