Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zf8M1v4yd0hDGuBqPCq-Q5p6yZo.roa
File: Zf8M1v4yd0hDGuBqPCq-Q5p6yZo.roa (raw, json)
Hash identifier: KKHWSysBW6dEj/SqXQZcJ9naclNoVdhT4brqHfvY8Jg=
Subject key identifier: 65:FF:0C:D6:FE:32:77:48:43:1A:E0:6A:3C:2A:BE:43:9A:7A:C9:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018894901AAD853CD1FF04B0301D22B3A33E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zf8M1v4yd0hDGuBqPCq-Q5p6yZo.roa
Signing time: Wed 07 Jun 2023 06:34:11 +0000
ROA not before: Wed 07 Jun 2023 06:34:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:90:1a:ad:85:3c:d1:ff:04:b0:30:1d:22:b3:a3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 7 06:34:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65ff0cd6fe327748431ae06a3c2abe439a7ac99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b2:ab:ce:11:9d:84:f4:0e:f4:35:a0:81:66:
5d:d7:52:20:ad:f8:80:f1:b8:54:f1:9e:02:b8:dc:
49:45:23:63:46:38:fb:1d:15:48:ef:51:4e:07:6d:
c8:f9:c4:49:d8:d4:dd:98:bf:6c:1b:bd:4d:66:28:
f2:e4:42:27:b5:90:4f:3a:68:4b:ab:c5:8e:26:80:
02:79:41:30:70:dd:47:7b:fa:b6:2f:1e:40:6d:c9:
dd:63:81:cb:c9:69:0f:de:7d:fe:55:c7:d1:b0:60:
19:c8:72:96:ff:fe:bf:5f:11:97:a6:a7:7a:7a:c7:
e1:aa:00:ba:72:d1:4e:e3:f4:00:42:c5:de:88:a8:
4b:5e:ad:0f:f3:c9:47:8d:10:82:04:f2:6b:0b:cd:
75:e6:68:82:f9:1a:50:9c:cd:dc:4f:b5:ca:e7:2e:
0c:18:16:6f:a7:83:eb:56:2c:23:be:54:44:b0:60:
5a:f8:9a:2e:b5:df:d9:c7:cb:ba:fd:cb:1e:bd:e5:
4c:d9:4d:ed:ff:ac:71:b5:47:e5:82:4c:d8:b7:13:
f8:e6:28:b4:6e:44:c2:18:f5:56:4e:f0:3d:9b:1c:
89:e1:9f:20:ab:0c:76:8f:5e:a3:ca:04:d0:93:e8:
5f:4d:95:0f:f8:5a:50:81:d4:83:fc:5a:2d:6d:39:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:0C:D6:FE:32:77:48:43:1A:E0:6A:3C:2A:BE:43:9A:7A:C9:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zf8M1v4yd0hDGuBqPCq-Q5p6yZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.46.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
53:f7:30:c8:49:27:da:42:17:c6:44:fc:2a:c5:c6:ed:74:97:
33:ae:9b:89:b3:65:05:83:3b:94:70:47:bc:24:a9:99:5c:f7:
b8:02:93:f5:2e:41:08:ad:be:c0:00:59:b2:8b:ff:fa:b0:d6:
53:d4:2a:aa:57:c4:37:c3:46:ca:57:4b:b2:e7:d0:80:4f:e0:
ad:0c:72:63:a4:19:a5:1f:ff:bb:5d:61:5c:11:13:7f:8e:d5:
7a:5f:4a:06:34:5c:70:eb:b6:bc:96:92:6a:ce:51:87:95:eb:
7a:55:ca:26:e6:78:96:c7:40:b8:d3:82:ba:62:18:82:0c:4b:
e5:84:c9:4c:1c:e1:bd:f2:52:9c:fe:c0:18:89:70:df:ee:2b:
19:cb:f8:a9:02:11:9e:99:36:ed:a0:56:03:b2:69:cf:2d:8a:
5e:35:71:a0:51:ac:15:15:f0:34:7c:54:ce:d5:b4:70:9c:91:
9c:d8:4f:d6:f6:56:06:04:6a:b2:32:80:d6:65:bc:9b:1a:e2:
78:cf:0a:c4:01:06:64:a3:17:3f:3c:cb:be:2b:77:c1:7b:32:
ef:02:8f:c3:81:58:ac:f1:0e:e5:ed:88:b9:fe:0e:08:88:ad:
5f:6e:cb:97:b0:ed:31:48:c9:65:ef:40:24:c4:7c:10:05:ed:
82:bd:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org