Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWxuYSk1KqVBP0wlrZJ6nJFZuKU.roa
File: aWxuYSk1KqVBP0wlrZJ6nJFZuKU.roa (raw, json)
Hash identifier: RLC8AwLDa5wZzutGb8AAtdO60MAQY0YpXRVDSuWTM1k=
Subject key identifier: 69:6C:6E:61:29:35:2A:A5:41:3F:4C:25:AD:92:7A:9C:91:59:B8:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187DB91E0936C664DE32E18DB3638782575
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWxuYSk1KqVBP0wlrZJ6nJFZuKU.roa
Signing time: Tue 02 May 2023 08:26:23 +0000
ROA not before: Tue 02 May 2023 08:26:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:db:91:e0:93:6c:66:4d:e3:2e:18:db:36:38:78:25:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 2 08:26:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=696c6e6129352aa5413f4c25ad927a9c9159b8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:7e:2a:8d:85:bc:47:2a:3e:ae:dc:78:41:
ca:c5:04:a4:4b:41:0c:1b:6f:ca:b1:19:ba:a1:b5:
bb:9f:c9:50:b2:5d:d0:b2:ff:33:c0:71:f5:76:bc:
95:31:70:34:16:36:0f:76:f4:05:f2:eb:ac:8c:79:
cf:20:7e:64:a1:03:10:3b:50:49:50:69:7f:8c:47:
17:93:e1:48:86:18:fb:02:37:63:f1:34:85:53:51:
97:4e:07:e3:07:9d:62:69:9a:8e:f0:9a:70:90:c8:
ae:fe:51:ce:f7:c6:c8:49:50:9a:31:d4:ab:e3:c4:
e8:39:be:9e:e8:99:7a:1f:8e:a7:04:6a:9a:6f:ca:
16:84:72:11:51:35:41:8a:ba:f3:4b:38:2f:f2:88:
b4:f4:bb:c3:23:2b:78:d9:23:ae:80:3d:6c:90:a8:
1b:49:73:08:52:ac:d5:5e:28:19:60:e9:8a:41:a3:
5f:d1:11:ac:22:03:59:c4:a7:27:84:42:44:4c:9d:
73:e3:b6:87:3e:72:72:d4:4d:c1:f8:e3:bc:2f:b6:
63:bc:c9:2a:84:ac:89:43:86:a4:2e:11:21:98:78:
fe:9a:4b:5a:19:8e:10:85:71:4a:0b:bc:1d:c5:1e:
6f:4f:aa:57:c6:bf:c8:e3:a1:fe:8d:b4:2e:b5:65:
50:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6C:6E:61:29:35:2A:A5:41:3F:4C:25:AD:92:7A:9C:91:59:B8:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aWxuYSk1KqVBP0wlrZJ6nJFZuKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.190.0/24
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/23
194.87.179.0/24
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
1d:94:69:92:42:4c:69:89:f7:ae:b8:1d:c8:ef:c0:ba:e2:65:
da:3b:b1:0b:f7:36:93:f9:5c:ba:57:0d:92:61:cf:70:68:eb:
87:36:02:00:ca:14:7e:54:1a:24:4b:d7:bd:42:4a:7f:77:05:
5f:aa:11:5b:6c:7a:38:59:90:2c:19:b7:03:68:a6:2f:0e:36:
41:3c:dd:00:3b:6b:74:0b:49:2e:26:49:93:1f:38:fd:08:8b:
27:d8:29:f5:f7:6c:a2:6f:b2:87:10:10:88:e5:d2:aa:3e:c5:
a8:91:d7:30:e8:d8:4a:e4:bb:f1:96:39:57:b6:48:f5:45:b8:
85:4e:01:f9:d4:72:5d:b5:5c:5f:46:55:e8:b3:10:c7:37:d8:
d7:56:28:3e:2d:f2:02:75:26:5e:db:f9:31:40:2a:73:2d:31:
c6:b5:b0:ef:7e:b0:5a:a0:84:f7:83:88:61:b3:b3:38:01:a3:
b7:ee:f5:d5:d2:bd:b2:4f:87:65:49:56:3b:99:52:46:74:2d:
d4:55:6c:44:2f:f3:d5:02:8d:37:2f:8e:11:22:23:3d:54:5e:
e0:0d:64:09:80:ab:75:d4:63:7e:7d:99:16:c9:1f:3a:4a:aa:
9e:d9:c1:e8:ab:33:88:cf:ec:54:4b:40:ad:2c:e9:ed:1f:30:
c9:f1:06:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org