Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/apyELAEyCWbQy2MYBLYTOlFhfWQ.roa
File: apyELAEyCWbQy2MYBLYTOlFhfWQ.roa (raw, json)
Hash identifier: u2N4zWME3j7rRrw/c4iUPG9EoLeEOkWlDrZwFsCDOW0=
Subject key identifier: 6A:9C:84:2C:01:32:09:66:D0:CB:63:18:04:B6:13:3A:51:61:7D:64
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C6EA120E4F7533D9AECACF83983E0B75
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/apyELAEyCWbQy2MYBLYTOlFhfWQ.roa
Signing time: Fri 28 Apr 2023 08:10:41 +0000
ROA not before: Fri 28 Apr 2023 08:10:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c6:ea:12:0e:4f:75:33:d9:ae:ca:cf:83:98:3e:0b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 28 08:10:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a9c842c01320966d0cb631804b6133a51617d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:5d:f8:16:67:a5:57:6d:0b:79:f7:13:c1:
c7:d3:f2:c4:ef:8b:20:fe:19:48:54:00:88:6b:8f:
6e:51:a0:70:d7:b5:d3:35:00:9b:d6:bd:56:4a:12:
c0:69:b9:a9:27:6a:c5:9b:d2:91:61:04:77:b0:58:
61:c3:c7:25:e9:c4:ea:24:6a:a6:38:cb:43:fb:f3:
66:ec:df:d6:f7:b7:6d:1b:3f:0c:ac:c5:5c:2a:fa:
28:92:ec:b1:9e:9f:b8:5e:1a:92:6d:bb:24:0c:a0:
5b:8e:5e:ed:3d:83:f0:12:f9:07:8c:ea:00:7a:79:
99:34:76:9d:26:9d:a1:3c:2f:fb:18:3d:e3:05:34:
a8:1b:24:23:e8:6b:68:9b:c7:1b:94:f2:0a:d4:ae:
ce:07:12:4a:0c:68:5d:af:fd:f1:08:c1:30:9a:07:
1c:c7:f2:7a:ff:31:59:98:e5:eb:14:8d:34:bb:a8:
56:e3:28:1a:26:4d:fa:05:48:ab:92:e4:13:f3:ed:
36:9a:ca:02:8d:18:71:dd:f6:47:4e:cd:57:54:17:
6d:f8:0f:fc:33:b5:c7:6d:c1:4d:b5:7d:b4:2f:71:
66:ae:09:1c:64:0c:fb:1f:67:e9:fb:ca:1e:1f:73:
32:51:84:bb:db:27:0b:67:20:d0:8f:dc:08:a1:69:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9C:84:2C:01:32:09:66:D0:CB:63:18:04:B6:13:3A:51:61:7D:64
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/apyELAEyCWbQy2MYBLYTOlFhfWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
88:e7:ce:b8:6b:00:19:b6:4e:de:fe:d9:d8:ae:e6:7b:ca:60:
1f:ac:55:09:b8:01:60:89:77:e7:ef:83:49:8d:d4:15:f8:3e:
e5:f1:85:1a:3d:67:c2:b6:04:8e:c6:04:16:6f:de:32:d5:cd:
41:c1:a8:6b:b4:77:8e:5f:72:68:10:f5:f5:0d:d3:1d:5f:01:
3c:77:3b:26:8d:ee:9f:e8:aa:5d:ea:9c:94:99:16:a1:11:fb:
14:7d:92:72:c2:35:05:70:9f:a7:93:14:13:9d:46:4e:2b:64:
1c:0f:fe:cc:67:19:f0:6c:1f:49:9b:7a:66:cb:43:4d:33:15:
43:a5:ab:32:e2:20:4d:b3:8b:f9:c3:b9:2d:78:aa:70:e5:31:
d8:e6:d9:00:9e:3a:9b:da:f8:d1:03:d7:07:cc:b0:fd:5b:66:
09:a2:bd:f6:cf:54:d6:cf:86:16:8f:ff:e3:95:cd:46:5b:9b:
6d:f0:43:ba:c3:da:9e:96:52:6f:fe:93:d2:87:ff:bd:bc:99:
83:b9:cf:6c:19:1e:5a:b6:3d:73:97:3a:cd:7c:fb:7d:f0:f3:
80:8e:e2:e7:38:af:66:b4:c1:3f:d7:af:20:68:4d:f8:88:3b:
66:2f:79:26:e5:07:6b:68:52:a2:8d:fa:52:f6:5e:10:7b:d9:
1d:dc:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org