Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cwAu3V8eXxjJdp7mhoDmtEn-JrM.roa
File: cwAu3V8eXxjJdp7mhoDmtEn-JrM.roa (raw, json)
Hash identifier: AduIS3toMPNYQkM6i5kMVHjfsmbeYr+2yeZ9tLBOoCo=
Subject key identifier: 73:00:2E:DD:5F:1E:5F:18:C9:76:9E:E6:86:80:E6:B4:49:FE:26:B3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187216A4C91DEC3D730D4B98601FC1C049E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cwAu3V8eXxjJdp7mhoDmtEn-JrM.roa
Signing time: Mon 27 Mar 2023 04:53:47 +0000
ROA not before: Mon 27 Mar 2023 04:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:21:6a:4c:91:de:c3:d7:30:d4:b9:86:01:fc:1c:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 27 04:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73002edd5f1e5f18c9769ee68680e6b449fe26b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f1:dd:c2:53:7b:5f:a9:e8:b9:78:54:76:51:
95:09:9c:3e:58:7f:40:da:97:a2:82:bf:b4:8c:e5:
ab:1c:fd:d7:db:f0:75:25:2b:8b:a5:c3:6c:0c:d5:
6e:52:3c:a0:8e:66:53:7d:cb:36:78:b0:ce:c3:f5:
b6:4d:ea:8a:41:58:f5:8c:46:ff:7f:20:0a:30:53:
31:ba:fd:41:d3:db:3a:bf:38:d1:5a:32:23:41:f5:
15:27:80:e4:34:7a:aa:e9:57:46:2f:6c:6d:04:0e:
1c:ac:d9:3d:79:19:b6:1e:8e:c6:a6:aa:52:8e:39:
70:74:01:b4:7c:f2:2a:4e:a9:78:a4:8c:d7:84:b6:
76:9d:5a:9a:69:59:52:a6:c2:d2:4a:9d:9c:25:4d:
4d:1d:53:80:28:5e:1e:f4:64:6a:1d:5d:fb:ed:15:
2a:9f:36:83:1e:fe:c9:9a:15:1a:99:37:66:3b:ab:
dc:c8:c6:b4:d8:98:5a:be:f2:66:f9:85:92:41:31:
d6:e7:38:b8:bb:7f:c7:c5:1c:eb:45:ea:6e:33:d4:
95:10:fc:0f:b0:4f:96:a0:70:6b:bf:0a:64:70:ed:
ff:b9:93:22:74:58:1c:d5:95:d4:b0:b2:1c:f6:6c:
f5:fc:31:de:c5:4d:2f:6d:d9:1d:3b:e8:c5:af:8b:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:2E:DD:5F:1E:5F:18:C9:76:9E:E6:86:80:E6:B4:49:FE:26:B3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cwAu3V8eXxjJdp7mhoDmtEn-JrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0-194.58.40.255
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.36.0/23
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/23
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.76.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3f:1a:25:c3:38:00:d2:bf:8c:12:eb:b5:d5:8e:ba:73:38:
b2:94:fb:4d:3c:f6:5a:fe:c1:7a:90:97:00:74:8d:fc:98:ab:
d4:39:9d:36:63:9f:74:b9:98:60:cb:b9:3a:d5:d8:37:21:b5:
c1:dc:ba:d6:54:67:0c:ea:0d:2a:d4:69:85:78:c2:be:17:f6:
cd:22:c1:66:dc:0e:c3:f4:55:0e:ae:a5:dc:2b:0d:55:e5:2d:
1a:ec:b7:d9:66:1b:65:7e:0c:4c:29:42:2e:5b:93:30:0a:61:
34:9d:bb:63:cd:11:c7:24:d8:21:03:de:1d:57:6d:70:fa:76:
35:7a:a7:2c:bf:16:a7:c9:19:42:78:e8:d6:72:86:61:df:b6:
33:59:07:64:52:10:69:44:cd:d7:c5:6a:ed:8b:4a:49:c6:e3:
2d:2f:4d:de:61:e3:9f:0d:01:f7:26:9f:d3:d5:55:a3:5a:f7:
b1:21:32:b4:df:53:19:a5:fb:d6:81:6d:60:25:6d:cd:7b:76:
6a:d7:a4:a5:60:44:0c:e4:01:db:6c:fd:a2:5f:8e:38:33:d8:
8e:e7:35:da:2b:5b:20:c0:3f:b8:69:da:4a:2d:b0:fe:1a:ba:
b3:5e:6d:83:77:5f:40:2b:8c:89:6f:02:5b:c7:84:3e:4f:03:
67:09:9a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org