Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dDJeHbtn83tdFsiFSJgyfWEKyIQ.roa
File: dDJeHbtn83tdFsiFSJgyfWEKyIQ.roa (raw, json)
Hash identifier: rnGTdYo5KJTAgah97UrNhb6SbO/DLP8O48VmH+qokj0=
Subject key identifier: 74:32:5E:1D:BB:67:F3:7B:5D:16:C8:85:48:98:32:7D:61:0A:C8:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185971F75353CF4548CAB39ADC5A70D09BB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dDJeHbtn83tdFsiFSJgyfWEKyIQ.roa
Signing time: Mon 09 Jan 2023 15:21:39 +0000
ROA not before: Mon 09 Jan 2023 15:21:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.45.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:1f:75:35:3c:f4:54:8c:ab:39:ad:c5:a7:0d:09:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 9 15:21:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74325e1dbb67f37b5d16c8854898327d610ac884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:83:55:75:07:92:a5:b7:a4:f8:b0:6e:c0:
b6:ba:9c:95:fd:5f:43:dd:f6:1f:a4:a5:e8:13:50:
ea:8e:5d:b3:3e:2a:ec:60:9e:c6:7b:a6:61:c6:31:
a5:6c:38:ee:a9:26:a4:63:62:38:09:0a:d8:4b:4c:
88:5f:1e:0f:7d:7c:f1:b5:ce:d3:9c:d7:d9:35:5e:
93:04:34:dd:c2:dd:ab:b7:c4:ea:b4:67:59:d8:99:
3f:88:82:6b:cb:14:2a:9c:9d:4f:2c:a3:75:72:42:
a4:05:31:e8:ab:ae:84:3c:68:59:43:aa:d0:07:ee:
4a:9f:56:47:ad:1c:1d:e2:9a:af:5a:dd:cd:e8:6a:
cb:14:73:d8:2b:e6:6d:88:df:6f:22:db:7b:a7:f0:
37:81:3c:69:7d:e0:06:1e:08:82:48:e4:ba:d3:48:
76:80:71:16:38:8d:e0:8e:b5:10:c3:a9:64:c2:da:
09:06:06:ab:43:d7:4a:d7:5b:94:00:ee:31:7d:bd:
df:c9:5d:12:c4:9f:29:70:93:02:96:61:d0:ba:17:
b0:03:22:a0:6e:eb:1d:bd:43:8d:01:34:36:b0:dc:
b4:51:d4:1c:08:80:fc:2e:a2:22:25:15:d6:78:36:
91:3e:0b:29:3f:f5:ed:33:69:50:e0:62:c3:44:e2:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:32:5E:1D:BB:67:F3:7B:5D:16:C8:85:48:98:32:7D:61:0A:C8:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dDJeHbtn83tdFsiFSJgyfWEKyIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0-193.124.4.255
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.45.0/24
193.124.125.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.58.0/23
194.87.6.0/23
194.87.24.0/22
194.87.36.0/24
194.87.56.0/24
194.87.62.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.86.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.30.0/24
212.193.0.0/24
212.193.8.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
00:23:f7:c0:7f:67:b1:c1:ab:6d:59:71:ca:00:f0:41:71:a8:
0f:d8:24:50:1d:39:51:8f:8d:75:51:97:ce:d5:e2:4a:4d:b1:
30:b5:4e:e8:b7:8e:49:53:a9:3d:62:09:a8:95:6f:ce:6a:d6:
68:ae:f5:34:85:8b:bb:f6:fa:59:15:79:03:95:f9:9e:66:b8:
9a:d3:76:66:37:61:42:51:2f:cb:11:f3:40:68:dd:53:a1:fd:
e4:ce:7d:d5:15:70:bd:4a:54:06:8c:66:40:fe:55:5a:b2:12:
da:49:46:90:cb:f0:5a:7f:ff:b7:a9:d3:f0:20:80:35:49:d4:
c6:a1:50:64:8e:4b:fc:7f:c9:13:87:d9:87:fd:a8:19:11:25:
f0:13:67:a8:80:04:e1:65:c4:a4:80:37:54:86:d5:28:e1:c3:
3d:1f:b4:1f:1d:66:d0:02:9f:6e:ac:ae:0c:24:17:55:17:e1:
6b:bc:51:6d:33:be:66:af:72:c9:c6:72:e9:61:c5:e1:a0:56:
c1:c3:67:84:c8:54:4e:f1:2e:d5:42:86:66:c7:2c:ed:b8:8b:
1b:08:d7:41:29:28:ea:55:c8:5c:58:ba:f4:85:c2:b6:8b:3b:
bf:18:ae:38:b6:99:09:fa:0f:85:24:b3:5a:4c:71:9c:bc:45:
b7:93:e0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org