Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dPLXpTh4Q99ZyOAIWzDqAh5VFeY.roa
File: dPLXpTh4Q99ZyOAIWzDqAh5VFeY.roa (raw, json)
Hash identifier: GQmuoQPvG7c5ca899PzG8N0sleO3bjrKH1maSbojBVI=
Subject key identifier: 74:F2:D7:A5:38:78:43:DF:59:C8:E0:08:5B:30:EA:02:1E:55:15:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01866D9F8AC940B3E46BDB14AA15CE66D8A0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dPLXpTh4Q99ZyOAIWzDqAh5VFeY.roa
Signing time: Mon 20 Feb 2023 07:00:17 +0000
ROA not before: Mon 20 Feb 2023 07:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 23
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 10:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:9f:8a:c9:40:b3:e4:6b:db:14:aa:15:ce:66:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 20 07:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74f2d7a5387843df59c8e0085b30ea021e5515e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:54:13:04:a0:7e:e0:c8:60:c7:18:17:0d:8d:
20:6f:39:c2:b4:48:3f:fb:90:28:58:98:cc:d0:87:
05:1a:47:53:20:20:34:07:f9:ae:a3:e0:63:63:e5:
80:b1:05:ad:e9:18:60:09:60:e8:8e:db:86:4a:83:
b8:d1:82:4d:6b:ee:c5:66:b1:20:28:f4:79:25:d5:
85:c1:7e:4f:7c:9b:49:14:91:50:33:93:a9:6c:3c:
95:22:69:29:f2:2d:59:93:6b:1e:a8:5f:fd:2a:de:
10:0c:5d:b9:e0:37:1e:61:f8:7c:cd:ac:97:76:35:
a0:9a:f6:3b:d7:a2:48:68:d2:0e:08:46:a2:c5:10:
ee:61:9a:ec:6c:58:db:0e:e9:51:90:be:f5:af:1e:
7c:f0:d4:51:9f:a3:9e:e1:40:f3:63:53:13:10:f1:
6b:e0:05:87:2b:39:e3:b0:ad:22:b0:0b:94:24:69:
69:9d:43:e8:92:f2:63:08:09:a9:fd:b2:c6:d7:85:
a8:0a:30:61:2c:71:12:8a:3c:10:54:da:e2:19:2f:
95:b9:8b:9a:a7:ed:83:39:c3:85:d2:d7:b3:72:cf:
fe:64:d7:c0:06:b4:26:85:2a:25:4e:0d:07:ff:34:
67:80:0a:11:52:8c:aa:88:d0:db:f0:72:78:4e:b0:
c3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:D7:A5:38:78:43:DF:59:C8:E0:08:5B:30:EA:02:1E:55:15:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dPLXpTh4Q99ZyOAIWzDqAh5VFeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.37.0/24
194.87.42.0/24
194.87.56.0/24
194.87.73.0/24
194.87.76.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:01:bb:de:95:9f:60:c9:7e:54:9f:0e:3d:21:29:19:c4:c7:
41:8e:43:ca:19:35:40:db:dd:e0:e7:fa:60:06:74:0c:42:ef:
b4:c2:8b:7c:b9:2e:ac:23:ec:6c:22:fe:de:7b:41:88:e9:d4:
b9:d2:95:b7:78:6a:b0:52:95:75:26:fd:00:13:5e:64:a9:78:
6d:f7:70:d9:9c:24:8f:39:5f:82:8c:4a:c8:aa:a8:cc:7d:69:
90:c6:df:6b:7f:9e:51:6a:f0:02:87:3a:9c:e1:16:78:44:11:
7a:f5:11:bf:1c:ba:29:29:6e:1a:5d:1c:31:57:28:4a:5f:41:
74:7d:c2:d4:5e:6e:4f:64:cb:58:9b:28:ff:bd:7b:69:b2:0a:
46:7a:60:b8:da:ce:06:e0:2a:6c:51:5f:79:82:51:54:e3:20:
0c:e8:b7:f5:29:e4:ef:04:e1:a5:0f:ca:90:b8:e7:73:fe:10:
48:35:aa:60:5d:df:20:6c:15:61:f5:d3:a8:77:eb:60:c3:d9:
80:1b:23:cc:db:38:4d:aa:11:2b:f5:ef:87:b9:39:b9:ed:21:
ac:7a:b8:c6:9a:b3:ea:e9:af:d8:d3:c9:8e:7a:c3:49:21:33:
56:d5:54:67:a9:b4:62:4f:d0:bf:c1:bd:ea:db:b4:de:c9:f2:
ed:54:7d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:22 2024 by rpki-client on console-fra.rpki-client.org