Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dp2qKs2ElzcwtE4gY64-HOEwDDA.roa
File: dp2qKs2ElzcwtE4gY64-HOEwDDA.roa (raw, json)
Hash identifier: 2W9x7sqvUG3IGHuzMbPxzSS5ptLxucT7YhhBNNG3yz8=
Subject key identifier: 76:9D:AA:2A:CD:84:97:37:30:B4:4E:20:63:AE:3E:1C:E1:30:0C:30
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019198BF59B08D23EDA85E922A3F1B939CB6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dp2qKs2ElzcwtE4gY64-HOEwDDA.roa
Signing time: Wed 28 Aug 2024 11:29:22 +0000
ROA not before: Wed 28 Aug 2024 11:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.233.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 29 Aug 2024 17:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:bf:59:b0:8d:23:ed:a8:5e:92:2a:3f:1b:93:9c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 28 11:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=769daa2acd84973730b44e2063ae3e1ce1300c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:51:fb:f5:c6:8b:c7:d1:df:6a:de:46:c8:
d5:06:c9:0d:0a:58:48:a0:81:ce:19:1e:95:fd:49:
39:ba:98:03:e2:f1:32:da:d2:c2:56:d2:21:4c:03:
8d:28:a3:ea:63:dd:2e:7a:55:fb:72:ae:2d:e7:57:
fa:d1:c7:c2:f2:47:51:49:5d:9c:7c:e4:ab:ab:34:
4b:69:90:5a:35:c3:2f:0c:7f:7f:4c:21:05:1c:32:
d0:b7:ee:75:d9:a9:f5:d0:1b:95:ac:35:60:59:67:
47:c2:6d:47:08:5b:63:62:0e:66:5e:b9:1e:11:b8:
6b:06:bf:9f:f9:8d:79:05:10:63:11:ee:10:27:21:
9c:6d:12:93:6c:8e:90:b4:72:b8:63:32:ce:21:2c:
2a:eb:0b:79:38:08:07:54:03:45:93:15:6d:03:b0:
06:96:e8:eb:7c:7f:6e:ea:cc:ee:97:a1:8e:df:74:
f8:0a:85:c5:a1:26:83:9a:94:6d:19:ce:f0:3e:a7:
78:11:68:63:07:7a:6b:02:1e:14:e5:5f:e9:ad:17:
6d:6a:7a:a3:e6:e6:51:5b:9d:9d:77:e3:6c:2a:94:
24:96:f7:e1:4a:af:49:35:24:d7:90:90:7c:d6:58:
d4:b8:39:c3:35:35:41:2f:ed:01:2a:5a:6b:3e:7b:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:AA:2A:CD:84:97:37:30:B4:4E:20:63:AE:3E:1C:E1:30:0C:30
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dp2qKs2ElzcwtE4gY64-HOEwDDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.124.47.0/24
194.58.57.0/24
194.58.155.0/24
194.87.26.0/23
194.87.44.0/24
194.87.49.0/24
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.133.14.0/23
195.133.18.0/24
195.133.21.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.217.0/24
212.192.223.0/24
212.192.246.0/24
212.192.248.0/24
212.193.24.0/24
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
73:e9:f1:ea:7c:58:f8:7a:09:fe:60:fb:39:b0:30:52:69:ff:
7e:70:81:25:c9:25:f2:77:86:09:2f:ec:6d:99:4f:e6:93:79:
94:9b:13:75:ab:5c:81:2b:0b:2f:72:9f:fd:b1:88:53:29:ef:
c8:68:a0:30:04:42:45:e2:70:8f:ba:37:8b:ed:d7:e0:71:99:
16:1b:a6:cc:27:5d:1f:df:de:2f:9c:a0:87:c1:71:43:d4:53:
a2:52:07:d2:11:d1:44:07:bc:81:0b:50:fc:75:f2:cc:6f:f8:
a9:31:36:11:38:f0:3d:8f:5f:0f:5a:0e:e3:ad:c4:e9:e5:09:
22:54:49:69:37:b2:bd:8b:24:85:6f:ad:69:c4:36:01:68:ae:
22:14:d0:4e:52:6f:fb:92:90:03:f5:00:6d:62:0f:2e:be:3f:
b3:0d:f5:be:b7:e1:9a:3c:e9:5c:de:a1:c3:0a:27:1e:5f:51:
2f:2d:8c:8b:40:f9:63:d3:6f:04:2f:d8:74:2e:b0:34:56:fe:
e7:4f:9d:82:67:f8:91:fd:b0:d6:9b:dd:47:0e:ce:57:79:88:
5e:dc:a0:63:52:31:4a:69:06:5a:8e:22:2b:9c:21:2e:aa:be:
ac:d6:b2:b4:b6:38:12:ec:30:11:63:15:8e:8e:e0:e1:1c:de:
86:c0:d8:45
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgISAZGYv1mwjSPtqF6SKj8bk5y2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwODI4MTEyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjlkYWEyYWNkODQ5NzM3MzBiNDRlMjA2M2FlM2UxY2UxMzAwYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0FR+/XGi8fR32reRsjVBskNClhI
oIHOGR6V/Uk5upgD4vEy2tLCVtIhTAONKKPqY90uelX7cq4t51f60cfC8kdRSV2c
fOSrqzRLaZBaNcMvDH9/TCEFHDLQt+512an10BuVrDVgWWdHwm1HCFtjYg5mXrke
EbhrBr+f+Y15BRBjEe4QJyGcbRKTbI6QtHK4YzLOISwq6wt5OAgHVANFkxVtA7AG
lujrfH9u6szul6GO33T4CoXFoSaDmpRtGc7wPqd4EWhjB3prAh4U5V/prRdtanqj
5uZRW52dd+NsKpQklvfhSq9JNSTXkJB81ljUuDnDNTVBL+0BKlprPnuCkQIDAQAB
o4IDZTCCA2EwHQYDVR0OBBYEFHadqirNhJc3MLROIGOuPhzhMAwwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvZHAycUtzMkVsemN3dEU0Z1k2NC1IT0V3RERBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBeQYIKwYBBQUHAQcBAf8EggFoMIIBZDCCAUoEAgABMIIB
QgMEAD5M6QMEAMF8LwMEAMI6OQMEAMI6mwMEAcJXGgMEAMJXLAMEAMJXMQMEAMJX
TDAMAwQAwldTAwQAwldUAwQAwldoAwQAwldzAwQAwleCMAwDBADCV4UDBADCV4YD
BADCV4oDBADCV4wDBADCV48DBADCV5cDBADCV6EDBADCV6kDBADCV7sDBADCV74D
BADCV8gDBADCV8oDBADCV9ADBADCV9cDBAHCV9wDBADCV+IDBADCV/oDBADChyYD
BADCh2kDBADDOiIDBAHDOiQDBAHDhQ4DBADDhRIDBADDhRUDBADDhRkDBADDhRsD
BADDhR4DBAHDhTIDBADDhT8DBADDhUkDBADDhVEDBAHDhVwDBADDhcIDBADUwAED
BADUwNkDBADUwN8DBADUwPYDBADUwPgDBADUwRgDBADUwR4wFAQCAAIwDgMFAyoB
V8ADBQMqDP9AMA0GCSqGSIb3DQEBCwUAA4IBAQBz6fHqfFj4egn+YPs5sDBSaf9+
cIElySXyd4YJL+xtmU/mk3mUmxN1q1yBKwsvcp/9sYhTKe/IaKAwBEJF4nCPujeL
7dfgcZkWG6bMJ10f394vnKCHwXFD1FOiUgfSEdFEB7yBC1D8dfLMb/ipMTYROPA9
j18PWg7jrcTp5QkiVElpN7K9iySFb61pxDYBaK4iFNBOUm/7kpAD9QBtYg8uvj+z
DfW+t+GaPOlc3qHDCiceX1EvLYyLQPlj028EL9h0LrA0Vv7nT52CZ/iR/bDWm91H
Ds5XeYhe3KBjUjFKaQZajiIrnCEuqr6s1rK0tjgS7DARYxWOjuDhHN6GwNhF
-----END CERTIFICATE-----
Generated at Thu Aug 29 18:06:28 2024 by rpki-client on console-fra.rpki-client.org