Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYY_J3JBVQdi_ENSY3ur8IR6UX4.roa
File: eYY_J3JBVQdi_ENSY3ur8IR6UX4.roa (raw, json)
Hash identifier: yFqKLXe3qlNYvcLF90vnd71QkZEvwufr5XmB8Uay/Rg=
Subject key identifier: 79:86:3F:27:72:41:55:07:62:FC:43:52:63:7B:AB:F0:84:7A:51:7E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018601429F7A88D30FD3C1CD88874210E0AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYY_J3JBVQdi_ENSY3ur8IR6UX4.roa
Signing time: Mon 30 Jan 2023 05:59:48 +0000
ROA not before: Mon 30 Jan 2023 05:59:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 23
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:42:9f:7a:88:d3:0f:d3:c1:cd:88:87:42:10:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 05:59:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79863f277241550762fc4352637babf0847a517e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:a9:b4:d6:f4:20:70:54:2d:70:eb:0d:f8:
1a:c5:3f:6c:69:17:00:e2:b8:23:73:4f:8a:d6:0d:
a8:b4:73:b3:b5:c5:a7:8a:a4:85:97:bc:bf:bc:a5:
95:1b:93:58:db:f0:4a:2a:04:7b:e7:db:b9:40:d5:
08:48:3f:01:df:a8:7e:16:f3:bb:bc:3d:49:7f:91:
da:f9:da:12:94:1e:e0:a5:48:07:15:af:ba:d2:f2:
8a:0b:2b:86:4b:86:b5:3f:48:e3:fc:92:c0:0d:91:
72:ca:91:6d:0d:db:94:5a:09:57:61:6e:33:40:38:
e5:4e:b4:bb:c8:b5:da:0a:3d:b2:25:2f:da:62:b0:
98:71:22:9a:f5:0a:ac:6b:9b:74:a0:99:68:20:a6:
b9:18:0e:f3:c9:93:d3:07:37:07:d8:78:66:2b:93:
f0:d7:e3:04:60:90:f4:30:fd:5e:53:9d:b1:d7:de:
eb:a6:70:06:c8:17:19:b5:f4:0b:ec:c1:82:62:ef:
ee:75:67:8e:84:37:cc:a7:5a:03:b6:97:67:44:80:
8f:08:b5:32:91:2c:21:4d:cb:93:49:b1:38:e3:1d:
ad:24:23:87:c4:50:b5:b5:c4:1d:bf:3e:73:20:59:
b3:5a:22:4c:4c:05:92:d6:b2:2b:24:44:c4:7f:88:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:3F:27:72:41:55:07:62:FC:43:52:63:7B:AB:F0:84:7A:51:7E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eYY_J3JBVQdi_ENSY3ur8IR6UX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.44.0/24
193.124.80.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.42.0/24
194.87.56.0/24
194.87.73.0/24
194.87.76.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.130.0/23
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/24
194.87.178.0/23
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
56:5d:d0:a1:a2:90:a7:fa:ce:83:88:60:3b:9e:9b:e6:1a:8f:
03:14:47:3f:ca:dc:7f:9e:96:b9:19:49:87:0e:8c:18:6e:a5:
f1:9a:2e:73:1c:d0:52:cd:03:89:cf:da:98:d9:3c:bf:29:dc:
d6:cf:cc:85:1c:dd:7e:58:ae:96:20:16:74:88:26:4c:0a:5f:
b3:c9:b5:f3:3e:d4:b6:e5:58:49:07:28:c0:27:6e:64:a5:e0:
09:7d:fe:8e:27:21:43:97:dc:33:11:b8:54:ed:8a:c4:29:8c:
e3:db:07:24:1a:d9:ad:16:d9:b6:b7:2a:6f:3b:0e:e6:1f:23:
b4:32:10:28:67:98:35:af:06:43:1a:61:82:e4:51:fa:40:18:
ca:54:68:24:51:78:d3:21:22:61:b6:f3:d5:c0:d2:bc:ac:38:
65:b4:16:9e:7f:24:07:f8:b9:84:32:27:ab:ca:42:f7:97:45:
de:d5:31:1e:f4:07:28:f5:94:7e:bb:09:f6:2f:cd:cf:95:5a:
ca:94:db:b9:c3:d9:43:27:00:b2:f5:de:47:c3:40:01:ff:46:
34:6b:fe:6c:2f:01:3a:14:3f:b7:d9:74:72:64:38:97:e0:22:
e1:9a:aa:01:85:6e:61:8d:e7:21:c2:72:33:e8:19:34:be:3a:
07:27:4c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org