Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fHHly_O-UIRXoaSlMl6HfCKB9H0.roa
File: fHHly_O-UIRXoaSlMl6HfCKB9H0.roa (raw, json)
Hash identifier: ZUcwFVRI9YVRakun1GIYtH2VLgVT4hU3a6zfEwxAK8E=
Subject key identifier: 7C:71:E5:CB:F3:BE:50:84:57:A1:A4:A5:32:5E:87:7C:22:81:F4:7D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018FC89D9A3D12897734FE9165EE0AEE0816
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fHHly_O-UIRXoaSlMl6HfCKB9H0.roa
Signing time: Thu 30 May 2024 08:28:42 +0000
ROA not before: Thu 30 May 2024 08:28:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44477
IP address blocks: 62.76.226.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.2.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.85.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.59.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 15:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c8:9d:9a:3d:12:89:77:34:fe:91:65:ee:0a:ee:08:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 30 08:28:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c71e5cbf3be508457a1a4a5325e877c2281f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:f1:9e:8b:33:89:7a:1d:3f:3b:aa:d7:f5:
9a:87:57:b2:2a:48:27:b5:8b:52:f8:2e:46:bf:f8:
1f:32:d5:87:a6:a9:3d:c7:a9:ca:52:c2:7e:fb:a0:
7d:ce:a4:9c:53:0d:1d:65:2a:84:96:1b:3a:8b:9a:
b8:81:66:e3:cd:c7:75:68:23:cd:50:8c:0e:37:c6:
e3:bc:40:7e:e9:42:0a:82:1a:05:09:c8:d3:94:60:
af:47:0a:bd:d4:89:26:48:56:a2:65:76:d6:af:59:
79:f3:86:31:91:92:6d:0e:b7:e0:d6:eb:26:4f:f4:
1c:4d:be:fa:52:fc:49:a0:38:51:c0:62:a5:c3:3c:
76:05:ad:c1:7e:c5:c6:dd:8c:1a:bd:7e:d2:1a:f0:
ce:1e:92:3d:81:9d:4e:22:76:18:e2:e4:c1:22:94:
aa:6f:34:6d:aa:a5:42:65:b6:a7:ab:e9:09:37:1c:
6f:61:ec:a1:4a:0a:05:5d:2a:c0:ae:b6:90:e5:9c:
12:39:ab:64:d3:6c:bf:88:45:44:bf:ea:c5:af:24:
e5:39:6d:27:cc:15:08:8a:42:ed:70:36:80:76:37:
47:90:5b:7c:fe:4a:3b:d0:26:70:ad:af:0a:0e:7b:
b0:cc:64:4c:e8:5c:99:42:b6:3c:2d:ae:ba:a7:70:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:71:E5:CB:F3:BE:50:84:57:A1:A4:A5:32:5E:87:7C:22:81:F4:7D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fHHly_O-UIRXoaSlMl6HfCKB9H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
62.76.231.0/24
62.76.235.0/24
193.108.115.0/24
193.124.2.0/23
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.49.0/24
193.124.91.0/24
193.124.94.0/24
193.124.201.0/24
193.124.226.0/23
194.58.38.0/24
194.58.43.0/24
194.58.46.0/24
194.58.58.0-194.58.60.255
194.58.67.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.23.0/24
194.87.34.0/24
194.87.36.0/24
194.87.42.0/23
194.87.53.0/24
194.87.63.0/24
194.87.78.0/24
194.87.85.0/24
194.87.105.0/24
194.87.116.0-194.87.121.255
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.180.0-194.87.182.255
194.87.205.0/24
194.87.230.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.58.0/23
195.133.80.0/24
195.133.82.0/24
195.133.195.0/24
212.192.0.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
212.192.241.0/24
212.192.247.0/24
212.193.10.0/24
212.193.15.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c4:6f:5a:fd:42:e6:75:53:ac:94:31:f8:a6:94:89:08:af:
fb:d4:2e:0d:80:a7:65:47:d1:6c:e6:b9:f4:41:83:a8:91:d5:
43:c9:4b:4f:d7:1e:8e:fb:fe:f9:17:05:07:88:04:8f:0c:68:
75:03:27:6d:c8:33:05:11:4c:fe:e0:b0:f4:c9:1e:e6:43:eb:
ef:e4:40:19:ef:7f:29:fb:9d:3c:4f:f3:e3:cb:ba:a9:f3:4a:
5e:f5:71:5f:eb:07:69:11:cf:ef:32:8d:d5:61:49:61:c5:47:
75:01:fb:05:5d:98:e7:31:6b:63:53:49:e5:ae:15:8f:5b:a0:
52:be:77:3a:db:6d:ef:87:03:1e:e4:06:04:67:24:64:f2:f7:
8b:70:d5:b5:66:33:6d:e2:d0:91:c4:bc:bf:00:2c:a5:31:f2:
46:2a:10:4e:5a:6e:91:60:64:46:d4:ef:02:b6:52:d6:a3:fb:
86:67:79:0c:7d:fa:01:92:e3:1e:fd:4f:2b:9b:e8:13:8e:23:
8a:6e:cb:1d:e5:50:d3:e6:a3:90:d7:40:ba:ce:88:a3:bb:58:
ea:00:e8:7a:24:79:8c:ae:0a:62:54:f7:c6:9d:7e:dc:c8:89:
05:9a:e1:e1:4e:55:0e:60:55:97:d1:30:5c:b1:7c:68:1b:9f:
08:d6:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:59:36 2024 by rpki-client on console-ams.rpki-client.org