Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jC4cXmxk9W5pRoupdfQKH4GFsG8.roa
File: jC4cXmxk9W5pRoupdfQKH4GFsG8.roa (raw, json)
Hash identifier: 60INCeKLr79U358V/zQjM/IvGkVGW1QksAIlNEgccD4=
Subject key identifier: 8C:2E:1C:5E:6C:64:F5:6E:69:46:8B:A9:75:F4:0A:1F:81:85:B0:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0190B22654EF7CB74911B67988DA786FC826
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jC4cXmxk9W5pRoupdfQKH4GFsG8.roa
Signing time: Sun 14 Jul 2024 16:49:34 +0000
ROA not before: Sun 14 Jul 2024 16:49:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.233.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.56.0/23 maxlen: 23
194.58.66.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 17 Jul 2024 05:53:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b2:26:54:ef:7c:b7:49:11:b6:79:88:da:78:6f:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 14 16:49:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c2e1c5e6c64f56e69468ba975f40a1f8185b06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:1f:48:0f:60:c3:17:67:84:fe:a3:67:a4:
0d:3e:ab:09:a0:27:62:bc:0a:34:c7:d4:67:49:8e:
d8:c5:93:49:bf:c6:17:f9:bf:4c:72:03:02:a5:c8:
b3:a3:fc:da:43:f3:5a:b8:ce:46:77:09:97:76:19:
3a:af:dc:ba:8e:69:ef:cd:4c:d2:81:c9:23:2d:9c:
67:df:53:5b:46:70:76:0d:f5:8c:e2:cd:62:36:74:
0c:6a:88:86:ac:14:63:4a:1e:08:d7:a6:83:7d:b5:
1e:96:a1:2f:a0:9a:fa:1f:59:51:3d:ce:55:66:dd:
d5:97:cc:41:30:09:ee:48:ba:cf:07:9d:08:81:57:
92:41:a6:8b:d4:9e:77:46:23:ff:0c:c1:87:4e:4a:
fd:ea:4d:71:db:57:6f:c0:75:bb:d6:c9:dc:2c:2b:
1b:70:53:07:3f:6c:31:7e:bd:5a:b7:a0:23:75:57:
38:00:21:39:2e:e2:5c:0d:57:21:99:32:dc:ca:f0:
0a:0d:2a:a5:a1:4b:d5:44:1e:7b:25:43:3f:2a:11:
ad:5c:1c:cf:a2:62:55:60:91:35:22:7d:46:81:b9:
6c:d5:d1:ee:2c:3a:77:b3:2f:d9:50:5a:29:63:57:
db:32:b1:c0:1e:a3:0e:73:3e:50:12:c2:93:a7:f8:
7b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2E:1C:5E:6C:64:F5:6E:69:46:8B:A9:75:F4:0A:1F:81:85:B0:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jC4cXmxk9W5pRoupdfQKH4GFsG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
192.124.209.0/24
193.124.17.0/24
193.124.36.0/24
193.124.44.0/24
193.124.47.0/24
193.124.204.0/24
194.58.41.0/24
194.58.44.0/24
194.58.56.0/23
194.58.66.0/24
194.58.155.0/24
194.58.223.0/24
194.87.44.0/24
194.87.49.0/24
194.87.51.0-194.87.52.255
194.87.54.0/23
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.128.0/24
194.87.130.0/24
194.87.133.0/24
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.233.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0-195.58.38.255
195.58.63.0/24
195.133.8.0/23
195.133.15.0/24
195.133.18.0/24
195.133.21.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.39.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.214.0/23
212.192.223.0/24
212.192.246.0/24
212.192.248.0/24
212.193.1.0/24
212.193.5.0/24
212.193.24.0/24
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
32:4b:24:d4:e8:f6:c1:4d:51:b9:45:24:68:3d:c3:5a:ff:57:
80:10:7c:9b:29:bb:ac:1c:98:bf:df:c2:43:55:fa:60:cf:65:
c5:01:5e:56:83:f7:94:35:b6:dd:25:14:f7:eb:52:9b:9f:14:
4b:60:0e:3b:a1:7d:bc:08:6a:58:09:90:66:f5:7e:f8:f9:2e:
57:d1:06:9d:c7:0c:c4:39:76:52:43:f6:2b:e0:52:24:31:4e:
9a:00:3d:88:96:ef:89:fb:2b:47:86:50:36:9f:a2:ff:3d:4c:
09:fa:50:71:08:a7:d9:90:98:53:98:89:62:0f:2f:01:8e:43:
94:a3:b2:cd:9a:d3:8e:88:14:3e:ee:ca:67:89:66:c0:66:19:
e5:79:2f:d3:8a:90:32:7c:38:e0:0f:c0:b3:02:1d:53:4b:11:
14:81:84:98:ba:aa:43:1c:a3:94:05:31:5f:4c:6f:52:b6:ad:
8a:a1:dd:be:38:39:13:9d:a3:05:3b:9f:8b:95:dd:92:56:43:
3f:e0:a7:4c:66:4c:40:96:7c:f7:b5:ca:20:51:b4:95:28:25:
f1:55:80:39:2a:a6:88:29:ff:5d:83:63:96:b5:eb:93:22:ee:
07:15:c1:4c:39:26:c7:c8:ed:6e:25:d1:cb:3e:bd:6c:34:60:
bf:7f:53:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 08:08:13 2024 by rpki-client on console-fra.rpki-client.org