Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kHJMFqlLFZ8LZ5OrjXSrJYwvezQ.roa
File: kHJMFqlLFZ8LZ5OrjXSrJYwvezQ.roa (raw, json)
Hash identifier: /3dAHbCKTonHPVHoO+dcJVKYh7ovMrkMHKOt6XhLlK4=
Subject key identifier: 90:72:4C:16:A9:4B:15:9F:0B:67:93:AB:8D:74:AB:25:8C:2F:7B:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01888541A6FB2952B6A37DA6BAC96B4B1EA0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kHJMFqlLFZ8LZ5OrjXSrJYwvezQ.roa
Signing time: Sun 04 Jun 2023 07:14:12 +0000
ROA not before: Sun 04 Jun 2023 07:14:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 13:15:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:85:41:a6:fb:29:52:b6:a3:7d:a6:ba:c9:6b:4b:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 4 07:14:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90724c16a94b159f0b6793ab8d74ab258c2f7b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c6:d0:ab:e1:fc:53:9b:b2:9a:cc:bd:c2:30:
5e:6c:a1:ba:77:a0:5d:b2:80:70:02:d3:0f:95:ee:
12:2b:0a:52:b7:f9:0b:eb:80:26:13:7c:53:45:91:
70:1d:d2:32:09:04:26:27:f4:5b:99:2b:77:a2:87:
72:66:e9:de:7b:57:23:6f:05:59:b4:aa:e4:40:fa:
66:db:f7:3c:15:af:3f:3f:31:a9:bf:eb:b6:4b:db:
59:5f:0c:77:f2:28:ed:1e:8a:8d:b4:29:0d:c4:3b:
56:5c:1a:37:d2:77:04:f0:41:94:95:fc:71:da:c1:
0f:ac:e2:99:96:61:a9:c5:7c:20:38:3a:73:c1:d8:
e8:b0:fe:29:a6:e6:52:6a:59:ca:50:b9:cc:e3:22:
a9:5f:26:0d:25:b4:34:d4:98:56:3e:48:8a:b2:86:
f3:72:a9:27:56:e4:80:73:6e:17:d3:6d:1e:cb:38:
98:53:7d:71:24:8d:62:b9:ec:e2:36:49:da:9c:f7:
3b:2f:c3:be:5c:c4:78:f0:a9:6a:45:17:d9:c5:26:
48:df:6a:20:c0:15:43:0c:57:95:11:ba:1b:f9:25:
f6:e9:11:4b:20:fe:f8:62:28:c7:7a:78:b1:26:6a:
9f:51:a8:29:77:96:60:1b:85:cb:42:48:a6:5c:fa:
2a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:72:4C:16:A9:4B:15:9F:0B:67:93:AB:8D:74:AB:25:8C:2F:7B:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kHJMFqlLFZ8LZ5OrjXSrJYwvezQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
95:f4:14:7b:97:d1:69:14:fb:bf:1e:8d:9a:46:13:f4:c4:50:
86:df:bd:00:88:39:7b:43:42:35:62:e5:1a:2c:7a:54:27:cf:
05:39:39:f1:e6:63:20:90:43:59:7d:ac:0b:35:7c:3f:8f:5d:
ed:12:08:bb:4d:7f:dd:1c:f9:45:5d:0f:0c:c8:ad:7a:63:89:
aa:4d:c7:8b:cb:73:47:20:19:61:6e:ec:fc:64:c4:57:3a:1c:
3e:70:7f:40:77:af:f3:72:43:6d:17:42:9c:c2:24:d9:35:b5:
f2:a5:b1:1b:90:e0:43:36:bb:7a:07:12:29:87:f4:8f:44:aa:
62:c7:27:09:f7:9f:ec:cf:fd:66:e9:e0:e1:57:66:c8:8e:06:
fa:86:78:21:b5:2f:ec:bb:bd:32:ab:00:d5:97:b9:5d:a5:92:
6b:48:35:dd:2b:e5:ca:05:17:e3:9d:9d:38:38:24:9a:f9:0e:
d7:4f:12:1f:b8:37:6a:e1:24:4d:f7:7b:16:c2:bd:b6:e8:d8:
d4:0f:3a:f5:ef:8d:60:8e:09:c3:6b:30:38:ef:23:f0:5e:c4:
f0:95:a1:f3:cc:b3:0f:5c:02:f5:65:9d:a1:ac:8c:58:10:3a:
bb:7a:c5:9c:82:5f:3e:36:2a:3b:13:87:54:46:d9:85:d9:9f:
60:be:91:e7
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgISAYiFQab7KVK2o32muslrSx6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjA0MDcxNDEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MDcyNGMxNmE5NGIxNTlmMGI2NzkzYWI4ZDc0YWIyNThjMmY3YjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cbQq+H8U5uymsy9wjBebKG6d6Bd
soBwAtMPle4SKwpSt/kL64AmE3xTRZFwHdIyCQQmJ/RbmSt3oodyZunee1cjbwVZ
tKrkQPpm2/c8Fa8/PzGpv+u2S9tZXwx38ijtHoqNtCkNxDtWXBo30ncE8EGUlfxx
2sEPrOKZlmGpxXwgODpzwdjosP4ppuZSalnKULnM4yKpXyYNJbQ01JhWPkiKsobz
cqknVuSAc24X020eyziYU31xJI1iueziNknanPc7L8O+XMR48KlqRRfZxSZI32og
wBVDDFeVEbob+SX26RFLIP74YijHenixJmqfUagpd5ZgG4XLQkimXPoqtQIDAQAB
o4IEUTCCBE0wHQYDVR0OBBYEFJByTBapSxWfC2eTq410qyWML3s0MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEva0hKTUZxbExGWjhMWjVPcmpYU3JKWXd2ZXpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICZQYIKwYBBQUHAQcBAf8EggJUMIICUDCCAkwEAgABMIIC
RAMEAD5M4QMEAT5M5gMEAMB8qgMEAMB8sgMEAMB8tTAMAwQAwHy9AwQGwHyAAwQA
wWxzAwQAwXwDAwQAwXwGAwQAwXwIAwQAwXwQAwQAwXwxAwQAwXxQAwQAwXxaAwQA
wXxdAwQAwXx8AwQAwXyFMAwDBAPBfMgDBADBfMoDBADBfMwDBADCOiYDBADCOioD
BADCOi8DBADCOjsDBADCOpoDBADCOt8wDAMEAMJXAQMEAsJXAAMEAMJXBzAMAwQA
wlcLAwQAwlcMAwQAwlcQAwQAwlcSMAwDBAHCVxYDBALCVxgDBAHCVyQDBADCVysD
BADCVzgDBADCV0kDBADCV04DBADCV1MDBAHCV2gDBAHCV3IDBADCV3oDBADCV3wD
BAHCV4IwDAMEAMJXhQMEA8JXgAMEAMJXigMEAMJXlQMEAMJXoAMEAMJXogMEAMJX
pgMEAMJXqAMEAMJXrAMEAcJXsAMEAMJXswMEAMJXuwMEAMJXvgMEAMJXyAMEAMJX
ygMEAMJXzAMEAMJX3gMEAMJX8AMEAMJX8zAMAwQAwocXAwQAwocYAwQAwocuMAwD
BADDOiMDBADDOiQwDAMEAMM6NQMEAMM6NgMEAcM6OjAMAwQAwzo9AwQGwzoAAwQA
w4UAAwQAw4UTAwQAw4UWAwQAw4UaAwQAw4UeAwQAw4UgAwQAw4UjAwQAw4VKAwQB
w4VUAwQBw4XCAwQA1MABAwQA1MAIAwQA1MAKAwQA1MDxAwQA1MD0MAwDBADUwPcD
BALUwPgwDQYJKoZIhvcNAQELBQADggEBAJX0FHuX0WkU+78ejZpGE/TEUIbfvQCI
OXtDQjVi5RoselQnzwU5OfHmYyCQQ1l9rAs1fD+PXe0SCLtNf90c+UVdDwzIrXpj
iapNx4vLc0cgGWFu7PxkxFc6HD5wf0B3r/NyQ20XQpzCJNk1tfKlsRuQ4EM2u3oH
EimH9I9EqmLHJwn3n+zP/Wbp4OFXZsiOBvqGeCG1L+y7vTKrANWXuV2lkmtINd0r
5coFF+OdnTg4JJr5DtdPEh+4N2rhJE33exbCvbbo2NQPOvXvjWCOCcNrMDjvI/Be
xPCVofPMsw9cAvVlnaGsjFgQOrt6xZyCXz42KjsTh1RG2YXZn2C+kec=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:25 2024 by rpki-client on console-fra.rpki-client.org