Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lCXjWwB22FPu7Tp8EmWL7NkhA5g.roa
File: lCXjWwB22FPu7Tp8EmWL7NkhA5g.roa (raw, json)
Hash identifier: 9VJFOlz9PcrrN1HLPQPypufPy5+vOc3bCirwikFlOo0=
Subject key identifier: 94:25:E3:5B:00:76:D8:53:EE:ED:3A:7C:12:65:8B:EC:D9:21:03:98
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018571CB3A8C62071BA327C5245F684B65E6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lCXjWwB22FPu7Tp8EmWL7NkhA5g.roa
Signing time: Mon 02 Jan 2023 09:23:42 +0000
ROA not before: Mon 02 Jan 2023 09:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.56.0/21 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 16:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cb:3a:8c:62:07:1b:a3:27:c5:24:5f:68:4b:65:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 09:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9425e35b0076d853eeed3a7c12658becd9210398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:6a:fa:c1:e0:08:d2:4f:62:7f:34:a9:77:
e6:b7:16:9d:f8:fe:31:0c:d4:7e:5c:ac:2b:22:f8:
62:d5:d4:30:ea:60:31:38:95:02:38:68:08:c4:d3:
a9:10:94:8d:38:9a:20:20:a8:7d:a2:d7:b2:74:36:
09:11:4d:ce:23:1f:ab:98:0d:54:4a:e2:dc:d3:3a:
60:27:14:4c:4f:0b:e4:43:18:d2:ad:0e:28:68:bb:
e6:32:39:80:d8:27:f8:d3:09:61:c9:1a:9b:cd:97:
1b:dd:42:ac:f6:5e:6a:1f:64:42:07:0f:05:62:78:
bf:25:6b:4f:cb:91:1d:15:f5:52:70:63:18:bd:fc:
c3:62:90:ef:73:63:24:49:b5:28:2b:f3:ba:c5:02:
eb:91:18:ae:6a:6c:08:64:73:3f:24:fe:bf:94:04:
a8:76:39:7a:23:6d:7e:cc:79:1d:30:c2:af:55:ac:
31:62:ad:ba:2a:c6:30:57:1c:33:13:d7:dd:fb:d0:
83:91:c6:eb:6b:43:8f:f4:ae:57:aa:08:31:d9:38:
ca:a9:bb:14:35:ba:13:a9:25:47:4c:54:5b:56:0a:
2c:02:a7:66:4f:7a:7d:e2:e1:99:93:e0:6b:ca:16:
a0:11:4e:0b:b4:4f:a6:3d:9b:75:0a:9e:e0:7f:37:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:25:E3:5B:00:76:D8:53:EE:ED:3A:7C:12:65:8B:EC:D9:21:03:98
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lCXjWwB22FPu7Tp8EmWL7NkhA5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0-193.124.4.255
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.125.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.58.0/23
194.87.7.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.116.0/24
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.10.0/24
212.192.222.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a7:d1:13:30:18:18:bb:c7:e5:85:68:8c:e8:2b:60:d2:14:
57:61:78:53:63:7f:6a:98:20:07:e5:83:03:63:f9:4f:0d:18:
b9:b1:35:f9:e4:60:fb:1d:e7:68:ce:78:46:60:9a:c3:96:eb:
62:de:de:fd:98:fb:a8:3f:01:9f:70:e6:7a:6d:6e:5b:c8:d3:
28:3f:0b:34:45:a5:b2:de:35:f8:7e:e5:73:5d:fe:21:27:e8:
eb:12:64:90:f5:a9:df:46:d7:c5:d9:98:02:5c:7b:8f:3c:21:
ac:d0:45:b7:b3:18:0b:70:ec:ea:cf:1e:69:13:cc:9f:98:7c:
20:f8:a3:8e:98:1c:fe:ec:bf:80:3e:5f:c8:0c:cb:7a:74:1f:
98:3f:7f:fe:e4:b4:b6:80:3e:7f:18:c8:c2:57:e7:0c:9f:82:
bb:5a:06:10:02:3e:db:23:55:92:a4:cc:4b:ca:be:f7:d3:b9:
6b:ba:ad:d7:cf:3f:d9:14:0a:c6:2e:2e:c8:80:be:36:b6:2d:
22:da:d5:d4:05:02:d9:fe:2c:fe:ab:86:84:b0:8d:5d:28:60:
12:70:c7:75:30:aa:7d:12:14:ad:49:4d:c4:a8:62:ca:54:f9:
8e:8c:f9:70:a4:d0:2c:e7:ef:00:4b:59:90:a8:06:18:7e:fa:
7c:33:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org