Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mTnE3pPA3te3TzXw6ixjYZ5LyIs.roa
File: mTnE3pPA3te3TzXw6ixjYZ5LyIs.roa (raw, json)
Hash identifier: hGTnCBY3CtONA7bZ/Xza5wuvcUmeRdtJh7bSeQ/rTro=
Subject key identifier: 99:39:C4:DE:93:C0:DE:D7:B7:4F:35:F0:EA:2C:63:61:9E:4B:C8:8B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185B5E47FACEE2D744610A780D195AC355A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mTnE3pPA3te3TzXw6ixjYZ5LyIs.roa
Signing time: Sun 15 Jan 2023 14:45:29 +0000
ROA not before: Sun 15 Jan 2023 14:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Jan 2023 18:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:e4:7f:ac:ee:2d:74:46:10:a7:80:d1:95:ac:35:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 15 14:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9939c4de93c0ded7b74f35f0ea2c63619e4bc88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ea:f4:50:38:0d:fe:3c:8a:b8:82:90:2a:5a:
a8:06:e2:46:20:43:2c:76:ca:a0:68:83:b7:18:b6:
fc:f6:f1:97:2c:c7:de:25:4f:cc:19:ab:55:ab:89:
03:d4:de:70:ad:01:19:82:ee:64:b4:23:09:1d:f7:
60:b8:72:44:11:6e:33:14:8b:2d:6c:e9:1d:d7:fd:
18:8f:57:90:2e:e1:5c:fe:bf:46:39:b4:99:d2:e4:
22:3b:a3:b7:dc:b2:72:0b:aa:7a:82:b8:bd:0a:0f:
aa:47:b2:c2:64:b6:1e:fd:c1:2c:35:c9:92:c6:73:
b0:da:9c:5a:9d:43:ce:eb:f5:5b:95:b4:da:0f:a3:
02:0e:a2:c3:aa:ab:e1:b4:0f:eb:eb:2f:3f:d4:58:
e3:13:42:7c:a2:8c:f2:6b:d5:26:02:5f:06:03:c5:
64:e6:b1:37:23:32:a4:52:4a:bb:6b:85:64:ff:b6:
39:b9:86:c2:df:dc:f4:1a:92:31:b0:f8:db:dd:b2:
7e:24:72:85:90:cf:ab:23:a7:b6:f0:09:d7:0f:26:
fe:a7:18:1a:19:87:ca:fb:de:46:3d:8f:a1:eb:d2:
68:19:46:75:c4:23:19:38:a9:3a:26:fd:da:06:70:
44:76:d7:9c:0c:ef:db:ba:47:07:64:77:d1:3a:d1:
86:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:C4:DE:93:C0:DE:D7:B7:4F:35:F0:EA:2C:63:61:9E:4B:C8:8B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mTnE3pPA3te3TzXw6ixjYZ5LyIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.47.0/24
193.124.133.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.58.155.0/24
194.87.6.0/23
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0/24
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.86.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.30.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7a:12:f9:23:3a:ad:5d:06:64:dc:c1:22:81:86:36:19:3e:
0b:a8:20:3f:dc:4c:2a:5c:bc:61:83:af:20:e4:3e:f9:aa:34:
e9:03:ef:6c:77:ed:e7:6e:20:63:80:e0:5e:fd:10:ab:96:ba:
85:c3:24:d1:70:d7:e3:bd:68:2d:78:d7:95:7b:9f:b2:de:a2:
22:aa:5d:4f:18:68:4d:bc:67:c8:e9:69:37:28:b0:a8:46:7b:
7a:fb:8b:f3:b2:db:98:47:c0:a8:92:a3:92:3d:a3:73:91:03:
34:54:5f:2a:9b:5c:33:cb:89:5a:10:62:07:d3:e3:03:4a:f4:
bb:1e:77:49:4e:88:9b:88:43:31:c6:30:ea:94:59:de:8f:9a:
9a:af:ec:f8:8a:49:81:07:5a:43:66:65:05:21:84:0a:2c:be:
60:ac:40:df:b0:dc:98:49:0f:f7:cc:89:2f:74:9c:43:97:b5:
35:62:84:e7:bb:56:db:aa:e4:c7:7a:18:a1:44:2d:bf:4f:52:
09:ff:77:7e:18:47:db:ea:25:3f:a6:8e:74:af:4b:eb:9c:23:
6d:eb:ab:f8:03:7d:33:7f:38:ae:63:db:90:75:a4:d6:62:de:
a9:8f:46:d4:2a:bc:29:fe:cd:60:68:50:bd:39:a6:11:01:0a:
28:7c:63:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:25 2024 by rpki-client on console-fra.rpki-client.org