Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZ4tqaaVjzyPwrS1YptCSvXNkx0.roa
File: mZ4tqaaVjzyPwrS1YptCSvXNkx0.roa (raw, json)
Hash identifier: V9nRA4yU3YqlPK4H7RR8tymZNtbgpT9v3kQwhM3XAqM=
Subject key identifier: 99:9E:2D:A9:A6:95:8F:3C:8F:C2:B4:B5:62:9B:42:4A:F5:CD:93:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C7AEE9A4F9C8DDEF6C3F7D2F12028443
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZ4tqaaVjzyPwrS1YptCSvXNkx0.roa
Signing time: Fri 28 Apr 2023 11:45:41 +0000
ROA not before: Fri 28 Apr 2023 11:45:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Apr 2023 11:43:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:ae:e9:a4:f9:c8:dd:ef:6c:3f:7d:2f:12:02:84:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 28 11:45:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=999e2da9a6958f3c8fc2b4b5629b424af5cd931d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:40:a5:cc:3d:59:16:cb:2e:60:b8:51:43:
70:ea:1f:00:31:3e:d5:71:84:13:08:b8:fc:e3:30:
8e:38:4d:db:33:aa:84:01:07:bc:78:40:9c:b7:0a:
d2:35:0d:89:08:b2:f8:7f:69:b9:08:1b:22:e3:10:
e5:bb:a6:82:57:55:53:43:a3:1c:49:08:e5:3f:67:
f9:6a:5c:c9:db:53:b9:0f:c3:55:8d:08:a3:4e:91:
00:ac:b0:b0:d1:65:d4:cd:6e:d2:82:5d:ee:2a:9c:
4a:a9:b6:e0:f8:b5:2a:31:aa:ab:40:67:5a:92:b3:
5f:fa:9d:94:82:c8:43:6a:cc:04:9c:1a:c0:6a:2a:
36:85:09:ad:5b:56:a7:c7:25:f2:68:b7:c8:07:05:
3d:52:ae:ea:3e:2b:47:d5:4c:9c:fb:fd:76:4d:9f:
94:04:8a:6d:5d:b1:83:ff:df:5b:e6:b9:c4:4a:84:
49:3c:c9:59:e3:c4:9c:c0:b2:dd:62:ac:01:8c:ad:
4a:03:29:3b:26:f4:1f:6c:c6:15:77:40:d4:28:1e:
8b:8e:a7:0c:01:d8:e9:86:2b:ad:8a:fb:49:8f:55:
8f:9a:31:bd:f6:53:0a:83:78:0c:b1:02:ce:46:6e:
d6:a9:ed:a5:34:00:d9:5b:ce:1a:96:96:3d:a4:c0:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:9E:2D:A9:A6:95:8F:3C:8F:C2:B4:B5:62:9B:42:4A:F5:CD:93:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mZ4tqaaVjzyPwrS1YptCSvXNkx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.190.0/24
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0-193.124.202.255
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.85.251.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0-195.133.20.255
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.40.0/23
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
74:96:37:8b:b0:18:da:bc:8b:22:f4:73:6c:c2:79:23:ed:cc:
34:e0:54:c0:f0:60:f1:95:ad:b4:8b:ce:09:50:cb:8d:f2:23:
ce:7a:a5:75:99:ba:93:fb:17:97:d1:41:10:df:83:03:d6:44:
7d:a6:a3:07:29:44:e5:e4:e7:53:a5:10:78:32:a8:81:07:45:
d6:83:67:d5:18:5a:e5:f9:b6:fd:c1:d2:8d:d9:07:25:e9:9c:
a5:74:b0:00:bc:cd:28:ef:59:67:d8:eb:a3:1c:55:30:9a:a7:
2e:d9:81:be:cd:c3:fa:e6:69:66:f0:06:f9:33:7a:1e:6c:b8:
8d:6f:a9:0f:c8:c7:02:67:f9:a2:fd:17:08:83:5e:86:b2:ac:
0c:1a:84:7c:14:43:16:97:07:e7:c9:7d:24:33:55:e2:80:8b:
16:03:5d:61:1b:e7:8c:dc:08:7f:94:b3:85:1b:93:f5:0a:5a:
72:01:85:9d:9a:98:0a:e3:60:c6:6c:52:8d:fe:95:fe:e8:c1:
8f:fd:fb:c8:2f:b6:a9:b8:cc:5a:02:6f:be:e4:8f:a5:ac:30:
86:e0:69:22:fa:7a:3f:50:22:6f:c2:0f:53:2e:28:e1:31:a3:
a6:96:c6:82:25:c0:97:b9:7a:63:e8:9a:e9:68:be:2a:f9:a6:
db:84:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org