Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nkRGheZLOjScumxKq2uoPYt6gIA.roa
File: nkRGheZLOjScumxKq2uoPYt6gIA.roa (raw, json)
Hash identifier: vyU13RHFvQqr1ObAQhCmucBXeiHNOtz05clewFaC+do=
Subject key identifier: 9E:44:46:85:E6:4B:3A:34:9C:BA:6C:4A:AB:6B:A8:3D:8B:7A:80:80
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01883A910DFFE86C2D9DBFF342969EC9A934
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nkRGheZLOjScumxKq2uoPYt6gIA.roa
Signing time: Sat 20 May 2023 19:09:24 +0000
ROA not before: Sat 20 May 2023 19:09:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.84.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.209.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3a:91:0d:ff:e8:6c:2d:9d:bf:f3:42:96:9e:c9:a9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 20 19:09:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e444685e64b3a349cba6c4aab6ba83d8b7a8080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d4:3d:11:b2:34:73:89:ee:7a:08:0e:d7:31:
f1:fc:ab:03:5b:49:d1:a5:f2:b1:26:c9:1b:4a:f5:
ba:b4:03:a7:f9:35:92:77:c6:9c:69:2d:2c:7e:a1:
4b:5e:d0:ec:06:c2:4e:34:2a:3b:d6:57:b4:d7:ad:
03:02:e5:74:dd:4c:bf:fa:1b:8b:25:7f:dc:c1:90:
97:1e:76:4c:46:53:94:6d:8b:9a:c3:4b:f7:12:72:
7d:f1:8c:d1:79:e1:93:4f:e6:a9:1d:ab:2d:88:61:
6d:98:ae:e0:c7:27:f7:aa:81:9d:cd:c8:e4:53:1d:
2f:5e:75:83:e5:ef:a4:60:71:4f:c7:7c:0c:a0:03:
f2:9f:68:e7:8f:33:6d:d4:47:7a:ae:78:40:7e:1b:
bf:a2:16:ab:48:be:22:1b:42:66:1c:75:e6:69:52:
0b:95:cc:d3:8c:b1:07:59:bd:90:1e:a7:eb:d2:f5:
da:27:b3:42:ce:1e:03:3e:33:0a:6f:b6:00:9d:62:
3c:a2:1e:bc:f3:da:4d:3b:15:7d:2e:a7:11:84:79:
37:47:e7:12:d7:06:c4:f4:6c:cd:e0:73:c1:bd:93:
f4:a9:3f:bc:1a:6e:6d:d0:9d:29:2d:70:fb:9f:e9:
da:c5:08:f1:c2:c1:4d:56:a3:2b:db:c5:f3:12:74:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:44:46:85:E6:4B:3A:34:9C:BA:6C:4A:AB:6B:A8:3D:8B:7A:80:80
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/nkRGheZLOjScumxKq2uoPYt6gIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.209.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.53.0-195.58.54.255
195.58.56.0/24
195.58.58.0/23
195.58.61.0-195.58.63.255
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.41.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.1.0/24
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
2e:ed:0f:fc:6d:68:79:be:98:e5:83:5d:e7:d8:d2:dd:53:70:
d6:76:26:8e:1c:60:b3:a5:bd:a5:76:22:74:6a:6a:c3:1a:7b:
2e:8d:09:a7:e0:91:34:d9:8b:2f:d2:f0:ba:16:60:32:90:c5:
49:85:80:c8:98:c7:4e:cd:67:7f:26:a0:ca:76:4b:f6:90:e1:
e0:a0:c9:50:d7:24:8e:d5:f9:79:bf:cf:59:01:66:b2:cd:bb:
9b:19:8f:2d:22:8b:a4:73:53:14:bf:fb:75:39:b7:00:99:74:
20:92:05:7a:5e:d1:bf:8a:0c:0f:11:60:2a:a7:4f:dc:37:34:
e9:74:03:99:63:ed:dd:50:fb:c7:4c:39:40:e3:c9:3b:4b:bb:
33:d9:74:0a:f6:f4:e3:56:58:ed:0e:bf:8e:65:36:ab:29:fd:
b4:2d:bf:b5:20:04:47:34:db:58:65:fe:75:fc:4e:77:91:dd:
ab:be:5d:7a:32:29:d4:36:31:8b:67:71:65:75:64:da:6e:d8:
0f:82:58:ab:15:15:cd:5e:f7:3d:89:bd:7b:1e:72:f7:00:37:
05:e6:2e:ed:dc:2d:89:12:80:f2:9a:3e:40:19:9e:97:7c:ba:
6e:75:b4:51:3a:f5:4a:79:9e:1e:1f:59:bf:9c:e5:06:fe:2a:
a5:17:a5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:11 2023 by rpki-client on console-fra.rpki-client.org