Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ofm6nitp-hgGlxH48b4fntk1bKQ.roa
File: ofm6nitp-hgGlxH48b4fntk1bKQ.roa (raw, json)
Hash identifier: HcQPhGQgjWObyYk6EBvviRqYXAKT9u5Jhr5S7us6iko=
Subject key identifier: A1:F9:BA:9E:2B:69:FA:18:06:97:11:F8:F1:BE:1F:9E:D9:35:6C:A4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A31CCABD19FD140D1752672531863D186
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ofm6nitp-hgGlxH48b4fntk1bKQ.roa
Signing time: Sat 26 Aug 2023 12:23:31 +0000
ROA not before: Sat 26 Aug 2023 12:23:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 62.76.226.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
212.193.31.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:31:cc:ab:d1:9f:d1:40:d1:75:26:72:53:18:63:d1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 26 12:23:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1f9ba9e2b69fa18069711f8f1be1f9ed9356ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:15:80:5c:6a:4d:ec:19:e7:c9:03:63:aa:67:
7a:86:8b:a6:2f:7c:85:e7:51:0a:d4:24:11:a5:1e:
e4:3a:28:19:42:81:31:51:2c:d4:48:16:c0:18:49:
f7:a1:70:3d:3a:39:72:70:9b:26:80:8a:81:90:a8:
4b:84:d3:9e:2c:e4:14:d8:02:2f:d2:66:0d:2d:04:
8b:fc:a6:f6:fa:67:0d:f7:bb:e7:82:f6:c3:9b:68:
8d:4d:ee:b1:bb:81:e6:e9:05:f0:1d:19:3a:36:98:
e3:68:ad:cb:9e:ff:c1:9d:08:10:32:29:fb:8e:98:
a9:cb:62:ed:1f:4d:9a:58:09:40:ca:f4:63:98:c8:
7d:e1:5a:65:cd:10:28:7e:cf:a8:84:71:34:84:76:
89:14:e7:dd:5d:39:aa:ee:6d:52:b6:da:ea:4f:d5:
7d:3c:c3:23:d9:1d:6a:b2:11:55:a3:fb:1e:dd:ed:
d8:3e:5f:e1:eb:52:23:c1:3d:66:57:03:39:c7:05:
45:a3:24:19:c4:ae:58:5f:1a:c7:39:ca:fc:85:06:
3b:a5:8f:6e:6b:fa:10:3f:64:f4:31:e7:a8:44:85:
c6:32:6a:f3:1d:d7:ba:e8:b2:6f:4b:79:ab:04:90:
65:0e:67:ee:2e:5f:fd:ea:82:20:e0:bf:25:7e:48:
db:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:BA:9E:2B:69:FA:18:06:97:11:F8:F1:BE:1F:9E:D9:35:6C:A4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ofm6nitp-hgGlxH48b4fntk1bKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.38.0/24
194.58.47.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0/24
194.87.3.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.34.0/24
194.87.36.0/24
194.87.40.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.119.0/24
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.176.0/24
194.87.179.0-194.87.180.255
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/23
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.26.0/24
195.133.30.0/24
195.133.73.0/24
195.133.84.0/23
212.192.8.0/24
212.192.241.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:10:c7:91:14:c1:6e:de:c3:e7:d2:1a:1c:d1:fd:b9:33:c7:
99:8b:90:33:95:8c:0c:e7:1c:74:53:e3:27:44:e6:61:e6:e6:
bb:d9:b3:ad:4b:eb:51:b1:65:22:64:ec:8a:95:de:4b:fd:87:
3d:d6:00:1a:8d:f0:63:a8:12:34:31:7f:9e:f0:ed:e3:a4:e1:
e5:18:1f:53:61:fc:69:df:29:6e:34:e3:f7:4f:55:6a:da:6d:
50:3c:8d:76:15:24:14:91:5a:15:24:54:c8:c2:bc:16:ec:61:
fb:13:c9:90:03:26:0d:2c:1b:cd:39:42:eb:19:a3:de:16:21:
7d:b4:12:3e:96:ad:ff:a3:2d:0c:fb:f7:2a:27:06:0a:1f:25:
89:46:26:00:c4:87:c3:b4:1e:4d:62:1e:c3:95:92:3b:3a:fb:
61:a4:bb:18:81:8b:bf:16:7f:7f:da:bc:68:91:17:da:a3:3b:
bd:63:aa:8f:bb:9a:31:64:7a:cd:b0:17:75:2b:3a:14:0b:fb:
bf:e5:fb:36:0a:75:e6:dc:2f:61:00:dc:5c:31:f2:cc:eb:a4:
88:80:ab:4a:41:d4:94:a8:15:2e:98:a2:f1:82:93:e8:81:c1:
78:22:bd:2d:0c:4d:a8:79:90:16:91:38:da:b9:15:7e:6e:16:
0e:d0:df:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 26 13:07:11 2023 by rpki-client on console-fra.rpki-client.org