Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ok_999RKW2yhf6opJrlyOX5Eaig.roa
File: ok_999RKW2yhf6opJrlyOX5Eaig.roa (raw, json)
Hash identifier: doqgosd1PNYw1X4q9zJf3miQxf0S23j6PG6A1d3I/hM=
Subject key identifier: A2:4F:FD:F7:D4:4A:5B:6C:A1:7F:AA:29:26:B9:72:39:7E:44:6A:28
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C8D4FF1331F73FB5235F80B18558A901
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ok_999RKW2yhf6opJrlyOX5Eaig.roa
Signing time: Thu 19 Jan 2023 07:01:20 +0000
ROA not before: Thu 19 Jan 2023 07:01:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:d4:ff:13:31:f7:3f:b5:23:5f:80:b1:85:58:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 19 07:01:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a24ffdf7d44a5b6ca17faa2926b972397e446a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b8:9e:4f:94:39:57:4e:0f:03:34:32:26:63:
3b:29:3c:d4:89:e9:de:bb:b4:d0:3a:42:f8:8b:33:
a5:8a:2b:ae:2c:ec:69:cd:55:a0:c1:2d:1c:67:74:
36:8a:42:c8:7a:3e:1f:14:ca:a6:ae:d2:4a:15:6a:
96:04:93:cf:43:1f:ab:09:78:79:3a:b4:5b:d1:42:
9f:9f:63:61:8e:c2:f6:57:b2:db:a4:3d:cc:05:bb:
1f:65:5a:35:02:6d:9f:b2:a5:b9:db:fc:3b:fe:54:
85:fb:2a:5d:ed:eb:ec:69:76:fd:5e:44:b7:8f:a9:
bc:e2:64:bf:47:0d:a7:76:bf:0e:f5:38:d9:b9:86:
8d:76:89:f5:11:b6:c6:34:ae:17:40:65:84:3a:91:
6b:58:7f:af:ef:9c:3a:f6:e0:6f:f7:bc:88:e6:a2:
35:21:02:ff:b9:bd:28:e6:ce:11:10:fa:42:1f:28:
a4:1c:fa:57:17:a6:00:c1:76:70:09:33:8a:30:ac:
88:6f:ff:ce:78:eb:bf:4f:b3:17:20:22:c8:b0:63:
e3:de:06:8c:5f:e0:a1:e9:42:80:51:97:77:55:70:
26:8a:ae:c6:0d:e3:5f:94:1b:0b:85:6b:35:9c:29:
23:3b:7b:f1:9b:e8:b7:0e:11:64:17:a3:c5:2c:76:
df:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4F:FD:F7:D4:4A:5B:6C:A1:7F:AA:29:26:B9:72:39:7E:44:6A:28
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ok_999RKW2yhf6opJrlyOX5Eaig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.11.0-212.193.12.255
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:e3:4e:a3:de:a0:ee:76:cf:00:e6:1d:fe:f4:21:a5:55:05:
16:43:e8:9a:64:d5:04:a2:94:3e:f0:e9:92:ec:e4:78:58:80:
10:26:6a:01:bf:d0:a2:e6:69:4f:89:61:53:ca:c6:50:2d:ce:
b3:5c:4e:59:90:48:35:1f:39:a6:e5:c9:13:75:15:18:bb:ee:
5e:c2:4f:85:22:88:6b:b2:29:bd:a5:3a:38:1d:60:d1:49:c7:
25:39:e6:1e:f7:25:91:40:13:e5:23:5d:82:b8:6b:7c:95:41:
59:88:7c:47:47:ba:32:5b:5d:8f:d6:4a:39:ca:77:9b:31:03:
78:c7:d8:61:4b:37:11:68:fa:bf:52:a8:3f:b1:02:f3:df:f0:
19:5c:ac:e6:73:03:a5:dc:36:59:2c:89:2c:a4:5d:70:d7:db:
2a:31:98:fa:70:ad:03:2b:82:7f:48:5c:dd:d5:9c:95:8d:4c:
2e:20:d0:53:b8:8c:84:c7:23:d3:1f:d2:00:34:3f:fd:9b:c3:
7e:c2:24:7a:81:7a:ac:22:27:73:00:b9:be:fe:44:d6:3e:7e:
ee:9f:1b:e3:82:b8:49:74:6e:e3:e6:bb:b1:42:c1:97:1d:d6:
28:3f:90:31:df:73:ee:28:ad:39:ab:51:53:0a:35:d6:83:d5:
44:30:b4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org