Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p_DQ0rV8TkzHeyFYH2b1zL2sxzs.roa
File: p_DQ0rV8TkzHeyFYH2b1zL2sxzs.roa (raw, json)
Hash identifier: 6+k/WeBw5UAZp0jbBo0ylFMHjKS6/qf+EiT+ArSfoq8=
Subject key identifier: A7:F0:D0:D2:B5:7C:4E:4C:C7:7B:21:58:1F:66:F5:CC:BD:AC:C7:3B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01859FA0943D227E6023D75DEAE6D4E3DE22
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p_DQ0rV8TkzHeyFYH2b1zL2sxzs.roa
Signing time: Wed 11 Jan 2023 06:59:39 +0000
ROA not before: Wed 11 Jan 2023 06:59:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
193.124.125.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:a0:94:3d:22:7e:60:23:d7:5d:ea:e6:d4:e3:de:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 11 06:59:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7f0d0d2b57c4e4cc77b21581f66f5ccbdacc73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:56:21:31:ac:3a:29:c9:08:3f:cf:8c:d4:
b2:bc:bb:6e:60:eb:e6:7f:e9:0b:ad:e6:a5:64:2e:
a9:14:3e:f3:ee:df:88:b2:c6:e1:26:2c:70:38:1d:
16:69:2c:1e:62:dc:08:f4:e4:f7:05:ea:ea:80:f8:
a3:58:e9:e4:45:8b:b3:97:5b:e6:20:de:e5:d5:fb:
34:fc:1f:36:4c:f7:a0:54:28:f8:58:65:dd:9c:b1:
8a:ad:cf:a8:45:c1:2e:57:22:75:57:1f:7c:8c:b5:
ae:a0:17:21:36:8d:00:db:ae:42:1b:cf:2e:07:1a:
1e:26:5c:b8:67:89:fc:fd:7e:18:1b:4d:79:ec:07:
a1:d4:8c:79:06:3b:6a:28:0b:c6:46:8c:99:44:3f:
c0:c1:3f:c1:82:46:e5:31:3f:ca:ef:a2:7b:c5:74:
48:28:95:fb:df:c7:74:b2:5e:d3:aa:9c:1e:be:7e:
d3:50:b4:2f:77:0d:e0:3c:fb:88:ff:e4:be:bb:0e:
da:a8:6c:f4:3b:63:68:a9:b5:ff:07:67:d7:42:6e:
bd:cc:66:a2:e1:99:87:8d:ef:b8:86:c2:c9:1f:4a:
2f:36:02:86:9a:d0:e4:8a:ba:ea:90:71:a6:ef:fe:
5b:0b:ce:93:90:5f:38:8f:32:78:76:2d:a4:2b:15:
69:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F0:D0:D2:B5:7C:4E:4C:C7:7B:21:58:1F:66:F5:CC:BD:AC:C7:3B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/p_DQ0rV8TkzHeyFYH2b1zL2sxzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0-193.124.4.255
193.124.6.0/24
193.124.8.0/24
193.124.18.0/24
193.124.125.0/24
193.124.133.0/24
193.124.201.0/24
193.124.203.0/24
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.6.0/23
194.87.24.0/22
194.87.36.0/24
194.87.56.0/24
194.87.62.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.182.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.86.0/24
195.133.94.0/24
195.133.195.0/24
212.192.0.0/23
212.192.30.0/24
212.193.0.0/24
212.193.8.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b6:4c:d2:14:a4:4d:fb:b5:4f:1f:90:54:09:7d:56:2c:b3:
64:40:e5:03:a0:56:2f:f2:83:c9:a8:0c:e1:0e:a0:f4:cb:9a:
8e:55:0f:23:77:3d:76:93:a2:f5:42:e2:8b:6d:80:a1:f0:61:
a8:77:10:93:db:79:8d:64:5e:fa:8b:3a:a8:0c:90:db:5b:7d:
55:50:5d:3b:4e:08:bc:d7:ad:81:6b:ff:89:fd:cf:24:18:7f:
ef:f5:5b:37:f4:3a:8f:1e:26:cf:9e:f1:b4:c8:b6:b7:52:ee:
e2:94:f9:a9:b0:fe:90:f6:8c:63:e9:8f:39:5c:80:b7:14:6a:
b7:c8:54:95:b5:54:78:99:7b:6e:b6:b6:49:ba:e8:14:8c:46:
e9:cb:80:07:8f:7f:96:5b:2b:0d:2f:87:d6:e0:b0:32:45:90:
49:17:5c:8a:77:75:f9:a9:23:80:38:24:b9:5e:c9:16:12:2a:
cb:46:b8:38:f6:d7:cf:52:6f:5f:9f:88:ed:1e:41:8a:7a:29:
53:25:b8:85:21:86:a8:5b:a9:6d:b7:05:47:51:b5:ed:52:ec:
28:92:2a:da:e6:db:3f:d7:0c:7d:d8:88:e5:00:4a:f5:80:6a:
39:3d:c7:e7:8a:ee:fd:a7:d0:5e:d8:7c:02:45:02:35:2b:9c:
64:31:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-ams.rpki-client.org