Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qDxxTarnrcNmZii_4Qx9QeqEAvQ.roa
File: qDxxTarnrcNmZii_4Qx9QeqEAvQ.roa (raw, json)
Hash identifier: I5XxXINmi/y8Az5fJxw4SLYVchdQw9lCELwaqo2gXts=
Subject key identifier: A8:3C:71:4D:AA:E7:AD:C3:66:66:28:BF:E1:0C:7D:41:EA:84:02:F4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018972E304D8C1D7DF49C43D1284CF2285E7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qDxxTarnrcNmZii_4Qx9QeqEAvQ.roa
Signing time: Thu 20 Jul 2023 10:40:27 +0000
ROA not before: Thu 20 Jul 2023 10:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 10:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:e3:04:d8:c1:d7:df:49:c4:3d:12:84:cf:22:85:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 20 10:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a83c714daae7adc3666628bfe10c7d41ea8402f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f0:94:e0:43:91:19:5e:21:54:ce:7c:d1:14:
c8:19:0d:55:48:c4:56:7d:4c:9b:b9:27:45:2c:a6:
98:d3:f7:3d:09:1c:92:84:0f:78:0e:25:ce:20:ab:
64:94:61:5b:79:0c:fe:35:8d:73:cf:0f:b4:2a:ea:
ec:5a:8e:c7:73:28:dc:c1:7b:8f:b1:5c:6b:75:e1:
2b:d2:8e:8b:e4:e1:ce:4d:a5:3d:4c:3a:7e:b4:2c:
44:f0:db:8c:19:e8:3a:7e:b1:e8:65:80:81:8f:69:
d5:a7:87:8f:c9:dd:ce:36:40:f9:7d:f8:60:4a:e7:
07:e7:56:48:7b:0d:5b:f6:99:13:1d:af:af:54:5d:
c0:31:09:fe:87:60:47:04:76:2f:d6:9a:9e:fc:c3:
8b:94:45:46:de:27:1f:ca:e2:97:16:cb:3d:4c:21:
c0:bc:68:ae:ba:f3:6f:90:71:93:81:63:cf:ca:d9:
06:16:c4:30:f7:dd:e3:52:bd:74:44:7e:4e:e4:70:
7c:de:1c:f7:72:6a:02:db:8a:41:7a:34:38:c4:df:
53:d9:e8:31:b6:2f:62:57:99:be:24:e2:76:1b:be:
50:c2:d7:92:b3:df:bc:10:68:6a:11:df:34:ef:02:
0b:8b:51:ff:e0:31:00:bc:52:6f:47:83:84:83:bb:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3C:71:4D:AA:E7:AD:C3:66:66:28:BF:E1:0C:7D:41:EA:84:02:F4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qDxxTarnrcNmZii_4Qx9QeqEAvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.47.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.23.0-194.87.27.255
194.87.36.0/24
194.87.40.0/24
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.35.0/24
195.133.73.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
14:60:00:02:30:3f:05:b8:b8:63:33:1e:14:d5:2a:ce:39:6c:
df:c6:e1:5f:d4:a5:52:30:83:6b:13:c4:b0:3d:b3:88:ce:5a:
41:2d:b4:74:24:70:e2:db:df:8d:cf:60:24:41:15:58:8c:ac:
04:c4:4c:82:3a:19:34:42:bc:10:a3:0a:41:69:6b:a9:f2:33:
75:06:8a:49:2e:6b:1c:7f:ec:1c:0f:a9:03:7a:da:56:7f:96:
cc:c0:7d:e9:c2:c7:d1:40:95:76:17:82:16:5f:b8:70:fd:7e:
62:c8:f2:4f:29:cb:df:bc:38:03:84:e9:f6:63:a0:0d:9d:dd:
51:ff:12:fb:ce:73:12:9b:6f:03:74:87:6b:74:42:3c:65:65:
9d:3a:f6:19:4e:01:01:ff:b2:27:46:df:74:a4:9b:c2:5b:5a:
d6:7d:e6:32:c0:1c:11:a1:a7:9c:b8:22:1e:5a:07:75:f4:2b:
f9:9a:29:a9:34:aa:97:e6:08:ed:6c:13:61:6d:bb:c6:40:8d:
b1:eb:02:47:ec:60:94:cb:9a:27:0d:ca:87:8d:79:b5:1e:91:
3b:6f:00:02:7e:cb:0e:fe:c5:24:9a:40:ed:22:33:d9:5f:f6:
29:f3:16:0b:c7:60:8e:02:cb:53:d2:fd:05:88:e0:85:d8:79:
5f:57:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org