Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa
File: qbBZncJsgsgYIoB6-_AJbZljV1c.roa (raw, json)
Hash identifier: a9DOoPzabKc+dHgHZ62KLdn2K63/Sn2RpBNiTih9W8Q=
Subject key identifier: A9:B0:59:9D:C2:6C:82:C8:18:22:80:7A:FB:F0:09:6D:99:63:57:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01889E5D922FC2233680EA090CE08531C964
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa
Signing time: Fri 09 Jun 2023 04:15:12 +0000
ROA not before: Fri 09 Jun 2023 04:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.22.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9e:5d:92:2f:c2:23:36:80:ea:09:0c:e0:85:31:c9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 9 04:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b0599dc26c82c81822807afbf0096d99635757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:35:f1:2b:70:90:65:cd:29:d3:31:28:df:da:
48:1f:e1:c4:42:94:74:37:8f:21:f4:3f:a9:8d:3c:
e2:fe:d6:1a:ae:ee:73:11:32:ea:b1:6c:2a:a4:28:
70:54:92:f1:8e:77:c8:b7:81:53:71:4c:4e:08:7b:
ac:15:4b:a6:a4:e2:05:38:b9:95:56:45:00:97:79:
cd:8c:9e:a0:bb:7b:1b:e0:4a:d2:27:ec:59:5f:6b:
12:e2:a0:07:a9:83:b5:5c:8b:3a:f9:ac:a6:50:0c:
08:61:0a:34:af:61:55:d3:33:b9:d1:33:73:09:fa:
77:ba:0e:90:ea:4f:bd:ab:ac:df:ef:72:38:6d:3c:
cf:91:a2:19:77:3d:5c:6f:92:c1:e4:0b:75:96:6a:
0a:e9:ac:ba:fa:74:41:d2:11:cf:64:d4:bb:25:78:
66:2d:80:6a:31:03:4a:60:62:ba:0b:2c:3d:89:53:
a2:ff:ed:ae:78:39:9c:a2:7f:d7:cf:1f:e7:e4:4d:
a8:e5:86:44:a4:5f:17:23:ab:64:88:3b:30:a4:ce:
5b:5d:7d:a6:f1:ec:93:df:af:81:93:27:c4:04:59:
8e:27:7b:3e:fa:a4:23:9b:9f:5c:2d:0d:c5:15:bd:
b0:9a:fb:50:e9:7a:d7:eb:c3:17:67:b3:45:88:4d:
f9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:59:9D:C2:6C:82:C8:18:22:80:7A:FB:F0:09:6D:99:63:57:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbBZncJsgsgYIoB6-_AJbZljV1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0-192.124.191.255
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.16.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0-193.124.202.255
193.124.204.0/24
194.58.38.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.105.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.149.0/24
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.176.0/23
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.19.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
7d:78:3f:22:16:b5:ba:49:da:91:6d:bf:ea:f1:31:bc:3e:45:
ca:e9:04:5e:d5:e1:8d:94:d4:19:b1:23:9d:d4:f8:4f:13:3b:
94:ce:7b:a0:ff:82:d8:f7:48:e4:2f:5d:64:78:c3:e9:8d:6a:
e4:6a:4e:42:ea:82:a7:d2:e0:90:b6:84:17:45:62:e7:ef:f4:
68:9b:7b:06:b0:01:bc:c5:c5:1e:1f:8a:77:b1:93:02:ed:29:
84:4e:97:01:d5:8c:fc:3d:e8:3d:f6:00:ac:63:44:59:04:bd:
0e:b3:6f:de:ae:d0:ba:cf:16:b7:4c:7c:55:33:3c:a5:c9:f0:
7a:66:a7:ab:44:78:86:4f:0c:de:d8:30:40:52:71:22:d2:d6:
81:51:3d:60:3d:7a:24:bd:3a:f8:6e:63:fd:12:75:d6:49:ea:
a3:c7:9c:81:ef:d3:6a:c7:37:8e:5f:64:a3:65:b2:e1:bc:36:
66:91:9f:e1:f1:0f:93:b2:ff:99:22:13:3f:99:2d:17:f6:6d:
24:1d:c6:b0:e9:f5:27:c1:54:2e:0c:12:0e:4f:94:6b:8e:35:
52:07:8d:d4:11:8a:88:80:40:43:a3:4b:a3:70:ff:fa:dc:cc:
cb:68:d8:b7:48:44:76:b2:f6:cd:b0:7a:8e:83:58:a7:cd:bc:
0e:f5:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org