Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tzRyKnecmbk0RbgMxkFbrQJmg5c.roa
File: tzRyKnecmbk0RbgMxkFbrQJmg5c.roa (raw, json)
Hash identifier: IEzn2XvE+H3Xax6K3VExGq97kGCo7Qkf1kRKP6v/mmU=
Subject key identifier: B7:34:72:2A:77:9C:99:B9:34:45:B8:0C:C6:41:5B:AD:02:66:83:97
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186BB856A1C46C5EDDAAD5731AFF8E5C0CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tzRyKnecmbk0RbgMxkFbrQJmg5c.roa
Signing time: Tue 07 Mar 2023 10:02:08 +0000
ROA not before: Tue 07 Mar 2023 10:02:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Mar 2023 11:13:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bb:85:6a:1c:46:c5:ed:da:ad:57:31:af:f8:e5:c0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 7 10:02:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b734722a779c99b93445b80cc6415bad02668397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c1:d8:0b:8d:7e:ee:6b:ed:d0:a1:a6:0d:ab:
ca:06:84:9d:d1:56:ef:55:d3:22:4a:9f:7f:8b:ac:
b6:0c:e7:83:89:16:93:27:16:6d:27:a2:8b:e2:8f:
57:df:df:39:5f:b0:f6:27:cc:a7:25:73:aa:d1:b8:
75:47:6a:c5:80:3a:24:1f:86:08:c1:97:42:e2:a6:
ba:cc:b6:36:de:94:62:0f:5e:a8:92:82:81:1a:9e:
2c:0e:b2:01:82:4d:fd:18:0b:da:60:f5:a9:4b:f3:
47:60:49:fe:63:d5:08:a7:ea:3a:0c:76:bb:10:bf:
e4:b3:36:14:bb:08:1a:ec:84:e9:1c:47:67:f6:3f:
88:ce:d3:5f:d6:88:75:54:34:01:b4:24:e4:e1:14:
af:a8:15:3e:86:3a:c4:38:d5:0b:97:0e:c1:08:c0:
b3:c7:89:c9:d5:b7:ca:7a:c5:6e:69:e1:71:a1:23:
a5:f8:e7:9c:ae:39:18:1e:d1:a1:8a:1c:d5:bf:a1:
ca:ba:1c:09:14:14:02:6c:c5:48:c3:7d:3e:f7:4c:
a6:24:97:fd:3b:25:83:50:45:c2:96:cf:91:0d:6b:
37:c6:1b:e8:14:6d:a0:70:ed:22:70:3e:6a:0d:1b:
f4:c4:e3:7b:d6:65:fb:16:db:27:36:9d:37:da:88:
6e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:72:2A:77:9C:99:B9:34:45:B8:0C:C6:41:5B:AD:02:66:83:97
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tzRyKnecmbk0RbgMxkFbrQJmg5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/23
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
44:d2:42:92:09:4f:55:70:93:46:18:08:67:7c:84:6d:4a:41:
f3:97:93:cd:c0:2d:8f:b5:40:5f:2c:7c:9c:20:9a:0a:11:7f:
71:e4:40:a2:ce:71:9b:6f:e1:13:3b:81:7a:cf:d2:ac:72:db:
a1:52:07:13:9f:eb:b3:d8:5a:e9:f3:26:02:75:f7:05:2b:e8:
a9:82:9f:33:ef:a5:4e:14:08:c0:08:82:a6:71:82:75:80:42:
2e:cd:b1:84:24:bf:35:b4:b0:3b:7c:47:d6:ba:05:33:06:e6:
e3:db:e6:e5:5f:38:3d:10:e5:8b:18:81:e3:a3:3c:fd:c8:5e:
c3:ac:ea:4d:94:8d:f3:b3:5c:d4:89:b6:ab:79:bf:4f:ce:57:
37:21:f8:38:26:57:4b:e5:e9:47:f3:5f:b5:bc:68:12:67:82:
ac:15:6e:b0:e0:5f:9d:4e:e2:0a:07:50:bc:0e:cf:8f:4e:bc:
3b:b0:64:a0:b3:9e:d5:8d:ff:20:9c:78:fd:4a:b2:1c:f7:99:
87:31:7f:5c:cf:80:99:0e:7a:c5:7a:d8:3a:b6:0e:39:82:e9:
be:3f:3d:77:0f:70:10:11:e9:a3:17:07:af:19:fa:53:a7:fd:
73:f4:56:f5:7e:19:ca:f6:14:a7:26:2a:39:8a:a9:e9:9a:48:
76:d6:01:ad
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgISAYa7hWocRsXt2q1XMa/45cDNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMzA3MTAwMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzM0NzIyYTc3OWM5OWI5MzQ0NWI4MGNjNjQxNWJhZDAyNjY4Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsHYC41+7mvt0KGmDavKBoSd0Vbv
VdMiSp9/i6y2DOeDiRaTJxZtJ6KL4o9X3985X7D2J8ynJXOq0bh1R2rFgDokH4YI
wZdC4qa6zLY23pRiD16okoKBGp4sDrIBgk39GAvaYPWpS/NHYEn+Y9UIp+o6DHa7
EL/kszYUuwga7ITpHEdn9j+IztNf1oh1VDQBtCTk4RSvqBU+hjrEONULlw7BCMCz
x4nJ1bfKesVuaeFxoSOl+OecrjkYHtGhihzVv6HKuhwJFBQCbMVIw30+90ymJJf9
OyWDUEXCls+RDWs3xhvoFG2gcO0icD5qDRv0xON71mX7FtsnNp032ohuOwIDAQAB
o4IDiTCCA4UwHQYDVR0OBBYEFLc0cip3nJm5NEW4DMZBW60CZoOXMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdHpSeUtuZWNtYmswUmJnTXhrRmJyUUptZzVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBnQYIKwYBBQUHAQcBAf8EggGMMIIBiDCCAYQEAgABMIIB
fAMEAD5M4QMEAT5M5gMEAD5M6QMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8BgMEAcF8
CAMEAMF8EAMEAMF8LAMEAMF8UAMEAMF8XQMEAMF8yQMEAMF8zwMEAcI6JgMEAMI6
LwMEAMI6OwMEAMI6QwMEAMJXATAMAwQAwlcDAwQAwlcEAwQAwlcHMAwDBADCVwsD
BADCVwwDBADCVxADBALCVxgDBAHCVyQDBADCVzgDBADCV0kDBADCV1MDBADCV2gD
BAHCV3IDBADCV3oDBAHCV4IDBADCV4oDBADCV5UDBADCV6YDBADCV6gwDAMEAcJX
qgMEAMJXrAMEAsJXsAMEAMJXtgMEAMJXuwMEAMJXvgMEAMJXyAMEAMJXygMEAMJX
3gMEAMJX8AMEAMKHEgMEAMKHFzAMAwQAwzojAwQAwzokAwQAwzoyAwQAwzo2AwQA
wzo4AwQAw4UAAwQAw4UaAwQAw4UeAwQAw4UjAwQBw4XCAwQA1MABAwQA1MAKMA0G
CSqGSIb3DQEBCwUAA4IBAQBE0kKSCU9VcJNGGAhnfIRtSkHzl5PNwC2PtUBfLHyc
IJoKEX9x5ECiznGbb+ETO4F6z9KsctuhUgcTn+uz2Frp8yYCdfcFK+ipgp8z76VO
FAjACIKmcYJ1gEIuzbGEJL81tLA7fEfWugUzBubj2+blXzg9EOWLGIHjozz9yF7D
rOpNlI3zs1zUibareb9Pzlc3Ifg4JldL5elH81+1vGgSZ4KsFW6w4F+dTuIKB1C8
Ds+PTrw7sGSgs57Vjf8gnHj9SrIc95mHMX9cz4CZDnrFetg6tg45gum+Pz13D3AQ
EemjFwevGfpTp/1z9Fb1fhnK9hSnJio5iqnpmkh21gGt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:28 2024 by rpki-client on console-fra.rpki-client.org