Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uFgkv0919cdv9bNW2poffRiKwWI.roa
File: uFgkv0919cdv9bNW2poffRiKwWI.roa (raw, json)
Hash identifier: TvmVL8Gr75Pm66dOGT94CL3Sw5n807e+5GXiSXRbKSc=
Subject key identifier: B8:58:24:BF:4F:75:F5:C7:6F:F5:B3:56:DA:9A:1F:7D:18:8A:C1:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C0E8E65A7F22E609B2785629A89D5621
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uFgkv0919cdv9bNW2poffRiKwWI.roa
Signing time: Thu 27 Apr 2023 04:11:41 +0000
ROA not before: Thu 27 Apr 2023 04:11:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.22.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.64.0/22 maxlen: 22
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.181.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Apr 2023 09:08:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c0:e8:e6:5a:7f:22:e6:09:b2:78:56:29:a8:9d:56:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 04:11:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b85824bf4f75f5c76ff5b356da9a1f7d188ac162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:40:57:8f:7f:00:72:9b:94:48:69:05:f7:
cd:57:dc:12:f9:47:b6:5e:95:37:76:0e:3c:7e:f6:
93:00:b5:c4:34:8f:92:de:eb:64:25:15:39:f2:ed:
17:6d:1c:e5:20:1b:95:30:4e:e6:52:6c:e8:38:01:
26:74:3d:4e:18:1a:cf:ae:6e:1a:d4:fc:fc:54:db:
0c:ee:f0:7d:01:04:fe:27:93:27:06:f1:4e:f0:0a:
f1:ff:3d:c5:a1:ed:bb:e6:69:27:cd:5e:d1:e1:29:
51:1b:87:9a:2a:01:23:9d:78:22:f5:b6:46:be:08:
76:29:a8:df:88:e3:33:b8:2c:74:17:85:51:c7:8b:
c8:91:31:56:07:b3:1d:a2:23:4c:5c:ad:83:bb:09:
8d:b7:59:38:75:7a:43:ba:b2:2c:95:22:0d:ff:9a:
41:d0:8c:44:c9:7e:0e:45:cd:e1:b6:f7:66:bc:57:
8b:ad:c7:17:5f:73:6e:46:fc:63:75:f2:5d:49:72:
ad:de:0d:c2:a7:2f:bd:b4:2f:88:50:0f:5a:58:45:
11:4c:7d:9b:79:f3:64:90:31:73:d6:0e:cf:7f:cc:
1c:11:ab:5c:18:e7:0e:b5:41:7f:e3:fe:00:1f:f9:
9f:7c:25:cf:54:99:86:f2:d7:83:3e:01:bd:c8:3c:
69:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:58:24:BF:4F:75:F5:C7:6F:F5:B3:56:DA:9A:1F:7D:18:8A:C1:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uFgkv0919cdv9bNW2poffRiKwWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.49.0/24
193.124.80.0/24
193.124.90.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
193.124.204.0/24
193.124.226.0/24
194.58.40.0/24
194.58.42.0/24
194.58.47.0/24
194.58.59.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.6.0/23
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0-194.87.27.255
194.87.37.0/24
194.87.43.0-194.87.44.255
194.87.51.0/24
194.87.56.0/24
194.87.63.0/24
194.87.73.0/24
194.87.77.0-194.87.78.255
194.87.83.0/24
194.87.104.0/23
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0-194.135.24.255
194.135.46.0/24
195.58.35.0-195.58.36.255
195.58.51.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.20.0/24
195.133.22.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.64.0/22
195.133.74.0/24
195.133.76.0/24
195.133.79.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.248.0/22
Signature Algorithm: sha256WithRSAEncryption
89:7f:09:15:4f:9c:4b:5f:f1:98:7f:95:9f:50:66:af:4d:87:
ab:56:14:bd:b4:d5:20:1d:81:b0:2e:ee:31:5e:04:93:7d:b1:
e8:23:7b:2a:df:3e:e3:4e:7e:6c:6a:f7:2e:52:d8:93:a0:29:
9d:e2:56:2c:12:df:ec:77:21:87:61:8b:1c:ad:d8:a7:b9:a4:
1c:c6:85:f9:8d:ef:33:93:da:9e:84:ef:d7:ed:3e:ce:86:df:
13:56:23:be:e0:95:a3:2b:bb:f8:d3:e7:fa:a9:98:70:35:c5:
73:72:17:94:5a:c8:28:3e:27:42:74:bc:88:d1:1f:31:99:5e:
85:d2:eb:4c:92:d5:df:55:71:59:68:ee:a4:b5:27:d9:6f:a7:
e4:84:b3:b2:ea:2e:1e:f7:fa:ae:8c:99:25:c6:a3:f4:4a:ae:
26:db:65:d2:e2:fa:d1:4a:90:d6:7c:12:79:c9:f3:b4:bb:a0:
82:a7:df:04:2e:df:fd:f9:4a:36:8e:07:f4:20:4f:d8:bd:8a:
c0:4b:06:1c:e4:98:d4:d1:5a:a6:09:c5:34:ee:63:6c:04:41:
f3:85:92:e6:70:6f:5d:ea:6c:5b:21:ab:8e:72:33:2c:c5:ad:
ee:fb:fe:a0:e1:6d:60:72:7b:59:8f:c0:1a:50:57:ed:aa:34:
e8:12:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:49 2024 by rpki-client on console-ams.rpki-client.org