Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uX6QU3fWCcjXaQNgDZDHlXWC2ow.roa
File: uX6QU3fWCcjXaQNgDZDHlXWC2ow.roa (raw, json)
Hash identifier: RZEmWbXb0TKzepAbudEGjBjHQYrOrvMq/GaO96AGwLo=
Subject key identifier: B9:7E:90:53:77:D6:09:C8:D7:69:03:60:0D:90:C7:95:75:82:DA:8C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C437F57AC79A55571017D66E4F49C86F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uX6QU3fWCcjXaQNgDZDHlXWC2ow.roa
Signing time: Wed 18 Jan 2023 09:31:19 +0000
ROA not before: Wed 18 Jan 2023 09:31:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
62.76.231.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.61.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.149.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.180.0/22 maxlen: 24
192.124.182.0/23 maxlen: 24
194.87.171.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c4:37:f5:7a:c7:9a:55:57:10:17:d6:6e:4f:49:c8:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 18 09:31:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b97e905377d609c8d76903600d90c7957582da8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a0:51:9e:43:87:7e:a2:f1:32:ae:97:e1:da:
fd:31:fe:0e:4f:c8:5b:14:6f:61:ee:5c:38:d5:a4:
3e:a6:7b:c2:1f:b0:ac:92:9e:29:dc:1b:1c:c8:dc:
20:98:ee:f0:a7:92:73:05:5d:16:40:11:5a:9c:21:
81:16:e3:d1:82:04:c3:de:5c:bf:b4:a4:5f:4d:c5:
5f:6a:20:8e:0b:85:e1:9d:cf:85:84:bd:70:00:8e:
ea:01:e0:65:11:5f:07:44:52:31:14:2a:94:d9:a1:
b8:41:64:54:b2:b7:eb:68:dd:ca:c7:f6:3b:af:ca:
4b:c5:d8:f9:d9:97:03:96:c6:4e:b7:9c:3c:ee:e5:
01:c2:b1:82:37:a0:9a:c4:bd:c4:57:6a:6f:47:72:
90:8d:a7:40:c2:cf:14:03:57:34:a0:dc:27:53:2a:
43:9c:ca:b6:d2:1e:f6:b3:3d:2f:85:34:93:56:cb:
ad:e7:9f:b5:2a:f5:e3:3a:06:77:1a:a8:cf:52:c1:
11:4a:77:f4:19:9a:ae:60:2c:f4:d5:7e:9f:07:e2:
12:9f:f2:77:d0:39:05:84:f6:ee:39:e4:fa:8d:82:
7d:39:fd:14:c7:56:3f:43:2a:c1:7c:7d:3e:0f:47:
7e:f9:de:55:9a:a9:f6:b4:9b:44:9b:37:94:40:46:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:90:53:77:D6:09:C8:D7:69:03:60:0D:90:C7:95:75:82:DA:8C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uX6QU3fWCcjXaQNgDZDHlXWC2ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.231.0/24
192.124.172.0/24
192.124.178.0/24
192.124.180.0/22
192.124.190.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.133.0/24
193.124.202.0/23
193.124.207.0/24
194.58.38.0/23
194.58.42.0/24
194.58.45.0-194.58.47.255
194.58.59.0/24
194.87.3.0/24
194.87.6.0/23
194.87.16.0/24
194.87.22.0/24
194.87.24.0/22
194.87.56.0/24
194.87.76.0/24
194.87.82.0/23
194.87.104.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.123.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.149.0/24
194.87.163.0/24
194.87.165.0/24
194.87.171.0-194.87.172.255
194.87.176.0/24
194.87.190.0/24
194.87.198.0/23
194.87.202.0/24
194.87.204.0/24
194.87.208.0/23
194.87.222.0/23
194.87.226.0/24
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.194.0/23
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.6.0/24
212.193.12.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
36:dd:e3:84:30:aa:ed:84:83:5d:5b:d7:e8:8b:b2:92:09:ce:
a1:d6:7e:a1:31:09:b4:43:e2:49:3d:97:02:b0:82:74:fa:b5:
71:19:71:0d:1f:a0:a9:be:ce:20:19:f3:e3:a3:ac:c6:20:f1:
21:35:f9:c9:d6:35:68:9b:97:40:61:fb:26:b6:08:fb:b8:bd:
6b:85:a6:b9:b1:14:d1:c0:c4:59:4e:53:f6:e6:33:4c:20:e5:
fe:16:fe:d1:13:d8:50:4a:d0:cc:13:0a:fe:6a:c1:de:6f:20:
25:9d:02:81:fa:cb:4a:dd:09:f3:a9:16:15:55:d0:31:bb:0e:
d5:42:ff:78:00:75:95:c1:5a:5b:b0:d8:60:97:71:14:38:fa:
e1:90:a6:75:3d:db:37:a7:dc:c3:3d:cf:0a:58:cf:fd:b3:dd:
20:35:29:ab:ec:27:63:19:3a:5e:53:d7:2f:23:1b:a8:d4:fa:
35:d5:ec:84:8f:89:9e:84:31:e1:f2:ce:8b:8a:6b:14:32:63:
d9:bc:02:b7:aa:fd:2b:d8:9e:4d:86:97:21:a8:fe:2a:31:fe:
23:8f:0e:a5:e2:34:09:9c:a0:f7:0f:92:9d:e0:77:7c:41:98:
fd:0a:6d:fe:fa:91:bf:6b:5a:c9:60:fc:24:d1:09:09:06:79:
37:a2:20:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:07 2023 by rpki-client on console-ams.rpki-client.org