Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uZFMYHe9yQgPzUdG0AQhAJilLA0.roa
File: uZFMYHe9yQgPzUdG0AQhAJilLA0.roa (raw, json)
Hash identifier: qyYYkr9pacz6rpNJBqUPmg4gSRfamQFFnmClfuklb30=
Subject key identifier: B9:91:4C:60:77:BD:C9:08:0F:CD:47:46:D0:04:21:00:98:A5:2C:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189446F9901984EF3E2A5395504CA17978F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uZFMYHe9yQgPzUdG0AQhAJilLA0.roa
Signing time: Tue 11 Jul 2023 10:11:51 +0000
ROA not before: Tue 11 Jul 2023 10:11:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Jul 2023 08:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:6f:99:01:98:4e:f3:e2:a5:39:55:04:ca:17:97:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 11 10:11:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9914c6077bdc9080fcd4746d004210098a52c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d8:cc:76:cc:d8:b4:bc:a0:53:61:33:77:34:
7e:a3:db:33:26:92:3c:da:ef:68:56:c8:d7:14:b7:
06:0e:17:7c:ba:bd:93:bb:16:57:50:ae:dc:41:6a:
49:e1:89:ad:78:a2:6f:da:ea:fb:4d:5c:6a:4b:08:
69:53:52:ba:08:9f:5b:fc:2a:d9:1b:54:07:71:f2:
20:4f:3f:7c:ae:90:f4:db:de:2d:84:18:ff:7c:6c:
88:97:b0:f7:6f:5b:9c:19:ff:cc:15:17:f1:b2:37:
cc:80:4a:97:a4:86:e7:8b:b0:2b:2a:bc:d0:32:34:
fa:3e:33:78:b8:f9:b1:f3:87:09:6d:22:70:c1:cd:
fa:80:6e:a9:eb:03:ce:aa:a7:c1:8e:9e:ef:0d:b4:
6d:b7:63:74:2c:ae:73:d2:a0:87:d3:0b:5c:9d:38:
31:33:a1:eb:22:a2:b6:46:38:3c:91:c8:64:25:e7:
9d:0d:f8:0e:97:c5:fc:d6:c7:c7:bc:3b:9c:c7:b7:
80:a1:bb:c8:66:0f:dc:4f:1b:53:07:8e:c8:70:69:
6f:bb:74:aa:d3:bf:43:fd:42:9d:7a:2c:d9:04:97:
af:74:70:95:d5:f6:f4:c5:b7:34:28:fc:b6:a1:e0:
88:aa:a4:51:36:b0:51:72:df:23:7a:e9:b5:22:71:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:4C:60:77:BD:C9:08:0F:CD:47:46:D0:04:21:00:98:A5:2C:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uZFMYHe9yQgPzUdG0AQhAJilLA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/23
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0/24
194.87.3.0/24
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/24
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
0a:d6:f9:53:80:75:73:25:61:1f:32:1b:72:e3:54:63:69:fe:
5d:ef:d8:b9:f2:ae:6f:b3:66:d5:5e:c4:93:a6:01:ea:d7:d2:
6c:57:48:fd:f4:52:63:4b:b8:a5:4c:5a:8d:1d:e4:dc:d4:72:
c6:03:7d:7f:44:ad:31:35:ad:fe:64:e4:93:3d:a8:27:f5:2e:
ba:c4:bd:67:4b:ac:91:81:81:33:a6:da:37:af:fe:9b:cc:7f:
bb:be:c9:3f:a7:e1:e1:10:4b:6b:c1:a5:d6:e6:aa:60:0b:95:
fc:03:07:85:82:7f:3b:8e:7d:82:94:95:1b:67:30:e3:6a:b6:
25:e7:c3:af:31:70:c5:a3:8c:d0:f1:50:8f:93:e1:47:d0:f8:
47:7f:42:c6:4a:d0:0a:35:f3:f0:32:05:ed:82:67:c8:76:24:
c9:9a:04:c7:ed:da:f6:cc:f6:54:61:e0:86:6c:90:76:85:f1:
98:58:6f:91:88:bb:42:0d:24:26:af:d8:57:f4:6d:6b:a7:e2:
c2:93:11:db:09:e0:dd:6d:16:ff:90:d7:03:cb:4c:57:35:b3:
e4:55:c9:1c:df:6b:7a:a1:43:a8:7d:f1:12:22:42:06:43:df:
21:18:b5:d0:90:33:78:fd:8e:f6:4e:9a:6c:27:97:d4:ef:15:
e4:a2:0d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org