Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vIyWdEa0ybZGwXjOwpSAK96KhsI.roa
File: vIyWdEa0ybZGwXjOwpSAK96KhsI.roa (raw, json)
Hash identifier: d6/shXnLlgGZRgysBPYx+fb3kdhAKGjHHrhNbTpjqQU=
Subject key identifier: BC:8C:96:74:46:B4:C9:B6:46:C1:78:CE:C2:94:80:2B:DE:8A:86:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875781936A33133907F07D07228403425C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vIyWdEa0ybZGwXjOwpSAK96KhsI.roa
Signing time: Thu 06 Apr 2023 16:58:42 +0000
ROA not before: Thu 06 Apr 2023 16:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:81:93:6a:33:13:39:07:f0:7d:07:22:84:03:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 16:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc8c967446b4c9b646c178cec294802bde8a86c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:e3:70:67:a3:44:fd:0f:ad:d8:31:f5:11:
b3:7e:84:61:a2:09:72:9a:d5:21:b3:c1:01:cb:ec:
5e:60:e2:7d:38:6a:68:9a:84:a9:21:92:77:30:0f:
fa:9f:60:4d:bd:33:cb:7e:98:8e:3c:ac:53:4c:90:
38:6d:b8:77:1c:2d:c1:c4:81:28:bb:8b:00:85:0d:
a0:c7:01:2a:95:81:f9:73:e9:6e:7d:e8:0b:50:6d:
d2:f2:89:77:f5:66:d1:2a:cd:5a:29:d8:39:02:1b:
c4:0e:4d:ac:05:ac:12:cc:68:8a:32:0c:06:17:e3:
53:e9:67:9e:06:9b:77:e9:df:73:99:2c:35:f2:54:
e7:89:74:94:9d:4a:1b:56:9d:8b:8f:76:62:7b:39:
6b:08:b7:06:f8:21:06:0e:73:48:87:29:c7:39:d1:
67:03:48:8f:c8:fa:fb:8f:cf:ac:15:90:23:3a:4d:
b4:e7:25:30:c7:73:89:42:55:36:da:6a:96:c5:54:
02:ff:ce:65:d3:b1:93:c7:8f:1e:68:66:97:97:f3:
dd:c6:c9:b6:d6:65:7a:00:d0:d8:12:45:63:fc:ee:
1b:ae:c4:e3:30:86:eb:48:56:91:f9:be:bd:dd:1d:
f4:52:c2:16:7c:58:32:f3:86:71:56:d6:e5:cf:68:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8C:96:74:46:B4:C9:B6:46:C1:78:CE:C2:94:80:2B:DE:8A:86:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vIyWdEa0ybZGwXjOwpSAK96KhsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.178.0/24
192.124.180.0/22
193.108.115.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.133.0/24
193.124.201.0/24
194.58.38.0/24
194.58.40.0/24
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0/24
194.87.24.0/22
194.87.37.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.87.243.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/23
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.76.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
23:da:19:a1:0f:23:16:aa:92:84:92:1d:d8:63:d9:b9:00:ea:
95:ba:ac:c1:80:a7:be:c4:0b:c9:db:b8:b6:fe:dd:b5:c3:5a:
6d:6d:41:8b:c6:08:db:a8:0c:16:4c:92:a8:ca:e4:6b:59:7a:
03:42:f5:e6:9f:9e:6a:72:ec:1d:87:d5:1b:7d:2e:99:61:01:
0f:9d:91:70:a1:e0:37:d2:49:91:b0:eb:b8:17:e3:59:c0:97:
92:3a:99:7f:8b:5a:90:3f:31:ca:84:73:1a:82:e6:35:d8:cf:
a6:a5:95:60:a1:0e:d2:20:e0:45:4d:4b:17:1f:d4:f6:43:b1:
84:52:00:e6:e0:cf:3f:11:88:de:10:d9:a3:fd:42:bc:83:59:
e6:37:6d:61:9b:bc:34:a3:7a:c1:a2:65:51:77:e0:d4:06:9c:
ea:46:f7:62:a4:fb:91:f4:2a:c4:02:bd:28:26:91:6d:dc:cc:
54:f8:1d:f2:b7:d7:d0:cf:90:59:6d:5c:6a:7c:c1:99:6b:92:
72:ae:b3:66:6e:1a:bd:41:a2:93:04:5e:b8:2a:9a:41:a0:be:
05:28:ef:a3:4d:fc:a0:aa:56:ad:82:e7:25:43:38:a4:16:0d:
ec:f4:e7:95:9b:4e:7f:80:ab:8c:c5:5e:02:1e:23:00:ab:3e:
61:7b:31:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:13 2023 by rpki-client on console-fra.rpki-client.org