Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vKeCZaZ0D_4DFAPVKuKr-kjSWYg.roa
File: vKeCZaZ0D_4DFAPVKuKr-kjSWYg.roa (raw, json)
Hash identifier: buxSPx6MKF/SJHO8QHEQ3uhuMlSGMIaroQtn80uIe0M=
Subject key identifier: BC:A7:82:65:A6:74:0F:FE:03:14:03:D5:2A:E2:AB:FA:48:D2:59:88
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D253E89063772539BFE3219FF6EB65BD2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vKeCZaZ0D_4DFAPVKuKr-kjSWYg.roa
Signing time: Sat 20 Jan 2024 05:01:11 +0000
ROA not before: Sat 20 Jan 2024 05:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.227.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
212.193.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 10:14:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:25:3e:89:06:37:72:53:9b:fe:32:19:ff:6e:b6:5b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 20 05:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bca78265a6740ffe031403d52ae2abfa48d25988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:ee:52:17:9d:8a:f6:f9:84:5c:e2:d7:35:
90:7d:58:cc:c9:36:01:0c:0a:02:15:68:b1:ba:6a:
70:04:2b:63:46:73:ce:3c:03:83:b3:27:44:e4:75:
18:de:ff:49:b6:ae:d3:ee:17:ad:18:44:ce:c5:94:
e3:7f:d4:76:ca:73:4d:fe:9e:09:cb:da:64:a0:12:
17:23:98:0e:39:20:d3:8b:fe:75:c9:5a:db:b2:81:
34:b8:77:54:cb:1c:f9:1f:a5:6b:8d:6c:56:b0:75:
6d:ae:9d:ab:73:69:bd:b3:0b:50:0d:71:e3:75:e9:
4d:dd:f6:41:1d:23:fe:a9:90:8d:41:96:46:cb:e6:
e8:23:a0:bc:86:94:a9:c5:f4:c2:a1:3d:7c:17:76:
cd:b3:3b:2f:25:38:bd:96:84:1b:ed:ec:44:d4:72:
dd:c5:b9:0c:32:f9:b3:00:4b:5e:ab:5b:5e:52:8f:
0a:d2:48:64:f7:30:21:c0:8f:b2:fa:6f:39:34:aa:
87:39:f0:c6:b7:c3:f2:63:92:1f:d9:03:77:3f:6a:
91:0b:82:87:31:22:90:76:d1:fc:a0:1b:fc:33:3a:
57:41:ca:dc:bd:19:3f:1f:2c:be:e7:1b:79:37:e2:
dc:8b:51:41:2e:77:a6:0a:1c:f5:82:2c:97:16:c2:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A7:82:65:A6:74:0F:FE:03:14:03:D5:2A:E2:AB:FA:48:D2:59:88
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vKeCZaZ0D_4DFAPVKuKr-kjSWYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.227.0/24
185.72.10.0/24
192.124.183.0/24
193.124.47.0/24
193.124.95.0/24
193.124.202.0/24
194.58.41.0-194.58.42.255
194.58.66.0/24
194.58.154.0/24
194.87.26.0/24
194.87.76.0/24
194.87.81.0/24
194.87.128.0/24
194.87.149.0/24
194.87.151.0/24
194.87.170.0/24
194.87.172.0/24
194.87.187.0/24
194.87.190.0/24
194.87.201.0/24
194.87.215.0/24
194.87.224.0/24
194.87.229.0/24
194.87.231.0/24
194.87.245.0/24
194.135.33.0/24
195.58.54.0/24
195.58.60.0/24
195.58.63.0/24
195.133.2.0/24
195.133.25.0/24
195.133.27.0/24
195.133.72.0/24
195.133.84.0/24
195.133.192.0/24
212.192.1.0/24
212.192.214.0/24
212.192.222.0/24
212.193.13.0/24
212.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
50:58:5a:af:e4:a8:e6:39:4e:c0:73:f0:50:67:7d:ea:24:43:
70:ef:c7:0f:81:3c:48:cb:2b:19:cd:8b:3f:67:3c:aa:6e:d7:
e9:05:1e:29:83:23:5a:e8:e7:31:07:65:88:15:72:b9:be:cd:
68:da:54:f2:8d:c1:d4:f6:7e:35:bf:ef:e1:36:a3:3d:fc:1a:
68:18:e4:59:0f:4f:8a:d0:eb:ae:5f:84:5e:78:7d:35:eb:3f:
0f:d9:07:71:95:d8:11:cf:f5:90:ba:ca:a9:3f:c0:ca:03:bc:
39:1a:9a:79:1e:ca:c0:7a:02:85:e2:f1:55:a7:b2:93:0e:49:
12:31:93:5f:74:f7:98:8a:1e:d2:dc:bf:ca:00:dc:40:b8:5f:
30:f1:c7:65:04:92:a4:18:fb:ac:dc:cd:83:d2:dc:fb:2a:fe:
12:51:9d:54:83:37:63:e0:0f:89:25:6e:8f:fc:48:93:cb:2f:
42:5d:25:95:b6:9d:d7:b7:4c:c7:43:53:83:c3:7b:af:4a:d2:
b0:2b:0c:fc:fa:f2:ca:8b:8a:e1:68:5d:33:ff:76:c1:35:83:
c7:f1:03:5d:89:c1:6a:54:a8:0c:76:7a:f1:09:2d:fc:f4:a4:
0e:81:a5:5b:83:92:1a:b9:e0:3c:5e:37:8a:7d:41:94:e0:60:
35:75:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org