Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xJ_7wuEbxJ9UdTJfURMp8fdGE6k.roa
File: xJ_7wuEbxJ9UdTJfURMp8fdGE6k.roa (raw, json)
Hash identifier: Z/k4UleQo5jAMskccEfkK1/jnRfdeOvh8KxBDKaOkL0=
Subject key identifier: C4:9F:FB:C2:E1:1B:C4:9F:54:75:32:5F:51:13:29:F1:F7:46:13:A9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01872E0E6A282536A64EB426DBADA47DD18E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xJ_7wuEbxJ9UdTJfURMp8fdGE6k.roa
Signing time: Wed 29 Mar 2023 15:48:29 +0000
ROA not before: Wed 29 Mar 2023 15:48:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.25.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.32.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:0e:6a:28:25:36:a6:4e:b4:26:db:ad:a4:7d:d1:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 29 15:48:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c49ffbc2e11bc49f5475325f511329f1f74613a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:1e:90:94:90:99:fc:c3:3f:75:90:0d:3a:
95:8f:42:6a:66:bb:21:4b:0f:e1:27:6d:44:1c:de:
f9:a2:0d:4c:24:83:db:17:37:73:8d:5d:7d:e6:e3:
57:97:d0:ef:d7:a3:2c:21:3e:e6:96:2b:a7:49:76:
e0:9c:13:9e:4c:00:44:79:51:a8:ab:b2:14:a4:28:
1e:e5:b2:9f:02:77:a0:16:72:0b:65:1e:68:6a:4f:
7f:49:e9:89:e5:1a:16:0a:e9:44:56:af:7b:2c:4d:
4d:77:6c:6d:e6:9a:75:0b:05:0e:11:9d:f7:b5:2d:
37:e5:22:7b:65:06:30:47:f5:bc:b9:9f:a4:e0:66:
ff:76:98:48:40:3d:02:fe:e4:7d:00:45:26:ed:7d:
a4:74:ad:b7:0d:e6:8f:95:92:5b:07:ad:96:0c:a8:
6f:d4:a4:46:e6:67:a5:11:8b:24:d9:30:97:7d:b3:
1c:43:4c:eb:6b:ed:fd:b2:93:d2:c9:9f:29:d8:ac:
89:31:62:1f:4f:40:3a:8f:ba:b5:a4:8d:23:56:b6:
b2:94:a3:a7:71:89:af:5d:ff:51:87:13:55:dc:ea:
b4:42:2c:b4:3b:e0:b9:a7:05:4b:d3:f8:4d:44:45:
b9:eb:a0:c7:30:87:e4:04:55:9c:97:45:d1:b7:d2:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:9F:FB:C2:E1:1B:C4:9F:54:75:32:5F:51:13:29:F1:F7:46:13:A9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xJ_7wuEbxJ9UdTJfURMp8fdGE6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.8.0/23
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
194.58.38.0-194.58.40.255
194.58.47.0/24
194.58.59.0/24
194.58.67.0/24
194.58.154.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.10.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.22.0/24
194.87.24.0/22
194.87.37.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.138.0/24
194.87.149.0/24
194.87.160.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.87.246.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/23
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.32.0/24
195.133.35.0/24
195.133.76.0/24
195.133.84.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:de:6d:c1:3e:8f:d6:30:82:b8:64:af:a6:44:f9:91:82:4c:
f7:f2:6e:68:54:7a:cc:3f:c9:a3:56:27:e0:d7:76:30:8b:63:
92:66:b0:43:16:73:6d:2d:1a:91:af:13:c4:15:35:18:3c:19:
7d:21:46:2b:ab:7e:9c:fd:31:85:9d:1e:7f:9e:c7:6c:65:25:
89:03:e5:8e:83:89:f1:c8:1a:46:cd:17:9a:5e:a8:c7:b3:97:
17:50:a8:cf:03:e0:0a:ff:3b:e7:e6:29:dc:67:77:fd:0c:c3:
3f:d8:dd:ea:54:e4:40:0c:d9:d1:6f:93:a1:b3:3c:94:f9:3a:
7b:4b:17:bf:47:2f:58:76:fe:f2:d9:fd:b6:23:f6:65:68:44:
2d:48:6c:4e:e2:24:0a:67:3d:3b:9c:59:e2:cd:01:76:90:9d:
96:2f:0d:50:47:b0:75:f0:01:fb:33:a2:78:6c:9f:31:86:25:
b2:29:b6:97:c9:b4:6a:0e:a9:dc:7d:e7:5b:74:ff:17:e6:36:
f5:d7:0e:c0:e3:e2:6d:03:af:c7:3e:8a:d5:78:b5:cc:76:70:
d2:34:80:cf:86:06:86:59:2c:54:53:73:b9:61:69:6e:78:d4:
af:6b:43:86:83:2e:b1:04:ba:1a:83:b9:da:6a:7a:54:57:48:
dc:88:54:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org