Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yHc3hxwWpR6wQTX1nhl34Qr5d_U.roa
File: yHc3hxwWpR6wQTX1nhl34Qr5d_U.roa (raw, json)
Hash identifier: viRgVtIxGOjTxyo/AV6oOBbK8E+ndVoccBmHMyT8TGc=
Subject key identifier: C8:77:37:87:1C:16:A5:1E:B0:41:35:F5:9E:19:77:E1:0A:F9:77:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0191B2515F4AA511F321B56ED965F10AA894
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yHc3hxwWpR6wQTX1nhl34Qr5d_U.roa
Signing time: Mon 02 Sep 2024 10:39:22 +0000
ROA not before: Mon 02 Sep 2024 10:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 62.76.233.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Sep 2024 09:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:51:5f:4a:a5:11:f3:21:b5:6e:d9:65:f1:0a:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 2 10:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c87737871c16a51eb04135f59e1977e10af977f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:92:bd:4c:11:76:e2:df:b0:f3:0a:70:68:
56:7f:fa:5a:33:4b:b5:03:70:0b:06:99:65:04:38:
76:d3:c9:31:c7:10:5c:a8:3c:b5:79:66:38:0a:4d:
38:30:be:b9:7a:f5:91:c4:f0:b2:54:42:5f:5f:8f:
9b:13:ed:9f:1e:bc:12:48:aa:32:f4:ea:07:42:03:
43:d6:84:47:46:53:1b:44:47:85:09:8e:54:ac:e7:
70:52:1c:9c:47:df:29:28:54:aa:56:1b:96:10:f4:
18:b5:71:c6:f0:ca:a2:a5:a4:a2:c7:a8:14:53:30:
fa:5f:07:83:4c:fa:1f:c0:5f:62:04:d4:b8:37:2b:
c3:04:ad:d9:fe:9f:9b:5e:0a:9b:8d:c5:b0:d5:c9:
25:35:2b:1a:60:7a:8e:85:02:0f:d7:cb:ab:13:49:
58:91:5c:90:b8:1c:ed:50:fc:3b:5f:94:1d:2b:c1:
f1:1a:e2:8f:ca:2b:4c:79:aa:61:f5:b0:9d:b9:c7:
28:79:16:2a:09:0b:f5:e7:54:da:96:1b:85:17:9d:
70:91:b3:1f:39:e6:ff:d9:fb:a2:9d:9c:88:50:10:
59:64:b4:9d:da:44:c7:a6:fb:da:8c:f7:6e:33:a6:
a8:f8:1f:31:c0:fb:d9:e3:96:8e:db:19:4d:e5:55:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:37:87:1C:16:A5:1E:B0:41:35:F5:9E:19:77:E1:0A:F9:77:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yHc3hxwWpR6wQTX1nhl34Qr5d_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.124.47.0/24
194.58.57.0/24
194.58.155.0/24
194.87.26.0/23
194.87.44.0/24
194.87.49.0/24
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.243.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.133.14.0/23
195.133.18.0/24
195.133.21.0/24
195.133.24.0/23
195.133.27.0/24
195.133.30.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.217.0/24
212.192.246.0/24
212.192.248.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
2c:7e:d7:0c:21:02:4d:a0:56:fa:2a:76:92:b9:97:55:d3:b0:
37:1d:f2:cf:69:1b:1c:1a:b9:0d:88:33:bb:f7:a5:1f:2b:99:
fa:b4:91:0f:10:3b:fb:64:e7:f3:bc:64:86:0e:45:dd:b8:14:
71:c0:47:02:f6:37:62:ab:eb:cf:86:f7:b2:06:b3:33:83:7b:
6c:08:b7:bf:51:ee:ff:b8:d5:c2:06:2f:83:02:12:1d:f4:db:
e9:88:dc:04:ce:3c:0b:48:68:0f:5a:6a:ca:4d:cf:20:c4:34:
21:28:69:c4:b8:c8:dc:96:74:b5:76:07:13:cf:8e:03:00:59:
30:f5:74:e3:02:6e:03:04:c8:94:c0:01:cf:96:19:06:e2:b9:
db:c6:7e:df:c8:43:3c:50:67:d3:4d:03:06:f2:e8:2a:81:3c:
b1:49:c4:84:d3:e0:b9:c1:0f:b1:2c:10:dc:23:77:7d:d5:18:
bd:f5:51:4c:06:9e:49:1e:fb:80:9f:1f:9a:db:e0:f9:1d:ff:
e5:71:3d:36:b4:c5:db:30:15:d0:9c:84:fa:dc:ab:85:a2:2a:
7b:f7:22:e6:74:61:15:1b:fc:4a:b5:d6:5a:39:ea:4a:34:99:
26:a2:1b:62:70:e9:6e:86:4d:72:11:d7:2d:93:5f:0c:62:bf:
0b:5c:dc:c0
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgISAZGyUV9KpRHzIbVu2WXxCqiUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwOTAyMTAzOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODc3Mzc4NzFjMTZhNTFlYjA0MTM1ZjU5ZTE5NzdlMTBhZjk3N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYmSvUwRduLfsPMKcGhWf/paM0u1
A3ALBpllBDh208kxxxBcqDy1eWY4Ck04ML65evWRxPCyVEJfX4+bE+2fHrwSSKoy
9OoHQgND1oRHRlMbREeFCY5UrOdwUhycR98pKFSqVhuWEPQYtXHG8MqipaSix6gU
UzD6XweDTPofwF9iBNS4NyvDBK3Z/p+bXgqbjcWw1cklNSsaYHqOhQIP18urE0lY
kVyQuBztUPw7X5QdK8HxGuKPyitMeaph9bCduccoeRYqCQv151TalhuFF51wkbMf
Oeb/2fuinZyIUBBZZLSd2kTHpvvajPduM6ao+B8xwPvZ45aO2xlN5VVfTQIDAQAB
o4IDazCCA2cwHQYDVR0OBBYEFMh3N4ccFqUesEE19Z4Zd+EK+Xf1MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveUhjM2h4d1dwUjZ3UVRYMW5obDM0UXI1ZF9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBfwYIKwYBBQUHAQcBAf8EggFuMIIBajCCAVAEAgABMIIB
SAMEAD5M6QMEAMF8LwMEAMI6OQMEAMI6mwMEAcJXGgMEAMJXLAMEAMJXMQMEAMJX
TDAMAwQAwldTAwQAwldUAwQAwldoAwQAwldzAwQAwleCMAwDBADCV4UDBADCV4YD
BADCV4oDBADCV4wDBADCV48DBADCV5cDBADCV6EDBADCV6kDBADCV7sDBADCV74D
BADCV8gDBADCV8oDBADCV9ADBADCV9cDBAHCV9wDBADCV+IDBADCV/MDBADCV/oD
BADChyYDBADCh2kDBADDOiIDBAHDOiQDBAHDhQ4DBADDhRIDBADDhRUDBAHDhRgD
BADDhRsDBADDhR4DBAHDhTIDBADDhT8DBADDhUkDBADDhVEDBAHDhVwDBADDhcID
BADUwAEDBADUwNkDBADUwPYDBADUwPgDBADUwRgDBAHUwRoDBADUwR4wFAQCAAIw
DgMFAyoBV8ADBQMqDP9AMA0GCSqGSIb3DQEBCwUAA4IBAQAsftcMIQJNoFb6KnaS
uZdV07A3HfLPaRscGrkNiDO796UfK5n6tJEPEDv7ZOfzvGSGDkXduBRxwEcC9jdi
q+vPhveyBrMzg3tsCLe/Ue7/uNXCBi+DAhId9NvpiNwEzjwLSGgPWmrKTc8gxDQh
KGnEuMjclnS1dgcTz44DAFkw9XTjAm4DBMiUwAHPlhkG4rnbxn7fyEM8UGfTTQMG
8ugqgTyxScSE0+C5wQ+xLBDcI3d91Ri99VFMBp5JHvuAnx+a2+D5Hf/lcT02tMXb
MBXQnIT63KuFoip79yLmdGEVG/xKtdZaOepKNJkmohticOluhk1yEdctk18MYr8L
XNzA
-----END CERTIFICATE-----
Generated at Tue Sep 3 12:42:41 2024 by rpki-client on console-ams.rpki-client.org