Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yRzSwS7h9igBiK22iQ_Xf9LoKhA.roa
File: yRzSwS7h9igBiK22iQ_Xf9LoKhA.roa (raw, json)
Hash identifier: 5MxsFvm+me3J2yVNd+7QodyHUHY760wPfHxdBWDNsJ4=
Subject key identifier: C9:1C:D2:C1:2E:E1:F6:28:01:88:AD:B6:89:0F:D7:7F:D2:E8:2A:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018678B5AC853A5384CC051568C48586CF98
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yRzSwS7h9igBiK22iQ_Xf9LoKhA.roa
Signing time: Wed 22 Feb 2023 10:40:17 +0000
ROA not before: Wed 22 Feb 2023 10:40:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.233.0/24 maxlen: 24
194.87.4.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.38.0/24 maxlen: 24
194.58.39.0/24 maxlen: 24
194.58.38.0/23 maxlen: 23
194.58.47.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.58.59.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/23 maxlen: 23
192.124.180.0/22 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
192.124.182.0/23 maxlen: 23
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 04:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:b5:ac:85:3a:53:84:cc:05:15:68:c4:85:86:cf:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 22 10:40:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c91cd2c12ee1f6280188adb6890fd77fd2e82a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:3b:da:5c:6d:06:c0:dc:6c:48:6a:a9:1e:
e3:0e:4f:3d:f8:e7:24:72:5b:ff:be:cb:b2:eb:99:
8c:92:64:52:78:b3:20:fc:d1:14:2f:c3:8e:ee:e0:
a5:c9:28:e9:ab:da:10:ec:f0:a1:67:f6:8b:9e:4b:
1b:c2:21:de:69:b6:11:90:b1:55:bd:45:e6:5b:9e:
6e:c8:76:4b:f7:7e:70:59:8d:aa:81:cd:81:5b:9d:
64:f6:e6:8a:ee:ab:3d:33:26:89:90:21:c4:ba:10:
7a:f2:aa:96:53:b7:02:c6:0d:0d:f4:4f:14:03:de:
e5:94:f5:49:69:6c:80:88:6c:15:e4:55:92:06:cd:
f5:09:1e:d0:23:a3:8c:31:fa:59:11:f7:1a:f5:c5:
91:36:2d:4c:76:7b:c1:de:65:24:2d:3a:24:70:26:
a6:05:dc:83:61:e3:54:ee:8e:80:dc:a4:a6:10:ca:
fb:74:b9:b5:0c:c6:48:4d:82:a0:1f:f9:0b:48:fa:
6d:41:db:96:cf:a8:aa:c1:d6:b9:0a:a1:69:8b:f1:
f2:25:66:1a:0d:90:5a:b3:4f:62:4a:23:0b:d3:65:
66:2e:b2:39:b3:28:fb:fb:37:36:2c:46:d5:8e:84:
ea:bf:9f:f0:66:c4:40:23:a6:72:92:17:c0:50:f1:
27:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1C:D2:C1:2E:E1:F6:28:01:88:AD:B6:89:0F:D7:7F:D2:E8:2A:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yRzSwS7h9igBiK22iQ_Xf9LoKhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
62.76.233.0/24
192.124.178.0/24
192.124.180.0/22
193.124.3.0/24
193.124.6.0/24
193.124.9.0/24
193.124.16.0/24
193.124.44.0/24
193.124.80.0/24
193.124.93.0/24
193.124.201.0/24
193.124.207.0/24
194.58.38.0/23
194.58.47.0/24
194.58.59.0/24
194.87.1.0/24
194.87.3.0-194.87.4.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.24.0/22
194.87.36.0/23
194.87.42.0/24
194.87.56.0/24
194.87.73.0/24
194.87.76.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.130.0/23
194.87.149.0/24
194.87.166.0/24
194.87.168.0/24
194.87.170.0-194.87.172.255
194.87.176.0/22
194.87.182.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.222.0/24
194.87.240.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.54.0/24
195.58.56.0/24
195.133.0.0/24
195.133.26.0/24
195.133.30.0/24
195.133.35.0/24
195.133.194.0/23
212.192.1.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
71:af:43:1b:2b:97:e1:10:57:56:2e:b6:d1:a9:08:63:cd:a5:
5f:5a:69:8c:5a:2e:05:3b:48:db:f9:76:fe:4e:e1:bc:95:e0:
75:72:dc:7c:48:9e:ac:b5:f9:20:09:1b:3c:55:28:fc:58:46:
68:52:e2:ad:56:df:da:4c:a7:f7:10:ab:70:78:29:6a:ce:fa:
c0:3d:2f:c6:13:5d:af:bf:e7:ab:82:e3:5f:5f:1a:b0:5d:db:
c7:fe:ab:fb:c8:15:bf:6e:9f:78:fa:7a:ea:94:67:58:67:6e:
cb:a4:6f:91:83:7f:2b:23:ec:3c:da:1e:9a:a7:22:37:32:41:
3b:e4:eb:73:3d:7c:07:08:f5:89:69:3d:d4:9b:49:16:40:55:
27:ad:c6:95:c2:d6:e1:be:92:1a:0d:08:6a:1e:d0:4d:c5:60:
51:29:ce:5d:30:aa:84:7f:d6:65:b5:c0:6b:47:2b:ea:90:c1:
6e:23:45:c5:6a:1b:e6:9b:0b:5f:2f:de:f5:c7:4f:d9:0b:cf:
64:8a:74:bd:cd:13:dc:92:46:57:c7:2e:28:bf:e1:9f:5f:0d:
1c:4a:2f:82:9d:ba:f5:4e:2c:61:e6:90:ec:e2:dc:cf:8e:b5:
1f:df:a6:76:91:38:d9:31:c4:ed:66:a8:40:a3:ba:19:3f:12:
7c:a9:43:cd
-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgISAYZ4tayFOlOEzAUVaMSFhs+YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMjIyMTA0MDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTFjZDJjMTJlZTFmNjI4MDE4OGFkYjY4OTBmZDc3ZmQyZTgyYTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy872lxtBsDcbEhqqR7jDk89+Ock
clv/vsuy65mMkmRSeLMg/NEUL8OO7uClySjpq9oQ7PChZ/aLnksbwiHeabYRkLFV
vUXmW55uyHZL935wWY2qgc2BW51k9uaK7qs9MyaJkCHEuhB68qqWU7cCxg0N9E8U
A97llPVJaWyAiGwV5FWSBs31CR7QI6OMMfpZEfca9cWRNi1MdnvB3mUkLTokcCam
BdyDYeNU7o6A3KSmEMr7dLm1DMZITYKgH/kLSPptQduWz6iqwda5CqFpi/HyJWYa
DZBas09iSiML02VmLrI5syj7+zc2LEbVjoTqv5/wZsRAI6ZykhfAUPEnDQIDAQAB
o4IDjzCCA4swHQYDVR0OBBYEFMkc0sEu4fYoAYittokP13/S6CoQMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveVJ6U3dTN2g5aWdCaUsyMmlRX1hmOUxvS2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBowYIKwYBBQUHAQcBAf8EggGSMIIBjjCCAYoEAgABMIIB
ggMEAD5M4QMEAT5M5gMEAD5M6QMEAMB8sgMEAsB8tAMEAMF8AwMEAMF8BgMEAMF8
CQMEAMF8EAMEAMF8LAMEAMF8UAMEAMF8XQMEAMF8yQMEAMF8zwMEAcI6JgMEAMI6
LwMEAMI6OwMEAMJXATAMAwQAwlcDAwQAwlcEAwQAwlcHMAwDBADCVwsDBADCVwwD
BADCVxADBALCVxgDBAHCVyQDBADCVyoDBADCVzgDBADCV0kDBADCV0wDBADCV1MD
BADCV2gDBAHCV3IDBADCV3oDBAHCV4IDBADCV5UDBADCV6YDBADCV6gwDAMEAcJX
qgMEAMJXrAMEAsJXsAMEAMJXtgMEAMJXuwMEAMJXvgMEAMJXyAMEAMJXygMEAMJX
3gMEAMJX8AMEAMKHEgMEAMKHFzAMAwQAwzojAwQAwzokAwQAwzoyAwQAwzo2AwQA
wzo4AwQAw4UAAwQAw4UaAwQAw4UeAwQAw4UjAwQBw4XCAwQA1MABAwQA1MAKAwQA
1MAfMA0GCSqGSIb3DQEBCwUAA4IBAQBxr0MbK5fhEFdWLrbRqQhjzaVfWmmMWi4F
O0jb+Xb+TuG8leB1ctx8SJ6stfkgCRs8VSj8WEZoUuKtVt/aTKf3EKtweClqzvrA
PS/GE12vv+erguNfXxqwXdvH/qv7yBW/bp94+nrqlGdYZ27LpG+Rg38rI+w82h6a
pyI3MkE75OtzPXwHCPWJaT3Um0kWQFUnrcaVwtbhvpIaDQhqHtBNxWBRKc5dMKqE
f9ZltcBrRyvqkMFuI0XFahvmmwtfL971x0/ZC89kinS9zRPckkZXxy4ov+GfXw0c
Si+Cnbr1Tixh5pDs4tzPjrUf36Z2kTjZMcTtZqhAo7oZPxJ8qUPN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org