Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zeu06BftX967ZBWhLvUb1Sa4fl8.roa
File: zeu06BftX967ZBWhLvUb1Sa4fl8.roa (raw, json)
Hash identifier: iDZZFBbsWi5tk/2vSIzK1PgoAtQjna92rC+vh6j3D1g=
Subject key identifier: CD:EB:B4:E8:17:ED:5F:DE:BB:64:15:A1:2E:F5:1B:D5:26:B8:7E:5F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189258F3BCACDF141F562FC0C303B1A209D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zeu06BftX967ZBWhLvUb1Sa4fl8.roa
Signing time: Wed 05 Jul 2023 10:18:10 +0000
ROA not before: Wed 05 Jul 2023 10:18:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
62.76.230.0/23 maxlen: 23
193.124.16.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
193.124.124.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
212.192.247.0/24 maxlen: 24
212.192.248.0/22 maxlen: 22
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.204.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
194.87.240.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 14:30:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:25:8f:3b:ca:cd:f1:41:f5:62:fc:0c:30:3b:1a:20:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 5 10:18:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdebb4e817ed5fdebb6415a12ef51bd526b87e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:04:ad:ab:4d:b6:a3:31:ba:f8:24:ff:2c:
5f:64:b7:a2:68:d0:d8:fc:6a:40:3e:76:f9:61:6e:
44:24:67:b1:44:24:71:3b:27:45:71:19:34:ef:80:
61:b9:9a:4d:ed:db:00:f4:f1:e5:f6:f8:cb:e5:26:
6e:fd:37:13:54:8e:8c:51:2e:9a:4e:4e:c3:7f:30:
6e:1e:32:01:69:5a:b0:69:4a:be:a8:d3:ec:df:35:
3a:88:7e:88:5c:e6:c8:c5:ee:3b:fa:dc:14:64:59:
c2:6d:27:44:87:f1:be:45:5a:ce:2d:fd:a4:bb:72:
9e:55:78:8f:db:53:90:90:90:65:50:3e:4a:8b:40:
9b:f0:c3:5d:bd:4c:9d:f0:be:11:1e:86:4c:9f:2b:
5b:bc:09:55:ef:62:4a:fd:e9:3e:38:89:0e:f0:4b:
a2:2d:99:eb:cd:8a:f8:bd:3e:35:be:c1:5e:db:69:
53:a0:78:71:a7:72:24:2c:ea:ea:87:b2:40:21:fc:
27:f7:f0:85:aa:96:51:df:bb:84:51:32:76:35:87:
12:08:63:0f:af:16:28:07:43:52:37:9d:61:44:01:
ce:aa:9d:03:46:b3:3b:dc:89:52:50:d6:73:81:e0:
f1:70:8f:13:a0:60:f7:6b:a0:a3:ca:bc:77:82:04:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EB:B4:E8:17:ED:5F:DE:BB:64:15:A1:2E:F5:1B:D5:26:B8:7E:5F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zeu06BftX967ZBWhLvUb1Sa4fl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
62.76.230.0/23
192.124.170.0/24
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
192.124.191.0/24
193.124.3.0/24
193.124.8.0/24
193.124.16.0/24
193.124.80.0/24
193.124.124.0/24
193.124.133.0/24
193.124.200.0/24
193.124.204.0/24
194.58.42.0/24
194.58.47.0/24
194.58.223.0/24
194.87.1.0-194.87.3.255
194.87.7.0/24
194.87.11.0-194.87.12.255
194.87.16.0/24
194.87.18.0/24
194.87.23.0-194.87.27.255
194.87.36.0/23
194.87.43.0/24
194.87.56.0/24
194.87.73.0/24
194.87.78.0/24
194.87.83.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.160.0/24
194.87.162.0/24
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.177.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.204.0/24
194.87.222.0/24
194.87.240.0/24
194.135.24.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.30.0/24
195.133.35.0/24
195.133.74.0/24
195.133.84.0/23
195.133.194.0/23
212.192.8.0/24
212.192.10.0/24
212.192.223.0/24
212.192.241.0/24
212.192.244.0/24
212.192.247.0-212.192.251.255
Signature Algorithm: sha256WithRSAEncryption
6f:97:90:21:1e:0d:38:70:79:95:aa:22:59:e9:bc:a1:e2:e1:
fb:45:d9:07:4a:2e:6d:ce:95:cd:76:0a:06:8b:4e:93:a2:23:
4e:2b:de:5c:46:89:11:a0:9d:9a:39:30:ca:63:c9:1a:b0:1b:
08:3e:3a:e5:02:c2:b3:76:ce:f2:47:5d:d5:f7:53:af:5e:24:
e1:2b:ff:25:7a:ec:ff:43:fd:64:44:de:59:15:88:08:0f:77:
e8:4d:83:df:15:b9:6c:59:b4:cf:2a:61:07:d5:0c:d1:36:a2:
30:2c:6d:d3:08:b4:09:c6:05:44:fd:7e:4b:db:9d:eb:22:5d:
9b:03:b0:05:53:d8:c8:ee:09:93:bc:94:9c:31:07:f8:ba:f7:
43:0c:d1:e1:63:34:98:6f:3a:29:34:65:71:76:16:d2:44:c0:
44:52:30:2b:17:39:7f:b5:31:8e:0a:07:c2:ca:cc:54:8c:e7:
a3:00:37:e1:eb:10:ee:11:48:8d:59:c9:92:23:47:cb:8c:6c:
25:4c:6e:84:56:c0:4a:b8:e3:e7:68:e7:f3:29:1f:5c:7e:08:
b1:1e:1d:86:01:2a:da:fc:41:ec:d9:c8:02:74:93:0b:f5:f3:
3a:af:fe:eb:f3:7e:8b:ac:93:81:da:86:86:8b:7a:c2:4e:f3:
46:8d:7a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:52 2024 by rpki-client on console-ams.rpki-client.org