Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L7iYrmIA8BC0us0_ts9iR4nPv8c.roa
File: L7iYrmIA8BC0us0_ts9iR4nPv8c.roa (raw, json)
Hash identifier: 0PF8L7hd1dct5E/gBttU2JrL0S98oUF1An0sXc6+IFo=
Subject key identifier: 2F:B8:98:AE:62:00:F0:10:B4:BA:CD:3F:B6:CF:62:47:89:CF:BF:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0193969ECE8DBCF91401D4ED7C7EFCFF15F1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L7iYrmIA8BC0us0_ts9iR4nPv8c.roa
Signing time: Thu 05 Dec 2024 11:40:10 +0000
ROA not before: Thu 05 Dec 2024 11:40:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 62.76.233.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.35.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.58.57.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.36.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.20.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.24.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
195.133.63.0/24 maxlen: 24
195.133.66.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
195.133.77.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.220.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/24 maxlen: 24
212.193.27.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:51:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:96:9e:ce:8d:bc:f9:14:01:d4:ed:7c:7e:fc:ff:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 5 11:40:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb898ae6200f010b4bacd3fb6cf624789cfbfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9f:19:c2:3b:12:13:64:49:8c:75:c4:13:45:
83:79:17:d0:fb:e0:ad:b5:17:25:56:a3:87:80:ee:
e0:5c:41:36:99:af:7b:a8:1c:c7:87:f4:45:f8:92:
08:f7:eb:29:9b:03:11:e3:0f:76:e5:83:06:55:71:
56:2b:c9:d2:b8:43:53:1f:6a:72:f7:56:de:c5:68:
32:ce:f7:f2:ca:ae:97:d2:04:06:6f:4a:0b:8d:8f:
2f:86:21:cc:26:95:ae:58:21:e1:d7:73:93:de:a9:
17:80:b3:c7:66:39:df:d3:55:ce:ad:2f:4c:44:23:
4e:a6:dd:08:68:02:ed:ca:be:9d:8f:72:3b:5e:87:
83:ee:f2:2c:97:d3:74:80:8b:fe:27:30:91:56:86:
16:08:88:e2:b9:7e:4b:da:d0:fb:39:46:a7:2c:f6:
50:7f:d5:7f:f5:2f:80:6f:57:91:55:7b:48:e2:2a:
c6:11:07:6c:9e:23:fb:e5:82:1f:d7:d6:76:91:4b:
07:92:fc:61:e7:e5:4e:87:7f:24:22:dd:bc:af:a3:
00:36:cb:c6:c0:97:bf:18:19:5b:31:24:c5:62:c6:
00:dc:c1:87:63:06:c2:ab:a6:0f:32:be:66:8d:b0:
94:b0:99:02:3e:3f:26:cb:b1:05:b7:7a:1e:52:54:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B8:98:AE:62:00:F0:10:B4:BA:CD:3F:B6:CF:62:47:89:CF:BF:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L7iYrmIA8BC0us0_ts9iR4nPv8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.108.115.0/24
193.124.35.0/24
193.124.47.0/24
194.58.57.0/24
194.87.26.0/23
194.87.43.0-194.87.44.255
194.87.49.0/24
194.87.56.0/24
194.87.76.0/24
194.87.83.0-194.87.84.255
194.87.86.0/24
194.87.115.0/24
194.87.118.0/24
194.87.130.0/23
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0-194.87.202.255
194.87.208.0/24
194.87.215.0/24
194.87.220.0-194.87.222.255
194.87.226.0/24
194.87.243.0/24
194.87.250.0/24
194.135.36.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.58.61.0/24
195.133.14.0/23
195.133.20.0/23
195.133.24.0/23
195.133.27.0/24
195.133.30.0/24
195.133.40.0/23
195.133.50.0/24
195.133.63.0/24
195.133.66.0/24
195.133.73.0/24
195.133.76.0/23
195.133.81.0/24
195.133.194.0/24
212.192.217.0/24
212.192.220.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
93:cf:67:2d:cd:5d:e7:99:c7:d3:27:30:9a:1e:37:25:ed:83:
65:a5:26:e0:0a:f7:7b:bc:f0:32:0f:e9:3a:ee:9c:16:da:ad:
1a:f2:a2:a7:48:fb:59:63:6c:fe:74:ba:d6:01:63:ad:16:3a:
6c:6e:4f:77:2b:9b:43:62:87:4a:b4:51:4b:59:a2:e9:67:5b:
b3:f8:95:01:75:23:5d:33:d4:5e:da:e2:49:63:86:e3:87:58:
db:af:1b:3a:57:57:df:92:35:27:53:90:24:99:dd:fd:ef:c2:
f8:ab:5f:cc:c4:a1:cd:83:51:d6:4f:af:8b:f9:52:14:21:6c:
b6:26:2a:ac:35:14:46:cc:ac:0f:b7:69:6e:4d:cd:55:02:ea:
b2:9c:db:ea:31:c4:36:9a:1c:ca:ac:4d:c1:75:2a:5b:f3:0b:
73:9b:19:35:ee:4a:c1:36:aa:ab:75:97:b9:96:0e:a6:f5:bc:
71:2e:68:a7:09:9f:fd:80:eb:4e:1c:7a:b4:34:0e:19:1d:0b:
50:7c:05:c0:0e:44:00:ef:70:4b:86:87:e5:af:d4:1c:17:ee:
11:aa:e1:23:06:b5:46:75:52:d4:cb:10:4f:02:71:b8:3e:b6:
63:78:3d:13:5e:62:c4:66:e4:c8:84:a1:73:f2:6f:ad:06:b0:
58:ac:d9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:58:32 2025 by rpki-client