Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZJjjp3qBrus1GjLCRwq3MJg0_X0.roa
File: ZJjjp3qBrus1GjLCRwq3MJg0_X0.roa (raw, json)
Hash identifier: qVLVnET2n3Jb72rXmtoxkxzwZ9AQ0vrZW8W3znfnQ6Y=
Subject key identifier: 64:98:E3:A7:7A:81:AE:EB:35:1A:32:C2:47:0A:B7:30:98:34:FD:7D
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018968E16013895C0DF5FCF6A3E8848CC957
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZJjjp3qBrus1GjLCRwq3MJg0_X0.roa
Signing time: Tue 18 Jul 2023 12:02:27 +0000
ROA not before: Tue 18 Jul 2023 12:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 95.174.160.0/19 maxlen: 24
87.255.128.0/19 maxlen: 24
217.19.192.0/20 maxlen: 24
159.20.8.0/21 maxlen: 24
213.222.64.0/18 maxlen: 24
95.168.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
185.147.204.0/22 maxlen: 24
79.174.192.0/18 maxlen: 24
85.168.0.0/14 maxlen: 24
194.6.128.0/19 maxlen: 24
195.146.192.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
77.140.0.0/14 maxlen: 24
62.106.128.0/17 maxlen: 24
217.112.224.0/20 maxlen: 24
194.153.89.0/24 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.97.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
178.18.176.0/20 maxlen: 24
87.100.0.0/17 maxlen: 24
212.39.128.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
178.19.0.0/20 maxlen: 24
81.220.0.0/16 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
62.85.128.0/19 maxlen: 24
37.64.0.0/13 maxlen: 24
46.165.64.0/18 maxlen: 24
89.185.160.0/19 maxlen: 24
84.205.128.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
91.91.0.0/16 maxlen: 24
88.219.0.0/16 maxlen: 24
81.64.0.0/14 maxlen: 24
80.118.0.0/15 maxlen: 24
195.132.0.0/16 maxlen: 24
195.98.96.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
84.4.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
79.132.32.0/19 maxlen: 24
77.192.0.0/12 maxlen: 24
86.64.0.0/12 maxlen: 24
80.70.32.0/20 maxlen: 24
80.124.0.0/15 maxlen: 24
82.151.0.0/19 maxlen: 24
95.157.192.0/18 maxlen: 24
212.198.0.0/16 maxlen: 24
93.191.80.0/21 maxlen: 24
77.84.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
86.63.224.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
77.144.0.0/12 maxlen: 24
217.70.80.0/20 maxlen: 24
85.117.128.0/19 maxlen: 24
195.3.0.0/18 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
95.171.128.0/19 maxlen: 24
77.137.208.0/20 maxlen: 24
80.185.0.0/16 maxlen: 24
81.185.0.0/16 maxlen: 24
77.137.224.0/19 maxlen: 24
84.96.0.0/13 maxlen: 24
87.231.0.0/16 maxlen: 24
62.62.169.0/24 maxlen: 24
89.2.0.0/15 maxlen: 24
188.224.0.0/17 maxlen: 24
95.136.128.0/17 maxlen: 24
194.183.192.0/19 maxlen: 24
62.62.128.0/17 maxlen: 24
89.157.88.0/21 maxlen: 24
89.157.96.0/19 maxlen: 24
141.170.216.0/21 maxlen: 24
213.245.0.0/16 maxlen: 24
185.150.120.0/22 maxlen: 24
213.203.64.0/18 maxlen: 24
89.156.0.0/14 maxlen: 24
213.169.160.0/19 maxlen: 24
93.0.0.0/11 maxlen: 24
109.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
81.1.0.0/18 maxlen: 24
88.136.0.0/13 maxlen: 24
213.176.192.0/19 maxlen: 24
84.55.128.0/18 maxlen: 24
89.170.0.0/16 maxlen: 24
62.129.160.0/19 maxlen: 24
62.8.0.0/19 maxlen: 24
77.136.0.0/16 maxlen: 24
46.35.0.0/19 maxlen: 24
80.236.0.0/17 maxlen: 24
77.128.0.0/13 maxlen: 24
188.7.0.0/16 maxlen: 24
212.94.160.0/19 maxlen: 24
83.141.128.0/17 maxlen: 24
188.141.128.0/17 maxlen: 24
213.128.32.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.7.96.0/19 maxlen: 24
92.88.0.0/13 maxlen: 24
85.68.0.0/15 maxlen: 24
213.223.0.0/16 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
82.216.0.0/16 maxlen: 24
95.175.160.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
78.155.128.0/19 maxlen: 24
2a00:8d80::/32 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:5e80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:8380::/32 maxlen: 48
2a00:7180::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jul 2023 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:e1:60:13:89:5c:0d:f5:fc:f6:a3:e8:84:8c:c9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jul 18 12:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6498e3a77a81aeeb351a32c2470ab7309834fd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:ec:2b:46:5f:3c:3c:df:cd:21:b3:e6:45:
7b:66:7f:b1:69:bb:41:09:9b:7b:92:58:cd:75:2e:
8d:3a:2c:29:f3:b6:83:43:70:31:5a:42:12:87:d0:
cb:cb:8d:9e:0e:8a:60:3f:9d:dd:f8:98:7f:b4:14:
82:11:5c:4c:9d:4a:ae:b3:db:3a:f2:4e:41:17:32:
f1:ef:58:11:48:ee:36:6f:e9:d3:42:45:73:8b:40:
14:83:b0:fe:3f:30:42:11:e9:ee:2d:cc:d6:e0:1a:
94:87:51:c6:84:e4:8d:ea:b7:8e:39:30:71:83:d5:
6e:8d:f0:18:cf:ee:ca:31:37:ee:23:06:92:8b:ba:
b6:36:aa:76:ab:bf:97:6c:64:7f:d4:48:09:63:9b:
ed:b1:e0:04:8b:47:9f:8f:a3:8f:3a:f5:9b:c7:7b:
bb:c4:5b:37:af:9e:54:68:f4:89:5f:5c:d5:ae:b2:
67:87:f9:d6:e1:c6:70:d9:73:13:33:a6:77:89:d3:
19:aa:16:68:36:34:63:6c:24:0f:df:7e:d1:e2:85:
05:f5:68:e7:83:ee:87:0f:a9:23:36:c0:50:ee:84:
29:1b:46:a3:d4:ae:82:b3:40:e9:ea:d8:df:26:f1:
21:09:d4:8b:52:10:56:61:a6:a1:ee:4a:62:c3:74:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:E3:A7:7A:81:AE:EB:35:1A:32:C2:47:0A:B7:30:98:34:FD:7D
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/ZJjjp3qBrus1GjLCRwq3MJg0_X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.192.0/18
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
109.0.0.0/11
141.170.216.0/21
159.20.8.0/21
178.18.176.0/20
178.19.0.0/20
185.147.204.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8380::/32
2a00:8d80::/32
2a00:ec80::/31
2a02:8400::/25
Signature Algorithm: sha256WithRSAEncryption
92:88:c8:b5:56:24:3f:be:0c:eb:62:a6:1f:93:98:2d:c2:fb:
26:fe:0f:89:8a:9e:b8:68:ba:6d:57:82:b0:51:bc:dd:b8:ab:
f8:76:6a:81:5f:4b:40:2c:74:5a:44:79:7b:b6:5c:6f:18:0a:
3c:38:b2:f0:bd:00:21:3e:58:7c:1e:da:22:02:d2:5f:5f:f3:
f0:bc:24:f0:05:9c:5f:78:c8:00:87:3a:67:55:7b:4a:e5:15:
94:0a:3c:8e:08:c1:27:22:50:52:d7:8a:5e:46:a8:cf:ad:22:
af:49:0c:4f:5b:4b:f1:a4:f8:f4:56:e5:92:fc:e3:61:aa:04:
85:2d:18:0d:fb:07:24:5a:67:0d:4b:32:62:46:5a:ce:3e:79:
8b:09:34:78:6e:3c:3c:40:a8:45:bf:43:59:0b:d8:0d:ca:7a:
1a:41:41:52:bc:5c:7c:0e:fc:26:44:fc:ad:3a:c3:3a:8d:67:
92:36:92:08:48:3f:07:7d:f5:7f:2b:f5:90:3d:5d:50:4d:bf:
14:62:e5:c7:22:56:ec:9c:90:fb:c0:d4:0c:b6:71:06:c9:eb:
47:f6:64:fd:cf:79:19:dd:af:f7:9d:96:8b:b7:ce:e8:63:2e:
34:31:38:11:06:a9:1f:65:41:0f:4f:7c:ce:94:56:9c:a9:f2:
58:96:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:55 2024 by rpki-client on console-fra.rpki-client.org