Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUKZqrVQEKbVB2QFJEqj8mcWMGk.roa
File: ZUKZqrVQEKbVB2QFJEqj8mcWMGk.roa (raw, json)
Hash identifier: pbxjQ5xguIb/JCUcNHxjapFVe0JOLtJxZq9PmzOfHyk=
Subject key identifier: 65:42:99:AA:B5:50:10:A6:D5:07:64:05:24:4A:A3:F2:67:16:30:69
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CD9695744718F1B06709587D3FE65D84A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUKZqrVQEKbVB2QFJEqj8mcWMGk.roa
Signing time: Fri 05 Jan 2024 11:36:48 +0000
ROA not before: Fri 05 Jan 2024 11:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34224
IP address blocks: 87.120.165.0/24 maxlen: 24
212.73.131.0/24 maxlen: 24
212.73.128.0/23 maxlen: 24
212.73.132.0/24 maxlen: 24
212.73.130.0/23 maxlen: 24
212.73.136.0/24 maxlen: 24
87.120.176.0/24 maxlen: 24
212.73.133.0/24 maxlen: 24
212.73.138.0/23 maxlen: 24
212.73.138.0/24 maxlen: 24
212.73.134.0/24 maxlen: 24
212.73.143.0/24 maxlen: 24
212.73.140.0/24 maxlen: 24
212.73.144.0/24 maxlen: 24
212.73.141.0/24 maxlen: 24
212.73.145.0/24 maxlen: 24
212.73.142.0/24 maxlen: 24
212.73.147.0/24 maxlen: 24
212.73.148.0/24 maxlen: 24
212.73.146.0/24 maxlen: 24
212.73.155.0/24 maxlen: 24
212.73.157.0/24 maxlen: 24
87.120.195.0/24 maxlen: 24
87.120.199.0/24 maxlen: 24
87.120.206.0/24 maxlen: 24
87.120.206.0/23 maxlen: 24
87.120.201.0/24 maxlen: 24
87.120.200.0/24 maxlen: 24
87.120.207.0/24 maxlen: 24
87.120.109.0/24 maxlen: 24
87.120.128.0/23 maxlen: 24
87.120.132.0/24 maxlen: 24
87.120.134.0/24 maxlen: 24
87.120.133.0/24 maxlen: 24
87.120.135.0/24 maxlen: 24
37.60.138.0/24 maxlen: 24
87.121.42.0/24 maxlen: 24
37.60.139.0/24 maxlen: 24
92.249.49.0/24 maxlen: 24
87.121.52.0/24 maxlen: 24
87.121.64.0/24 maxlen: 24
87.120.217.0/24 maxlen: 24
87.120.223.0/24 maxlen: 24
87.120.36.100/32 maxlen: 32
87.120.253.0/24 maxlen: 24
87.120.255.0/24 maxlen: 24
87.121.0.0/23 maxlen: 24
87.121.0.0/24 maxlen: 24
87.121.1.0/24 maxlen: 24
87.121.2.0/24 maxlen: 24
87.120.254.0/24 maxlen: 24
87.121.6.0/23 maxlen: 24
91.92.219.0/24 maxlen: 24
91.92.230.0/24 maxlen: 24
91.92.198.0/23 maxlen: 24
91.92.197.0/24 maxlen: 24
87.120.61.0/24 maxlen: 24
87.120.104.0/24 maxlen: 24
87.120.6.0/23 maxlen: 24
87.120.6.0/24 maxlen: 24
87.120.8.0/24 maxlen: 24
87.120.13.0/24 maxlen: 24
87.120.37.0/24 maxlen: 24
87.120.43.0/24 maxlen: 24
87.120.39.0/24 maxlen: 24
91.92.0.0/24 maxlen: 24
91.92.2.0/24 maxlen: 24
91.92.1.0/24 maxlen: 24
2.58.92.0/24 maxlen: 24
91.92.109.0/24 maxlen: 24
91.92.139.0/24 maxlen: 24
91.92.69.0/24 maxlen: 24
91.92.65.0/24 maxlen: 24
91.92.66.0/24 maxlen: 24
91.92.68.0/24 maxlen: 24
91.92.105.0/24 maxlen: 24
91.212.233.0/24 maxlen: 24
94.156.216.0/21 maxlen: 24
94.156.233.0/24 maxlen: 24
94.156.227.0/24 maxlen: 24
94.156.232.0/24 maxlen: 24
83.143.115.0/24 maxlen: 24
85.217.140.0/24 maxlen: 24
93.123.64.0/24 maxlen: 24
94.156.249.0/24 maxlen: 24
94.156.251.0/24 maxlen: 24
94.156.252.0/24 maxlen: 24
94.156.172.0/23 maxlen: 24
94.156.179.0/24 maxlen: 24
93.123.8.0/24 maxlen: 24
94.156.185.0/24 maxlen: 24
94.156.188.0/24 maxlen: 24
94.156.190.0/24 maxlen: 24
93.123.12.0/24 maxlen: 24
194.55.184.0/23 maxlen: 24
93.123.18.0/24 maxlen: 24
93.123.28.0/23 maxlen: 24
93.123.37.0/24 maxlen: 24
93.123.36.0/24 maxlen: 24
93.123.32.0/22 maxlen: 24
93.123.117.0/24 maxlen: 24
94.156.15.0/24 maxlen: 24
94.156.12.0/24 maxlen: 24
94.156.44.0/24 maxlen: 24
94.156.42.0/24 maxlen: 24
94.156.106.0/24 maxlen: 24
94.156.130.0/24 maxlen: 24
94.156.129.0/24 maxlen: 24
94.156.159.0/24 maxlen: 24
94.156.158.0/24 maxlen: 24
94.156.153.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
94.156.77.0/24 maxlen: 24
94.156.98.0/24 maxlen: 24
94.156.94.0/24 maxlen: 24
94.156.100.0/24 maxlen: 24
212.87.207.0/24 maxlen: 24
45.81.38.0/24 maxlen: 24
31.13.195.0/24 maxlen: 24
31.13.197.0/24 maxlen: 24
87.121.150.0/23 maxlen: 24
31.13.208.0/24 maxlen: 24
31.13.217.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
31.13.216.0/21 maxlen: 24
31.13.223.0/24 maxlen: 24
31.13.221.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.83.0/24 maxlen: 24
87.121.82.0/24 maxlen: 24
87.121.90.0/23 maxlen: 24
87.121.112.0/24 maxlen: 24
87.121.111.0/24 maxlen: 24
87.121.118.0/24 maxlen: 24
87.121.113.0/24 maxlen: 24
31.13.230.0/23 maxlen: 24
31.13.236.0/22 maxlen: 24
31.13.245.0/24 maxlen: 24
31.13.241.0/24 maxlen: 24
31.13.248.0/24 maxlen: 24
2a00:1728:35::/48 maxlen: 48
2a00:1728:27::/48 maxlen: 48
2a00:1728:21::/48 maxlen: 48
2a00:1728:0:d::/64 maxlen: 64
2a00:1728:1b::/48 maxlen: 48
2a00:1728:34::/48 maxlen: 48
2a00:1728:23::/48 maxlen: 48
2a00:1728:31::/48 maxlen: 48
2a00:1728:25::/48 maxlen: 48
2a00:1728:3::/48 maxlen: 48
2a00:1728:1f::/48 maxlen: 48
2a00:1728::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 09:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:69:57:44:71:8f:1b:06:70:95:87:d3:fe:65:d8:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 5 11:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=654299aab55010a6d5076405244aa3f267163069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:cf:d1:9f:72:6d:f9:6b:df:b1:80:b8:9f:
08:40:dc:f0:4b:98:9b:4a:ce:c2:8a:07:7e:92:68:
73:38:9d:34:21:30:78:e1:9b:91:0e:37:cb:74:0f:
3a:30:62:83:d9:d2:13:46:46:b2:16:ad:39:64:b5:
90:ec:ff:ef:6c:e9:fa:95:7c:7b:d5:ca:b4:88:8a:
3d:31:64:2a:8e:74:cb:25:e1:bc:68:b9:c9:11:7e:
61:03:83:18:fd:b0:fd:73:3b:5b:49:59:8d:68:bb:
1d:57:a5:85:38:fe:99:f6:66:44:f3:e1:8c:0b:15:
41:9f:cf:6c:f0:de:c9:dc:6e:66:c3:56:01:3f:42:
b6:e1:a1:39:91:4d:aa:65:4f:99:06:c7:5a:69:6b:
30:1a:ad:58:e7:6a:8e:d1:ad:7c:b7:75:11:e3:1c:
8e:59:6b:cb:c1:3e:cf:71:a7:9e:1b:17:fd:6b:43:
26:67:9a:7b:9c:54:37:ea:ad:3a:e4:ac:a1:4f:b5:
9b:6e:ec:88:72:2b:61:fa:01:59:08:eb:4b:b5:d5:
b0:f4:2a:26:d7:9f:ed:9d:f4:ae:06:28:cc:91:64:
52:6c:73:f3:75:84:85:42:f6:56:7b:87:49:e8:5c:
0b:0b:4b:59:90:b9:76:73:3e:c6:24:e8:db:37:1d:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:42:99:AA:B5:50:10:A6:D5:07:64:05:24:4A:A3:F2:67:16:30:69
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ZUKZqrVQEKbVB2QFJEqj8mcWMGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.92.0/24
31.13.195.0/24
31.13.197.0/24
31.13.208.0/24
31.13.216.0/21
31.13.230.0/23
31.13.236.0/22
31.13.241.0/24
31.13.245.0/24
31.13.248.0/24
37.60.138.0/23
45.81.38.0/24
83.143.115.0/24
85.217.140.0/24
87.120.6.0-87.120.8.255
87.120.13.0/24
87.120.36.100/32
87.120.37.0/24
87.120.39.0/24
87.120.43.0/24
87.120.61.0/24
87.120.104.0/24
87.120.109.0/24
87.120.128.0/23
87.120.132.0/22
87.120.165.0/24
87.120.176.0/24
87.120.195.0/24
87.120.199.0-87.120.201.255
87.120.206.0/23
87.120.217.0/24
87.120.223.0/24
87.120.253.0-87.121.2.255
87.121.6.0/23
87.121.42.0/24
87.121.52.0/24
87.121.64.0/24
87.121.79.0/24
87.121.82.0/23
87.121.90.0/23
87.121.111.0-87.121.113.255
87.121.118.0/24
87.121.150.0/23
87.121.161.0/24
91.92.0.0-91.92.2.255
91.92.65.0-91.92.66.255
91.92.68.0/23
91.92.105.0/24
91.92.109.0/24
91.92.139.0/24
91.92.197.0-91.92.199.255
91.92.219.0/24
91.92.230.0/24
91.212.233.0/24
92.249.49.0/24
93.123.8.0/24
93.123.12.0/24
93.123.18.0/24
93.123.28.0/23
93.123.32.0-93.123.37.255
93.123.64.0/24
93.123.117.0/24
94.156.12.0/24
94.156.15.0/24
94.156.42.0/24
94.156.44.0/24
94.156.77.0/24
94.156.94.0/24
94.156.98.0/24
94.156.100.0/24
94.156.106.0/24
94.156.129.0-94.156.130.255
94.156.153.0/24
94.156.158.0/23
94.156.172.0/23
94.156.179.0/24
94.156.185.0/24
94.156.188.0/24
94.156.190.0/24
94.156.216.0/21
94.156.227.0/24
94.156.232.0/23
94.156.249.0/24
94.156.251.0-94.156.252.255
194.55.184.0/23
194.169.173.0/24
212.73.128.0-212.73.134.255
212.73.136.0/24
212.73.138.0-212.73.148.255
212.73.155.0/24
212.73.157.0/24
212.87.207.0/24
IPv6:
2a00:1728::/32
Signature Algorithm: sha256WithRSAEncryption
61:f5:b7:ba:ce:3b:95:cb:ad:5b:6e:59:74:22:af:c8:ce:f5:
13:5b:72:55:f3:de:d6:c7:a8:ad:67:3c:c5:03:bf:c4:55:79:
56:58:2f:0d:88:63:22:c2:77:2e:20:7a:88:48:c4:e6:b9:05:
c7:df:4c:68:f8:57:f9:45:99:6b:19:23:0e:a8:d5:77:9a:fb:
06:f7:16:98:5f:9c:bd:eb:8e:69:1e:fa:11:30:94:bc:4c:e6:
18:fc:f7:27:ea:62:57:9d:07:59:3d:0e:48:45:98:c2:e0:c7:
28:3c:e7:0c:24:60:35:91:25:30:28:ea:5f:ea:49:4e:41:6b:
16:21:b6:d6:84:f0:b9:1b:35:1e:28:9e:e7:5e:a7:7e:f8:7e:
a6:73:eb:61:8b:81:f5:64:da:97:df:01:60:fe:67:14:7c:c1:
5f:e1:1e:4b:c7:2b:e9:fc:24:a6:d2:3d:8f:de:3e:09:9b:2a:
1b:39:6f:5b:9f:fd:35:3b:0f:24:14:fa:5b:0d:14:75:ab:17:
4f:b3:bb:5e:54:55:5e:82:cd:de:f2:26:d3:8c:cc:d0:aa:a2:
ee:15:44:46:e7:0f:47:ae:1c:29:97:ef:92:f8:aa:36:d9:74:
45:98:35:2a:53:bc:31:14:a2:4c:3f:e7:0b:47:bc:6d:a1:9b:
cc:81:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 19 12:41:45 2024 by rpki-client on console-fra.rpki-client.org