Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/z_2wrUVU0k4FRlXQr-4vg7UwDGY.roa
File: z_2wrUVU0k4FRlXQr-4vg7UwDGY.roa (raw, json)
Hash identifier: WSz5jGrPwQBQ3/uzk4b4knMbHc9tsjq1xj7ADZzP1hM=
Subject key identifier: CF:FD:B0:AD:45:54:D2:4E:05:46:55:D0:AF:EE:2F:83:B5:30:0C:66
Certificate issuer: /CN=9d210f2259093aaf45285922a588e9a661aba9fa
Certificate serial: 018CC2DB231298C2BE857185F4A47DD0C898
Authority key identifier: 9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/z_2wrUVU0k4FRlXQr-4vg7UwDGY.roa
Signing time: Mon 01 Jan 2024 02:29:50 +0000
ROA not before: Mon 01 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35104
IP address blocks: 46.235.84.0/24 maxlen: 24
46.235.83.0/24 maxlen: 24
46.235.82.0/24 maxlen: 24
46.235.81.0/24 maxlen: 24
46.235.85.0/24 maxlen: 24
46.235.80.0/24 maxlen: 24
46.235.87.0/24 maxlen: 24
46.235.86.0/24 maxlen: 24
188.127.40.0/24 maxlen: 24
188.127.39.0/24 maxlen: 24
188.127.44.0/24 maxlen: 24
188.127.43.0/24 maxlen: 24
188.127.42.0/24 maxlen: 24
188.127.41.0/24 maxlen: 24
37.228.64.0/24 maxlen: 24
188.127.45.0/24 maxlen: 24
188.127.48.0/24 maxlen: 24
37.228.68.0/24 maxlen: 24
37.228.67.0/24 maxlen: 24
37.228.66.0/24 maxlen: 24
37.228.65.0/24 maxlen: 24
37.228.71.0/24 maxlen: 24
37.228.70.0/24 maxlen: 24
37.228.69.0/24 maxlen: 24
188.127.38.0/24 maxlen: 24
188.127.33.0/24 maxlen: 24
188.127.32.0/24 maxlen: 24
188.127.37.0/24 maxlen: 24
188.127.36.0/24 maxlen: 24
188.127.35.0/24 maxlen: 24
188.127.34.0/24 maxlen: 24
93.185.67.0/24 maxlen: 24
93.185.66.0/24 maxlen: 24
93.185.65.0/24 maxlen: 24
93.185.71.0/24 maxlen: 24
93.185.70.0/24 maxlen: 24
93.185.69.0/24 maxlen: 24
93.185.68.0/24 maxlen: 24
93.185.74.0/24 maxlen: 24
93.185.73.0/24 maxlen: 24
93.185.72.0/24 maxlen: 24
93.185.78.0/24 maxlen: 24
93.185.77.0/24 maxlen: 24
93.185.76.0/24 maxlen: 24
93.185.75.0/24 maxlen: 24
93.185.72.0/21 maxlen: 21
93.185.79.0/24 maxlen: 24
89.219.24.0/24 maxlen: 24
89.219.25.0/24 maxlen: 24
89.219.27.0/24 maxlen: 24
89.219.26.0/24 maxlen: 24
77.245.97.0/24 maxlen: 24
77.245.96.0/24 maxlen: 24
77.245.98.0/24 maxlen: 24
77.245.104.0/22 maxlen: 22
77.245.100.0/24 maxlen: 24
77.245.99.0/24 maxlen: 24
77.245.104.0/24 maxlen: 24
77.245.103.0/24 maxlen: 24
77.245.102.0/24 maxlen: 24
77.245.101.0/24 maxlen: 24
77.245.105.0/24 maxlen: 24
77.245.108.0/23 maxlen: 23
77.245.111.0/24 maxlen: 24
77.245.110.0/24 maxlen: 24
77.245.109.0/24 maxlen: 24
77.245.108.0/24 maxlen: 24
77.245.107.0/24 maxlen: 24
77.245.106.0/24 maxlen: 24
93.185.64.0/24 maxlen: 24
193.29.53.0/24 maxlen: 24
185.20.125.0/24 maxlen: 24
185.20.124.0/24 maxlen: 24
185.20.127.0/24 maxlen: 24
185.20.126.0/24 maxlen: 24
80.242.211.0/24 maxlen: 24
80.242.210.0/24 maxlen: 24
80.242.209.0/24 maxlen: 24
80.242.213.0/24 maxlen: 24
80.242.212.0/24 maxlen: 24
80.242.208.0/24 maxlen: 24
185.20.126.0/23 maxlen: 23
80.242.218.0/24 maxlen: 24
80.242.217.0/24 maxlen: 24
80.242.216.0/24 maxlen: 24
80.242.219.0/24 maxlen: 24
80.242.215.0/24 maxlen: 24
80.242.214.0/24 maxlen: 24
80.242.223.0/24 maxlen: 24
80.242.222.0/24 maxlen: 24
80.242.221.0/24 maxlen: 24
80.242.220.0/24 maxlen: 24
95.141.128.0/24 maxlen: 24
95.141.132.0/24 maxlen: 24
95.141.131.0/24 maxlen: 24
95.141.130.0/24 maxlen: 24
95.141.129.0/24 maxlen: 24
95.141.136.0/22 maxlen: 22
95.141.135.0/24 maxlen: 24
95.141.134.0/24 maxlen: 24
95.141.133.0/24 maxlen: 24
95.141.139.0/24 maxlen: 24
95.141.138.0/24 maxlen: 24
95.141.137.0/24 maxlen: 24
95.141.136.0/24 maxlen: 24
95.141.142.0/24 maxlen: 24
95.141.141.0/24 maxlen: 24
95.141.140.0/24 maxlen: 24
95.141.143.0/24 maxlen: 24
217.196.16.0/24 maxlen: 24
217.196.17.0/24 maxlen: 24
217.196.24.0/24 maxlen: 24
217.196.23.0/24 maxlen: 24
217.196.19.0/24 maxlen: 24
217.196.18.0/24 maxlen: 24
217.196.22.0/24 maxlen: 24
217.196.21.0/24 maxlen: 24
217.196.20.0/24 maxlen: 24
217.196.31.0/24 maxlen: 24
217.196.30.0/24 maxlen: 24
217.196.26.0/24 maxlen: 24
217.196.25.0/24 maxlen: 24
217.196.29.0/24 maxlen: 24
217.196.28.0/24 maxlen: 24
217.196.27.0/24 maxlen: 24
217.196.26.0/23 maxlen: 23
195.189.31.0/24 maxlen: 24
195.189.30.0/24 maxlen: 24
195.189.29.0/24 maxlen: 24
195.189.28.0/24 maxlen: 24
188.0.132.0/24 maxlen: 24
188.0.131.0/24 maxlen: 24
188.0.130.0/24 maxlen: 24
188.0.129.0/24 maxlen: 24
188.0.128.0/24 maxlen: 24
188.0.139.0/24 maxlen: 24
188.0.138.0/24 maxlen: 24
188.0.137.0/24 maxlen: 24
188.0.136.0/24 maxlen: 24
188.0.135.0/24 maxlen: 24
188.0.134.0/24 maxlen: 24
188.0.133.0/24 maxlen: 24
188.0.145.0/24 maxlen: 24
188.0.144.0/24 maxlen: 24
188.0.143.0/24 maxlen: 24
188.0.142.0/24 maxlen: 24
188.0.141.0/24 maxlen: 24
188.0.140.0/22 maxlen: 24
188.0.146.0/24 maxlen: 24
188.0.149.0/24 maxlen: 24
188.0.148.0/24 maxlen: 24
188.0.147.0/24 maxlen: 24
188.0.152.0/24 maxlen: 24
188.0.151.0/24 maxlen: 24
188.0.150.0/24 maxlen: 24
188.0.159.0/24 maxlen: 24
188.0.158.0/24 maxlen: 24
188.0.157.0/24 maxlen: 24
188.0.153.0/24 maxlen: 24
188.0.156.0/24 maxlen: 24
188.0.155.0/24 maxlen: 24
188.0.154.0/24 maxlen: 24
2a03:a300:4000::/44 maxlen: 44
2a03:a300:5000::/44 maxlen: 44
2a03:a300:5000::/42 maxlen: 42
2a03:a300:1140::/48 maxlen: 48
2a03:a300:2020::/48 maxlen: 48
2a03:a300:3000::/48 maxlen: 48
2a03:a300:1000::/48 maxlen: 48
2a03:a300:2000::/48 maxlen: 48
2a03:a300:4100::/48 maxlen: 48
2a03:a300:800::/37 maxlen: 37
2a03:a300:5000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 28 Mar 2024 05:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:23:12:98:c2:be:85:71:85:f4:a4:7d:d0:c8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d210f2259093aaf45285922a588e9a661aba9fa
Validity
Not Before: Jan 1 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cffdb0ad4554d24e054655d0afee2f83b5300c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:aa:80:93:32:0c:f6:88:0c:44:87:b6:a1:
37:bf:de:44:54:4c:8b:3e:e4:84:7a:14:a8:3b:d5:
1e:c1:8c:c0:45:69:62:21:91:14:8f:46:0d:9f:55:
56:d4:98:d3:00:ea:28:59:08:9c:61:7f:1e:44:dc:
b5:c6:7b:22:71:cd:99:26:04:ba:a3:1d:66:1e:e0:
75:d4:4b:98:dd:ea:44:cf:f8:10:52:88:fd:9b:b6:
48:4b:04:57:f4:01:ac:5a:22:bf:5f:06:5a:a7:16:
ee:91:93:f1:55:02:9e:b4:4b:86:e5:7f:ab:fc:e2:
77:c0:c7:21:68:c0:83:a6:40:81:55:12:1b:20:94:
e5:19:99:db:a1:1e:ad:96:06:c0:6d:15:3d:00:ae:
42:aa:f3:2e:43:1f:e3:f1:db:d9:b4:63:92:33:9a:
87:ea:5e:4e:5d:ef:ee:91:54:9b:b4:42:2d:b9:eb:
28:36:ac:c2:e8:97:89:e2:db:6d:52:3d:10:c9:68:
23:4a:77:46:fd:b1:f1:eb:9e:32:3e:9e:5d:74:52:
43:7c:6d:01:e1:d6:8b:cc:e1:35:29:16:85:b6:ba:
3e:37:2f:58:27:99:49:9d:ff:46:0f:90:83:f5:f0:
e2:9c:5e:91:f9:97:3b:ba:db:e9:74:f2:a9:83:6a:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FD:B0:AD:45:54:D2:4E:05:46:55:D0:AF:EE:2F:83:B5:30:0C:66
X509v3 Authority Key Identifier:
keyid:9D:21:0F:22:59:09:3A:AF:45:28:59:22:A5:88:E9:A6:61:AB:A9:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSEPIlkJOq9FKFkipYjppmGrqfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/z_2wrUVU0k4FRlXQr-4vg7UwDGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/93686d-11f5-4e3e-b5c4-43843c2e943b/1/nSEPIlkJOq9FKFkipYjppmGrqfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.64.0/21
46.235.80.0/21
77.245.96.0/20
80.242.208.0/20
89.219.24.0/22
93.185.64.0/20
95.141.128.0/20
185.20.124.0/22
188.0.128.0/19
188.127.32.0-188.127.45.255
188.127.48.0/24
193.29.53.0/24
195.189.28.0/22
217.196.16.0/20
IPv6:
2a03:a300:800::-2a03:a300:1000:ffff:ffff:ffff:ffff:ffff
2a03:a300:1140::/48
2a03:a300:2000::/48
2a03:a300:2020::/48
2a03:a300:3000::/48
2a03:a300:4000::/44
2a03:a300:4100::/48
2a03:a300:5000::/36
Signature Algorithm: sha256WithRSAEncryption
af:29:97:52:fe:61:d0:14:59:5e:84:04:68:17:64:c5:8a:6d:
78:53:4f:3e:e7:ff:1d:78:65:47:d6:ce:9e:72:8c:b7:ea:22:
3f:03:25:79:a8:44:f5:51:2a:bc:ca:0a:80:e7:ab:43:53:e4:
0b:34:a1:ef:07:92:89:19:3d:54:83:72:65:dd:47:d9:51:d0:
c3:5d:06:d7:9b:39:5f:d6:97:bc:c1:90:79:4f:79:31:25:ea:
60:99:d4:a7:82:e7:57:f2:7b:3c:f6:08:a7:71:e1:ed:7f:96:
70:e6:cf:68:fe:2e:e0:14:07:5e:b7:56:8d:a8:db:08:20:13:
d3:a5:7c:64:0c:86:bf:0f:8a:80:f3:b5:c3:62:80:bc:23:cb:
7e:31:c4:7c:ac:83:73:78:e5:40:fc:6b:4b:29:bb:5a:14:7a:
57:ed:73:97:d0:a8:43:d9:80:c5:e1:f6:e9:16:91:96:fb:97:
42:3f:e9:dd:65:76:93:58:52:39:f3:b5:0f:cd:86:48:b8:4c:
33:ff:98:3d:3b:6a:d8:a2:fa:5b:20:58:4c:08:36:af:60:98:
77:0d:39:58:d2:d3:22:64:32:1d:39:67:e7:42:74:bd:0e:25:
7b:9d:36:d6:c1:3a:e4:9a:97:15:a0:67:08:08:61:9a:c4:a0:
dd:a6:e8:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:39 2024 by rpki-client on console-ams.rpki-client.org