Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZBu1zBv6RDvEwoaed8xYze5UiMY.roa
File: ZBu1zBv6RDvEwoaed8xYze5UiMY.roa (raw, json)
Hash identifier: 2SGy8Fe5qb8T60ja0dCzRZ6d3xIPthNRskmvrMZtBts=
Subject key identifier: 64:1B:B5:CC:1B:FA:44:3B:C4:C2:86:9E:77:CC:58:CD:EE:54:88:C6
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AF4D8ED3FA036D4F8959C304B2CEFFDE8
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZBu1zBv6RDvEwoaed8xYze5UiMY.roa
Signing time: Tue 03 Oct 2023 09:22:51 +0000
ROA not before: Tue 03 Oct 2023 09:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.40.0/24 maxlen: 24
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.62.0/24 maxlen: 24
5.8.59.0/24 maxlen: 24
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:d8:ed:3f:a0:36:d4:f8:95:9c:30:4b:2c:ef:fd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 3 09:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=641bb5cc1bfa443bc4c2869e77cc58cdee5488c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:c2:7f:8a:8d:75:00:f3:14:fc:0a:c9:e1:
04:0e:f5:66:8b:29:b3:1c:47:db:39:f4:3c:8e:62:
0e:1a:0e:7d:49:0b:a1:b9:49:b9:30:9e:48:18:2b:
75:42:a8:4f:02:d8:95:7e:30:70:69:1d:e5:82:e7:
d1:fa:37:a1:e9:47:4a:7d:d0:cf:09:dd:73:9c:85:
f0:5d:74:6f:d6:52:8f:9e:c8:82:65:b8:ec:26:50:
27:a9:dd:ed:a8:9c:b6:fc:18:76:bd:0d:25:13:de:
b2:df:84:9f:7f:81:c4:35:ff:27:3c:6b:9b:d9:f8:
e8:10:50:38:12:cc:f2:86:c5:d8:24:c1:e1:80:09:
bd:9e:df:f2:6a:3f:46:d4:18:46:b5:4c:6a:9a:b9:
5b:32:c2:18:e4:e6:bb:83:f7:f5:21:96:e2:e6:99:
ac:5a:16:24:5c:4e:d3:64:20:7b:96:fc:f8:c0:45:
d1:7d:15:9a:ca:fa:c4:2d:c4:cd:37:cf:16:62:9e:
6a:35:f4:88:1e:e8:94:98:88:1d:6c:93:29:9a:d5:
40:9a:cd:6e:50:7c:8b:e1:2a:3e:78:0b:a5:81:ed:
88:87:06:3f:fb:c5:14:7f:77:1c:3a:9a:6b:a4:ca:
dc:cb:e5:de:b6:76:75:36:72:19:51:47:b4:fa:64:
e4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1B:B5:CC:1B:FA:44:3B:C4:C2:86:9E:77:CC:58:CD:EE:54:88:C6
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZBu1zBv6RDvEwoaed8xYze5UiMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.59.0-5.8.62.255
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0/24
5.188.210.0/23
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.40.0/24
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
4d:9a:67:53:b9:f8:b6:60:86:9d:64:28:e3:d6:d5:1a:f6:4e:
8b:83:ed:3c:83:b7:2f:8a:a5:31:ef:b7:41:80:8c:18:83:09:
e6:d4:4c:8e:f1:a1:e9:d6:d2:20:33:4e:cd:98:b3:ec:9d:2c:
55:cb:81:4c:5c:09:62:28:a3:04:4d:5e:3d:a3:f0:b7:a4:51:
05:a3:95:b6:3d:3f:91:31:fd:56:cb:15:27:5f:15:73:90:d4:
90:43:31:32:d2:40:46:03:e0:82:50:49:a9:a4:c6:e6:12:cb:
c4:03:f0:78:24:76:1d:83:8d:5d:3b:ba:01:4e:ae:ac:e7:39:
c6:32:ad:c3:dc:5f:69:a1:d6:f6:92:51:82:21:05:3e:da:6a:
50:0f:3b:d1:04:71:0f:8e:e0:bc:f2:bf:97:dd:c2:1b:a0:2f:
7d:9d:97:de:ce:4f:8e:02:36:1b:cd:ca:00:43:e3:a1:c8:c1:
25:91:4d:1b:91:97:77:ce:b4:3a:62:7d:89:ca:e3:ae:0f:f0:
35:ce:23:54:a8:4a:eb:ee:f2:e1:97:c3:cc:71:7f:5a:0a:63:
cc:02:76:79:5d:38:05:6d:c6:5a:72:eb:c5:4d:31:3b:ce:7b:
0e:ba:ea:8c:80:2f:f5:87:87:af:45:72:ea:80:12:55:d4:1b:
79:7b:3c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 13:54:38 2023 by rpki-client on console-fra.rpki-client.org