Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZoyoQhsBj_9f0DsEcLoKFMbIKts.roa
File: ZoyoQhsBj_9f0DsEcLoKFMbIKts.roa (raw, json)
Hash identifier: j/qIEex+Sgdp3sBs2F1p2TP1/K2fZEWrNm/I9tPBksc=
Subject key identifier: 66:8C:A8:42:1B:01:8F:FF:5F:D0:3B:04:70:BA:0A:14:C6:C8:2A:DB
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56DFEA1990828371DC33E437AA81AA2
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZoyoQhsBj_9f0DsEcLoKFMbIKts.roa
Signing time: Mon 01 Jan 2024 14:29:29 +0000
ROA not before: Mon 01 Jan 2024 14:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 46.161.14.0/23 maxlen: 23
46.161.24.0/23 maxlen: 23
95.215.2.0/23 maxlen: 23
95.215.0.0/22 maxlen: 24
95.215.0.0/23 maxlen: 23
95.215.3.0/24 maxlen: 24
95.215.1.0/24 maxlen: 24
95.215.2.0/24 maxlen: 24
95.215.0.0/24 maxlen: 24
46.161.32.0/22 maxlen: 22
46.161.44.0/22 maxlen: 22
46.161.48.0/22 maxlen: 22
46.161.48.0/23 maxlen: 23
46.161.50.0/23 maxlen: 23
46.161.48.0/24 maxlen: 24
46.161.51.0/24 maxlen: 24
46.161.49.0/24 maxlen: 24
46.161.50.0/24 maxlen: 24
5.188.44.0/22 maxlen: 22
5.188.44.0/23 maxlen: 23
5.188.44.0/24 maxlen: 24
5.188.46.0/23 maxlen: 23
5.188.49.0/24 maxlen: 24
5.188.47.0/24 maxlen: 24
5.188.46.0/24 maxlen: 24
5.188.45.0/24 maxlen: 24
46.161.2.0/23 maxlen: 23
46.161.10.0/24 maxlen: 24
46.161.8.0/24 maxlen: 24
5.101.4.0/24 maxlen: 24
5.101.2.0/24 maxlen: 24
5.101.3.0/24 maxlen: 24
5.101.0.0/24 maxlen: 24
5.101.1.0/24 maxlen: 24
5.101.2.0/23 maxlen: 23
5.101.4.0/22 maxlen: 22
5.101.4.0/23 maxlen: 23
5.101.0.0/22 maxlen: 22
5.101.0.0/23 maxlen: 23
5.101.7.0/24 maxlen: 24
5.101.5.0/24 maxlen: 24
5.101.6.0/24 maxlen: 24
5.101.6.0/23 maxlen: 23
5.188.62.0/24 maxlen: 24
37.139.58.0/24 maxlen: 24
37.139.57.0/24 maxlen: 24
37.139.56.0/24 maxlen: 24
37.139.53.0/24 maxlen: 24
37.139.58.0/23 maxlen: 23
37.139.56.0/23 maxlen: 23
37.139.56.0/22 maxlen: 22
37.139.54.0/23 maxlen: 23
37.139.59.0/24 maxlen: 24
31.44.184.0/24 maxlen: 24
31.44.188.0/22 maxlen: 32
146.185.224.0/21 maxlen: 21
146.185.223.0/24 maxlen: 24
31.184.192.0/24 maxlen: 24
31.184.192.0/23 maxlen: 23
31.184.192.0/22 maxlen: 22
31.184.193.0/24 maxlen: 24
31.184.196.0/24 maxlen: 24
31.184.195.0/24 maxlen: 24
31.184.196.0/22 maxlen: 22
31.184.196.0/23 maxlen: 23
31.184.194.0/23 maxlen: 23
31.184.194.0/24 maxlen: 24
31.184.199.0/24 maxlen: 24
31.184.198.0/23 maxlen: 23
31.184.197.0/24 maxlen: 24
31.184.198.0/24 maxlen: 24
195.2.240.0/23 maxlen: 24
31.184.231.0/24 maxlen: 24
31.184.228.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
31.184.243.0/24 maxlen: 24
188.143.232.0/24 maxlen: 24
188.143.233.0/24 maxlen: 24
188.143.232.0/23 maxlen: 23
188.143.232.0/22 maxlen: 22
37.9.48.0/24 maxlen: 24
188.143.235.0/24 maxlen: 24
91.243.93.0/24 maxlen: 24
5.8.54.0/23 maxlen: 23
5.8.52.0/23 maxlen: 23
5.8.52.0/22 maxlen: 22
5.8.54.0/24 maxlen: 24
5.8.55.0/24 maxlen: 24
5.8.53.0/24 maxlen: 24
5.8.52.0/24 maxlen: 24
5.8.60.0/23 maxlen: 23
5.8.65.0/24 maxlen: 24
5.8.8.0/24 maxlen: 24
5.8.10.0/23 maxlen: 23
5.8.8.0/23 maxlen: 23
5.8.8.0/22 maxlen: 22
5.8.11.0/24 maxlen: 24
5.8.9.0/24 maxlen: 24
5.8.10.0/24 maxlen: 24
5.8.12.0/22 maxlen: 22
5.8.48.0/23 maxlen: 23
5.8.48.0/22 maxlen: 22
5.8.50.0/23 maxlen: 23
5.8.49.0/24 maxlen: 24
5.8.50.0/24 maxlen: 24
5.8.48.0/24 maxlen: 24
5.8.51.0/24 maxlen: 24
5.101.66.0/23 maxlen: 23
5.101.66.0/24 maxlen: 24
5.101.67.0/24 maxlen: 24
5.101.65.0/24 maxlen: 24
5.188.223.0/24 maxlen: 24
5.101.80.0/21 maxlen: 21
5.188.233.0/24 maxlen: 24
5.188.234.0/23 maxlen: 23
5.101.90.0/23 maxlen: 23
5.188.166.0/24 maxlen: 24
5.101.32.0/22 maxlen: 24
5.101.64.0/22 maxlen: 22
5.101.64.0/23 maxlen: 23
5.188.211.0/24 maxlen: 24
5.188.210.0/24 maxlen: 24
5.188.207.0/24 maxlen: 24
5.101.64.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
91.243.48.0/22 maxlen: 22
91.243.48.0/23 maxlen: 23
91.243.50.0/23 maxlen: 23
91.243.51.0/24 maxlen: 24
91.243.50.0/24 maxlen: 24
91.243.48.0/24 maxlen: 24
91.243.49.0/24 maxlen: 24
91.243.60.0/24 maxlen: 24
91.243.61.0/24 maxlen: 24
91.243.91.0/24 maxlen: 24
91.243.90.0/24 maxlen: 24
2a00:1d78:100:1c0::/58 maxlen: 58
Validation: Failed, certificate revoked on Wed 17 Jan 2024 11:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:fe:a1:99:08:28:37:1d:c3:3e:43:7a:a8:1a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668ca8421b018fff5fd03b0470ba0a14c6c82adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:34:57:90:1e:b0:25:47:65:6a:26:85:ba:
04:e5:dd:30:57:f0:5e:2d:c5:2f:cd:2f:0c:f9:73:
e2:97:11:d7:d0:e7:61:91:9e:6a:7d:f6:8e:3c:a5:
31:d1:af:02:3f:78:85:16:96:6d:ba:b1:24:55:c5:
8b:c3:15:20:ad:3a:98:47:62:18:24:95:b0:d3:36:
56:75:eb:11:f6:b0:60:a0:07:5b:10:34:85:40:97:
89:30:14:73:b1:d4:28:eb:31:9c:60:69:ab:c2:31:
8b:fd:d6:1b:22:d6:84:d1:d2:8b:6b:f2:80:87:6b:
5d:d1:24:50:04:63:60:03:0a:32:56:6c:a1:3c:59:
00:72:35:91:21:8e:0a:9e:ca:b5:58:fd:fd:6b:53:
6d:0f:46:4e:ee:81:96:da:75:d2:d6:4a:5a:3f:80:
2a:39:92:b7:19:1b:31:6e:b8:51:0e:bf:e4:5c:e7:
c3:8e:03:44:de:ce:34:54:1e:37:31:0e:ff:a3:27:
be:4e:fb:4a:74:4b:28:84:ea:5b:f8:40:0e:8c:5d:
66:e7:12:34:8c:90:2b:b5:71:de:45:9f:8b:aa:f2:
96:e0:b9:fd:d5:43:6e:dd:c4:ba:96:a2:9a:3e:98:
22:e0:66:24:b9:1d:8d:96:f5:a6:8d:5b:35:4d:d7:
dc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:A8:42:1B:01:8F:FF:5F:D0:3B:04:70:BA:0A:14:C6:C8:2A:DB
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ZoyoQhsBj_9f0DsEcLoKFMbIKts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.8.0/21
5.8.48.0/21
5.8.60.0/23
5.8.65.0/24
5.101.0.0/21
5.101.32.0/22
5.101.64.0/22
5.101.80.0/21
5.101.90.0/23
5.188.44.0/22
5.188.49.0/24
5.188.62.0/24
5.188.166.0/24
5.188.207.0-5.188.211.255
5.188.223.0/24
5.188.233.0-5.188.235.255
31.44.184.0/24
31.44.188.0/22
31.184.192.0/21
31.184.228.0/23
31.184.231.0/24
31.184.238.0/23
31.184.243.0/24
37.9.48.0/24
37.139.53.0-37.139.59.255
46.161.2.0/23
46.161.8.0/24
46.161.10.0/24
46.161.14.0/23
46.161.24.0/23
46.161.32.0/22
46.161.44.0-46.161.51.255
91.243.48.0/22
91.243.60.0/23
91.243.90.0/23
91.243.93.0/24
95.215.0.0/22
146.185.223.0-146.185.231.255
188.143.232.0/22
195.2.240.0/23
IPv6:
2a00:1d78:100:1c0::/58
Signature Algorithm: sha256WithRSAEncryption
8f:8d:c9:36:a1:37:b3:75:82:5c:e4:a6:4c:c2:92:24:32:11:
8f:d6:b7:2b:33:ae:f0:c9:53:8c:7f:c9:ae:dc:e9:d3:7e:33:
aa:c4:82:d4:0b:d0:d3:f8:96:15:27:1a:a1:cc:ef:18:4e:20:
0c:c4:b9:a1:23:d6:6e:7d:2f:53:28:fa:af:07:c7:b9:b2:81:
29:9a:84:56:a8:42:d1:61:59:f5:0f:16:d5:a6:19:bb:92:62:
05:52:3e:81:f0:28:d2:7a:93:f5:05:0c:52:88:ae:49:57:9c:
fe:c3:f7:e3:f2:a0:68:fd:31:45:9d:73:4c:35:f6:04:e9:36:
40:7a:2a:05:4f:75:00:61:1b:50:29:09:5b:f9:a2:43:0c:17:
34:76:55:6d:04:df:78:17:53:d3:a4:68:63:80:47:e1:b3:60:
e0:e5:9c:56:61:73:cc:15:1c:05:f8:5d:e7:de:25:43:1a:2f:
ae:f3:f1:ba:29:3d:de:32:8f:aa:c9:7d:37:db:37:8b:01:00:
1d:92:e6:6c:44:86:cd:68:92:64:a4:cf:91:ea:32:db:90:0b:
68:8b:f3:31:77:79:42:52:59:0e:7e:a3:3e:a7:f3:70:17:8f:
5b:27:b7:6b:60:83:5a:21:79:06:56:a8:61:64:24:97:d7:e7:
c4:09:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 17 15:53:12 2024 by rpki-client on console-fra.rpki-client.org