Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZEDfk_32sPQV3Et9rkxRWyF1vxg.roa
File: ZEDfk_32sPQV3Et9rkxRWyF1vxg.roa (raw, json)
Hash identifier: 7ExyqsIwQY2se/k5XRSSTy5N+Vl/KfuN4aMipQUME3w=
Subject key identifier: 64:40:DF:93:FD:F6:B0:F4:15:DC:4B:7D:AE:4C:51:5B:21:75:BF:18
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018BF7ACD77AFE7407CCD1B1DA0AC34858A3
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZEDfk_32sPQV3Et9rkxRWyF1vxg.roa
Signing time: Wed 22 Nov 2023 15:36:21 +0000
ROA not before: Wed 22 Nov 2023 15:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16030
IP address blocks: 185.184.151.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.149.0/24 maxlen: 24
185.184.148.0/22 maxlen: 24
77.75.176.0/21 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
212.121.234.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
212.121.225.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
212.121.224.0/19 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
212.121.224.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f7:ac:d7:7a:fe:74:07:cc:d1:b1:da:0a:c3:48:58:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Nov 22 15:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6440df93fdf6b0f415dc4b7dae4c515b2175bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:48:01:49:05:8d:02:a1:8f:07:91:c0:b9:
0b:5d:f7:0c:55:bb:23:3b:c4:1a:6d:ca:b1:c0:06:
b2:7f:45:24:42:34:1c:e0:b1:35:06:d5:55:87:d3:
6d:d1:68:a7:e7:e1:cd:1c:d7:e3:69:2c:d5:39:b0:
db:51:31:b0:16:6d:d9:c2:ff:46:a8:a4:3c:2e:2c:
01:dd:9f:85:26:7d:e9:ef:61:8e:04:c8:fd:37:9a:
20:4c:e9:b1:04:61:37:c2:67:a4:a8:46:05:14:b5:
3a:a9:fc:03:9d:a8:1a:a7:e9:ee:8d:de:e6:65:84:
2a:77:9c:ae:c3:2d:32:35:f1:50:71:71:67:0c:e2:
0a:b9:69:f2:87:1d:bf:c6:b5:70:63:5d:14:62:aa:
d8:65:b4:fa:47:c3:da:67:be:b7:61:8e:80:08:f6:
05:db:d5:51:be:78:9b:dd:8a:e4:2d:48:2f:2a:fa:
a0:49:2c:5d:58:03:0f:af:a7:b2:c3:98:01:e6:7e:
9a:6b:04:da:90:ec:11:19:f9:86:61:94:f5:53:1a:
35:7f:d2:89:fb:29:0b:97:3c:f1:d8:69:fa:60:4a:
e0:97:7b:a2:b6:93:07:2f:4a:dc:e6:9b:8f:67:5c:
39:55:da:c5:79:8f:57:49:c1:5b:b5:bb:02:51:01:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:40:DF:93:FD:F6:B0:F4:15:DC:4B:7D:AE:4C:51:5B:21:75:BF:18
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/ZEDfk_32sPQV3Et9rkxRWyF1vxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
52:a1:80:f3:9d:29:85:77:03:40:ee:7a:19:0c:08:48:28:7f:
98:29:d9:58:e7:c6:0c:8b:53:ee:48:25:f5:38:4d:b9:86:08:
f8:cb:79:a2:61:b7:ff:73:64:38:ef:50:ba:d5:cf:d2:52:56:
7a:88:f7:32:6c:18:4f:62:30:4f:f4:d5:f6:43:77:aa:7b:d0:
ac:19:96:75:20:4b:d6:cf:63:b6:53:7e:50:22:3c:11:ef:02:
e6:aa:fc:6c:35:c4:d7:a3:41:a4:d8:f6:53:2a:f5:b0:bd:2a:
69:5b:4e:9b:63:2e:a0:2e:f6:b5:cf:60:7f:25:f0:2a:bc:a8:
65:b5:fe:0e:1c:13:30:c6:c4:2f:46:3a:f7:91:33:be:11:d2:
b5:13:36:43:a1:a4:0b:a2:04:43:74:e5:39:cf:de:d3:6a:af:
18:33:08:99:29:9e:7a:35:80:fc:d4:ef:84:f8:a6:4d:41:98:
49:a7:ef:f6:0a:9b:15:5b:e9:bc:1b:09:ac:5a:06:c1:04:55:
7b:ab:92:f1:f4:d3:b3:d4:d1:36:6f:6a:ae:73:f0:08:4a:a2:
53:c3:0f:fc:a0:54:ec:c5:19:17:02:15:4c:df:ee:63:56:27:
18:e7:27:e1:60:99:02:28:45:94:04:29:49:5f:c3:f1:50:29:
7e:2b:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:02 2024 by rpki-client on console-ams.rpki-client.org