Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/zqO--dHQNL5n2NZqjxV1sYthukg.roa
File: zqO--dHQNL5n2NZqjxV1sYthukg.roa (raw, json)
Hash identifier: YLqvCBwyNr1JNO3GKxpLR1J2/IkgaiJ9l1Z0JPuTrq4=
Subject key identifier: CE:A3:BE:F9:D1:D0:34:BE:67:D8:D6:6A:8F:15:75:B1:8B:61:BA:48
Certificate issuer: /CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Certificate serial: 018CC64AB8FAABE211B48795259643268CEC
Authority key identifier: 22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/zqO--dHQNL5n2NZqjxV1sYthukg.roa
Signing time: Mon 01 Jan 2024 18:30:34 +0000
ROA not before: Mon 01 Jan 2024 18:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16030
IP address blocks: 185.184.151.0/24 maxlen: 24
185.184.150.0/24 maxlen: 24
185.184.149.0/24 maxlen: 24
185.184.148.0/22 maxlen: 24
77.75.176.0/21 maxlen: 24
77.75.176.0/24 maxlen: 24
77.75.179.0/24 maxlen: 24
77.75.178.0/24 maxlen: 24
77.75.177.0/24 maxlen: 24
77.75.183.0/24 maxlen: 24
77.75.182.0/24 maxlen: 24
77.75.181.0/24 maxlen: 24
212.121.229.0/24 maxlen: 24
213.148.218.0/24 maxlen: 24
212.121.232.0/24 maxlen: 24
213.148.219.0/24 maxlen: 24
213.148.217.0/24 maxlen: 24
212.121.231.0/24 maxlen: 24
213.148.216.0/24 maxlen: 24
213.148.214.0/24 maxlen: 24
213.148.215.0/24 maxlen: 24
212.121.230.0/24 maxlen: 24
212.121.233.0/24 maxlen: 24
212.121.228.0/24 maxlen: 24
212.121.227.0/24 maxlen: 24
212.121.235.0/24 maxlen: 24
212.121.239.0/24 maxlen: 24
212.121.238.0/24 maxlen: 24
213.148.223.0/24 maxlen: 24
212.121.237.0/24 maxlen: 24
212.121.240.0/24 maxlen: 24
213.148.222.0/24 maxlen: 24
212.121.236.0/24 maxlen: 24
213.148.221.0/24 maxlen: 24
213.148.220.0/24 maxlen: 24
212.121.234.0/24 maxlen: 24
212.121.246.0/24 maxlen: 24
212.121.245.0/24 maxlen: 24
212.121.244.0/24 maxlen: 24
212.121.243.0/24 maxlen: 24
212.121.242.0/24 maxlen: 24
212.121.241.0/24 maxlen: 24
212.121.250.0/24 maxlen: 24
212.121.249.0/24 maxlen: 24
212.121.248.0/24 maxlen: 24
212.121.247.0/24 maxlen: 24
212.121.253.0/24 maxlen: 24
212.121.252.0/24 maxlen: 24
212.121.251.0/24 maxlen: 24
212.121.255.0/24 maxlen: 24
212.121.254.0/24 maxlen: 24
213.148.192.0/19 maxlen: 24
213.148.192.0/24 maxlen: 24
213.148.198.0/24 maxlen: 24
213.148.197.0/24 maxlen: 24
213.148.196.0/24 maxlen: 24
213.148.199.0/24 maxlen: 24
213.148.195.0/24 maxlen: 24
213.148.194.0/24 maxlen: 24
213.148.193.0/24 maxlen: 24
213.148.205.0/24 maxlen: 24
213.148.204.0/24 maxlen: 24
213.148.203.0/24 maxlen: 24
213.148.202.0/24 maxlen: 24
213.148.206.0/24 maxlen: 24
213.148.201.0/24 maxlen: 24
213.148.200.0/24 maxlen: 24
213.148.211.0/24 maxlen: 24
213.148.208.0/24 maxlen: 24
213.148.207.0/24 maxlen: 24
213.148.212.0/24 maxlen: 24
212.121.225.0/24 maxlen: 24
212.121.226.0/24 maxlen: 24
212.121.224.0/19 maxlen: 24
213.148.210.0/24 maxlen: 24
213.148.213.0/24 maxlen: 24
212.121.224.0/24 maxlen: 24
213.148.209.0/24 maxlen: 24
2001:4d10::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Apr 2024 14:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:b8:fa:ab:e2:11:b4:87:95:25:96:43:26:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c7cda75f4e15e486dee5a6501cbe2018bc0e0f
Validity
Not Before: Jan 1 18:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cea3bef9d1d034be67d8d66a8f1575b18b61ba48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:e4:de:24:0e:bb:ce:39:ec:08:2b:95:b8:
77:2f:c9:dd:c3:7b:ce:8d:26:5b:6c:df:fc:e2:ef:
55:72:09:90:ac:21:5a:70:54:7a:2f:65:8d:b0:ae:
e4:b1:8e:a1:07:5c:6e:67:fa:52:5b:77:37:4a:4f:
d6:80:64:b2:d3:dd:20:6e:a7:00:02:41:3d:f7:40:
01:5b:8b:96:b7:6f:f7:76:7a:81:55:10:4d:6d:10:
8f:51:cc:d7:84:b1:e3:6c:95:12:68:5e:12:0b:9d:
a3:8d:4e:7c:7b:c0:10:9f:0d:21:f7:4f:ae:71:1a:
6c:f2:9a:17:5d:17:0e:7f:9f:b7:ff:bd:f9:51:4a:
9b:b7:4c:9f:7d:fe:38:94:a1:9b:76:9b:63:21:8f:
4d:92:21:ef:16:17:04:06:3d:4b:83:6f:08:51:64:
84:f8:6e:0b:32:4f:d5:84:37:4d:a4:1b:30:55:b0:
41:f4:0f:da:8e:e9:b5:b5:37:c0:5d:62:b1:07:e4:
d6:04:7e:71:bc:93:2b:2f:0c:b0:39:fb:a4:da:05:
33:b1:21:70:74:8e:30:a2:c8:95:98:98:7c:e3:ab:
d0:e6:c9:dd:70:91:4c:fd:50:c6:31:b1:92:2f:07:
c6:6a:16:cb:ec:be:8d:db:90:87:cc:3c:e0:f4:6f:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A3:BE:F9:D1:D0:34:BE:67:D8:D6:6A:8F:15:75:B1:8B:61:BA:48
X509v3 Authority Key Identifier:
keyid:22:C7:CD:A7:5F:4E:15:E4:86:DE:E5:A6:50:1C:BE:20:18:BC:0E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsfNp19OFeSG3uWmUBy-IBi8Dg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/zqO--dHQNL5n2NZqjxV1sYthukg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b92331-2bb4-4a59-9978-751b17d1c437/1/IsfNp19OFeSG3uWmUBy-IBi8Dg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.176.0/21
185.184.148.0/22
212.121.224.0/19
213.148.192.0/19
IPv6:
2001:4d10::/32
Signature Algorithm: sha256WithRSAEncryption
68:eb:0d:cc:4b:65:a4:a2:1c:b4:25:99:e2:8e:43:c5:c5:9e:
6e:d0:6f:14:3b:19:03:7d:f7:8b:ae:b8:84:ed:2b:d9:6b:c0:
db:61:65:34:c8:ef:63:fa:6e:5d:27:43:8a:86:84:3e:69:71:
68:7f:50:e0:bd:45:f1:f6:07:85:4b:6e:87:0c:04:b1:b9:b2:
ab:b5:41:d4:7c:30:6c:75:15:7b:05:c0:ef:56:40:2a:09:61:
70:80:66:de:ee:5d:d5:a1:5b:cc:a9:31:21:6b:69:03:48:f5:
4e:04:93:c2:ab:44:1f:27:0e:32:de:48:39:ae:da:c6:30:d6:
18:3a:a9:53:ba:6e:94:72:3e:0f:aa:da:38:9b:45:12:6d:b0:
2b:6b:22:65:ca:6a:10:cc:26:92:e6:98:a4:74:a6:90:56:1d:
b9:e8:be:4a:6b:21:b1:63:f0:96:68:c0:91:15:09:c8:f1:97:
a8:f8:40:2e:cd:21:34:d8:ff:3f:5d:50:d0:b4:6b:5d:9f:d8:
bc:82:9f:f7:97:0b:54:38:da:b6:b3:24:0a:4e:51:c7:cb:07:
b6:40:11:b0:8a:e3:e0:a7:b5:ce:99:84:f8:1c:40:f9:88:06:
d8:73:c4:27:f5:6c:33:15:9d:17:8d:ef:cb:45:dd:fa:b7:bd:
18:c9:24:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:21:27 2024 by rpki-client on console-fra.rpki-client.org