Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ZVBUfC2DBzyfq0N7cHgxu0y1WXw.roa
File: ZVBUfC2DBzyfq0N7cHgxu0y1WXw.roa (raw, json)
Hash identifier: lPhzVr0qdkwuDyubwT9/20ZxcoDJg1xbUM8S92RrT84=
Subject key identifier: 65:50:54:7C:2D:83:07:3C:9F:AB:43:7B:70:78:31:BB:4C:B5:59:7C
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D4BC9990153189E69269FB58FEF25C712
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ZVBUfC2DBzyfq0N7cHgxu0y1WXw.roa
Signing time: Sat 27 Jan 2024 16:38:39 +0000
ROA not before: Sat 27 Jan 2024 16:38:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 5.201.128.0/18 maxlen: 18
5.201.128.0/21 maxlen: 21
5.201.138.0/24 maxlen: 24
5.201.142.0/23 maxlen: 23
5.201.144.0/21 maxlen: 21
5.201.144.0/23 maxlen: 23
5.201.152.0/22 maxlen: 22
5.201.156.0/22 maxlen: 22
5.201.160.0/23 maxlen: 23
5.201.162.0/24 maxlen: 24
5.201.168.0/22 maxlen: 22
5.201.174.0/24 maxlen: 24
37.156.16.0/21 maxlen: 21
37.156.24.0/22 maxlen: 22
37.156.30.0/23 maxlen: 23
37.156.31.0/24 maxlen: 24
89.37.0.0/20 maxlen: 20
89.37.0.0/24 maxlen: 24
89.37.8.0/22 maxlen: 22
89.37.8.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
89.37.14.0/24 maxlen: 24
89.37.15.0/24 maxlen: 24
89.43.0.0/21 maxlen: 21
89.43.4.0/22 maxlen: 22
89.43.8.0/22 maxlen: 22
89.43.10.0/23 maxlen: 23
89.43.12.0/23 maxlen: 23
92.114.16.0/20 maxlen: 24
92.114.20.0/23 maxlen: 23
92.114.20.0/24 maxlen: 24
92.114.21.0/24 maxlen: 24
92.114.22.0/23 maxlen: 23
92.114.24.0/21 maxlen: 21
92.114.25.0/24 maxlen: 24
92.114.28.0/22 maxlen: 22
94.101.128.0/20 maxlen: 24
94.101.128.0/21 maxlen: 21
94.101.136.0/22 maxlen: 22
94.101.139.0/24 maxlen: 24
94.101.140.0/23 maxlen: 23
94.101.142.0/23 maxlen: 23
94.101.142.0/24 maxlen: 24
185.22.30.0/23 maxlen: 23
185.103.84.0/22 maxlen: 22
185.103.84.0/24 maxlen: 24
185.103.85.0/24 maxlen: 24
185.135.228.0/22 maxlen: 22
185.135.230.0/24 maxlen: 24
185.135.231.0/24 maxlen: 24
185.136.100.0/22 maxlen: 22
185.162.40.0/22 maxlen: 22
185.175.76.0/23 maxlen: 23
185.175.78.0/23 maxlen: 23
185.176.32.0/22 maxlen: 22
185.182.220.0/22 maxlen: 22
185.182.220.0/24 maxlen: 24
185.182.221.0/24 maxlen: 24
185.182.222.0/23 maxlen: 23
188.213.64.0/20 maxlen: 21
188.213.72.0/24 maxlen: 24
188.213.73.0/24 maxlen: 24
188.213.74.0/24 maxlen: 24
188.213.75.0/24 maxlen: 24
188.213.76.0/22 maxlen: 22
2a00:5ca0::/29 maxlen: 29
2a00:5ca0::/31 maxlen: 31
2a00:5ca0::/32 maxlen: 32
2a00:5ca2::/31 maxlen: 31
2a00:5ca4::/31 maxlen: 31
Validation: Failed, certificate revoked on Sun 10 Mar 2024 10:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4b:c9:99:01:53:18:9e:69:26:9f:b5:8f:ef:25:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 27 16:38:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6550547c2d83073c9fab437b707831bb4cb5597c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:79:40:01:00:59:16:b6:61:7e:73:30:e4:
a6:51:ec:63:bd:fb:4f:b3:af:25:d6:b1:7d:c7:1c:
34:7f:60:9b:57:a9:dd:68:b7:93:75:d7:d0:5f:05:
06:f0:e2:7a:3b:5c:6b:4d:10:3d:05:92:2d:90:33:
19:64:1c:db:25:bb:7c:e2:df:a0:a9:b4:0c:b4:87:
50:ae:37:f3:73:2b:86:33:37:33:df:93:c5:33:06:
57:18:ea:d3:21:e2:7b:ac:5e:39:c6:55:70:48:2d:
21:f6:80:7d:fa:e3:31:47:69:f3:27:ad:a3:bd:3a:
03:99:64:88:ac:d0:a5:d0:24:08:9a:aa:89:22:b6:
f0:91:8b:40:fc:d0:e8:cb:2f:c6:61:e3:33:07:81:
0a:67:31:77:78:83:34:fa:fb:96:ac:1a:64:95:1e:
fa:72:a7:66:0b:cf:e9:cf:ca:c6:d5:51:9f:83:73:
97:4f:67:86:d7:6a:7e:c1:81:8b:ba:5b:e8:86:4a:
e7:d9:05:79:a6:08:48:e2:6e:d1:4b:fe:f5:73:d5:
41:11:74:03:26:90:26:87:9f:56:46:9b:42:3e:f6:
bd:41:70:ba:3e:09:2d:7e:d4:a8:72:14:e8:04:da:
1c:6e:15:95:29:52:3b:cf:c0:6e:82:b3:e1:7e:7e:
e1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:54:7C:2D:83:07:3C:9F:AB:43:7B:70:78:31:BB:4C:B5:59:7C
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/ZVBUfC2DBzyfq0N7cHgxu0y1WXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.128.0/18
37.156.16.0-37.156.27.255
37.156.30.0/23
89.37.0.0/20
89.43.0.0-89.43.13.255
92.114.16.0/20
94.101.128.0/20
185.22.30.0/23
185.103.84.0/22
185.135.228.0/22
185.136.100.0/22
185.162.40.0/22
185.175.76.0/22
185.176.32.0/22
185.182.220.0/22
188.213.64.0/20
IPv6:
2a00:5ca0::/29
Signature Algorithm: sha256WithRSAEncryption
45:be:22:d5:bc:04:56:6b:fa:ba:d9:12:68:a8:a4:df:1c:18:
29:6a:2f:61:10:82:0e:d6:e7:6b:54:dd:9e:85:e5:20:95:46:
20:96:13:9b:7f:01:82:b1:a7:dc:1a:92:fb:29:99:73:3c:07:
c0:f9:7a:cc:cd:c3:be:4a:f7:27:2e:5e:25:62:7d:7a:45:08:
a7:74:d2:a1:60:04:bc:4f:51:57:70:62:d7:5d:d9:b1:a1:25:
67:96:c2:5b:fb:94:f3:6f:86:c0:08:7e:fe:2b:fd:04:57:c2:
d9:9b:d8:43:9a:fa:61:e9:5d:6c:24:bd:97:92:bb:c1:f3:9f:
e1:76:5b:6d:57:76:f4:2a:53:2d:42:ac:47:25:a3:98:8b:0e:
ae:48:d5:59:09:53:5f:9d:ca:31:5b:c1:2d:69:e3:52:21:85:
d9:cd:0a:74:5e:23:86:b5:6b:9b:95:63:fa:4a:94:17:c9:58:
45:1f:ed:44:95:cf:66:c0:9b:61:d5:b0:17:db:d8:d3:79:68:
5d:24:67:f8:a4:88:30:7d:44:29:7b:3e:23:cf:7c:69:0a:c4:
06:d9:85:ba:1f:f0:6f:d0:65:dd:f9:bb:8b:52:ef:c5:9a:8b:
35:11:4f:00:f3:9c:6b:52:3f:7e:8d:f4:b1:66:99:a0:59:17:
7b:0c:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:19 2024 by rpki-client on console-ams.rpki-client.org