Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ZO2wb0b1R9DKNOAuX3NUg1IlWuA.roa
File: ZO2wb0b1R9DKNOAuX3NUg1IlWuA.roa (raw, json)
Hash identifier: zejjOoj4dHpgj3eZ1Z8bFxhslJ4rRwAQPN0hOe/ql2c=
Subject key identifier: 64:ED:B0:6F:46:F5:47:D0:CA:34:E0:2E:5F:73:54:83:52:25:5A:E0
Certificate issuer: /CN=865786c75fc16584b0271ff27b971d723416618d
Certificate serial: 018F80D2209EA45EBD28380D7411A70EAE7B
Authority key identifier: 86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ZO2wb0b1R9DKNOAuX3NUg1IlWuA.roa
Signing time: Thu 16 May 2024 09:53:25 +0000
ROA not before: Thu 16 May 2024 09:53:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41798
IP address blocks: 2.57.96.0/24 maxlen: 24
2.57.97.0/24 maxlen: 24
2.57.98.0/24 maxlen: 24
2.57.99.0/24 maxlen: 24
37.17.176.0/21 maxlen: 21
37.17.176.0/24 maxlen: 24
37.17.177.0/24 maxlen: 24
37.17.178.0/24 maxlen: 24
37.17.179.0/24 maxlen: 24
37.17.180.0/24 maxlen: 24
37.17.181.0/24 maxlen: 24
37.17.182.0/24 maxlen: 24
37.17.183.0/24 maxlen: 24
37.208.40.0/21 maxlen: 21
37.208.40.0/24 maxlen: 24
37.208.41.0/24 maxlen: 24
37.208.42.0/24 maxlen: 24
37.208.43.0/24 maxlen: 24
37.208.44.0/24 maxlen: 24
37.208.45.0/24 maxlen: 24
37.208.46.0/24 maxlen: 24
37.208.47.0/24 maxlen: 24
45.140.24.0/24 maxlen: 24
45.140.25.0/24 maxlen: 24
87.255.202.0/23 maxlen: 23
87.255.202.0/24 maxlen: 24
87.255.203.0/24 maxlen: 24
87.255.204.0/22 maxlen: 22
87.255.204.0/24 maxlen: 24
87.255.205.0/24 maxlen: 24
87.255.206.0/24 maxlen: 24
87.255.207.0/24 maxlen: 24
87.255.208.0/20 maxlen: 20
87.255.208.0/24 maxlen: 24
87.255.209.0/24 maxlen: 24
87.255.210.0/24 maxlen: 24
87.255.211.0/24 maxlen: 24
87.255.212.0/24 maxlen: 24
87.255.213.0/24 maxlen: 24
87.255.214.0/24 maxlen: 24
87.255.215.0/24 maxlen: 24
87.255.216.0/24 maxlen: 24
87.255.217.0/24 maxlen: 24
87.255.218.0/24 maxlen: 24
87.255.219.0/24 maxlen: 24
87.255.220.0/24 maxlen: 24
87.255.221.0/24 maxlen: 24
87.255.222.0/24 maxlen: 24
87.255.223.0/24 maxlen: 24
91.185.0.0/19 maxlen: 19
91.185.0.0/24 maxlen: 24
91.185.1.0/24 maxlen: 24
91.185.2.0/24 maxlen: 24
91.185.3.0/24 maxlen: 24
91.185.4.0/24 maxlen: 24
91.185.5.0/24 maxlen: 24
91.185.6.0/24 maxlen: 24
91.185.7.0/24 maxlen: 24
91.185.8.0/24 maxlen: 24
91.185.9.0/24 maxlen: 24
91.185.10.0/24 maxlen: 24
91.185.11.0/24 maxlen: 24
91.185.12.0/24 maxlen: 24
91.185.13.0/24 maxlen: 24
91.185.14.0/24 maxlen: 24
91.185.15.0/24 maxlen: 24
91.185.16.0/24 maxlen: 24
91.185.17.0/24 maxlen: 24
91.185.18.0/24 maxlen: 24
91.185.19.0/24 maxlen: 24
91.185.20.0/24 maxlen: 24
91.185.21.0/24 maxlen: 24
91.185.22.0/24 maxlen: 24
91.185.23.0/24 maxlen: 24
91.185.24.0/24 maxlen: 24
91.185.25.0/24 maxlen: 24
91.185.26.0/24 maxlen: 24
91.185.27.0/24 maxlen: 24
91.185.28.0/24 maxlen: 24
91.185.29.0/24 maxlen: 24
91.185.30.0/24 maxlen: 24
91.185.31.0/24 maxlen: 24
91.246.80.0/20 maxlen: 20
91.246.80.0/24 maxlen: 24
91.246.81.0/24 maxlen: 24
91.246.82.0/24 maxlen: 24
91.246.83.0/24 maxlen: 24
91.246.84.0/24 maxlen: 24
91.246.85.0/24 maxlen: 24
91.246.86.0/24 maxlen: 24
91.246.87.0/24 maxlen: 24
91.246.88.0/24 maxlen: 24
91.246.89.0/24 maxlen: 24
91.246.90.0/24 maxlen: 24
91.246.91.0/24 maxlen: 24
91.246.92.0/24 maxlen: 24
91.246.93.0/24 maxlen: 24
91.246.94.0/24 maxlen: 24
91.246.95.0/24 maxlen: 24
91.246.96.0/21 maxlen: 21
91.246.96.0/24 maxlen: 24
91.246.97.0/24 maxlen: 24
91.246.98.0/24 maxlen: 24
91.246.99.0/24 maxlen: 24
91.246.100.0/24 maxlen: 24
91.246.101.0/24 maxlen: 24
91.246.102.0/24 maxlen: 24
91.246.103.0/24 maxlen: 24
94.141.224.0/20 maxlen: 20
94.141.224.0/24 maxlen: 24
94.141.225.0/24 maxlen: 24
94.141.226.0/24 maxlen: 24
94.141.227.0/24 maxlen: 24
94.141.228.0/24 maxlen: 24
94.141.229.0/24 maxlen: 24
94.141.230.0/24 maxlen: 24
94.141.231.0/24 maxlen: 24
94.141.232.0/24 maxlen: 24
94.141.233.0/24 maxlen: 24
94.141.234.0/24 maxlen: 24
94.141.235.0/24 maxlen: 24
94.141.236.0/24 maxlen: 24
94.141.237.0/24 maxlen: 24
94.141.238.0/24 maxlen: 24
94.141.239.0/24 maxlen: 24
94.141.240.0/22 maxlen: 22
94.141.240.0/24 maxlen: 24
94.141.241.0/24 maxlen: 24
94.141.242.0/24 maxlen: 24
94.141.243.0/24 maxlen: 24
94.141.248.0/22 maxlen: 22
94.141.248.0/24 maxlen: 24
94.141.249.0/24 maxlen: 24
94.141.250.0/24 maxlen: 24
94.141.251.0/24 maxlen: 24
176.98.224.0/20 maxlen: 20
176.98.224.0/24 maxlen: 24
176.98.225.0/24 maxlen: 24
176.98.226.0/24 maxlen: 24
176.98.227.0/24 maxlen: 24
176.98.228.0/24 maxlen: 24
176.98.229.0/24 maxlen: 24
176.98.230.0/24 maxlen: 24
176.98.231.0/24 maxlen: 24
176.98.232.0/24 maxlen: 24
176.98.233.0/24 maxlen: 24
176.98.234.0/24 maxlen: 24
176.98.235.0/24 maxlen: 24
176.98.236.0/24 maxlen: 24
176.98.237.0/24 maxlen: 24
176.98.238.0/24 maxlen: 24
176.98.239.0/24 maxlen: 24
176.98.240.0/22 maxlen: 22
176.98.240.0/24 maxlen: 24
176.98.241.0/24 maxlen: 24
176.98.242.0/24 maxlen: 24
176.98.243.0/24 maxlen: 24
178.22.168.0/21 maxlen: 21
178.22.168.0/24 maxlen: 24
178.22.169.0/24 maxlen: 24
178.22.170.0/24 maxlen: 24
178.22.171.0/24 maxlen: 24
178.22.172.0/24 maxlen: 24
178.22.173.0/24 maxlen: 24
178.22.174.0/24 maxlen: 24
178.22.175.0/24 maxlen: 24
193.104.253.0/24 maxlen: 24
2a00:ab40::/32 maxlen: 48
2a00:ab40:3000::/48 maxlen: 48
2a00:ab40:4000::/48 maxlen: 48
2a00:ab40:5000::/48 maxlen: 48
2a00:ab40:7200::/48 maxlen: 48
2a00:ab40:7201::/48 maxlen: 48
2a00:ab40:7300::/48 maxlen: 48
2a00:ab40:7301::/48 maxlen: 48
2a00:ab40:7400::/48 maxlen: 48
2a00:ab40:7401::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 08:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:d2:20:9e:a4:5e:bd:28:38:0d:74:11:a7:0e:ae:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865786c75fc16584b0271ff27b971d723416618d
Validity
Not Before: May 16 09:53:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64edb06f46f547d0ca34e02e5f73548352255ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:3c:45:cf:5d:45:92:1a:4a:3b:5d:b4:6f:
60:46:93:0b:cd:d2:24:42:f0:73:39:98:0e:26:8d:
d7:d9:41:17:7b:29:bf:ba:26:b9:31:9f:66:bb:7a:
8a:a5:94:86:0d:53:9d:02:ae:30:76:74:b1:ea:ee:
95:25:4b:f9:c4:89:dd:33:a4:fe:51:c7:4e:83:cb:
b8:78:30:13:45:17:70:47:51:31:ef:46:19:bc:69:
6e:2d:65:2d:5b:fe:83:0f:bc:4e:34:7d:ec:2b:e2:
29:5f:9a:08:60:40:86:8b:e1:e7:00:56:f6:ab:23:
5c:bd:e8:1b:04:6e:04:4d:0f:f0:84:6b:59:1d:6d:
49:89:51:22:a9:21:89:a7:db:41:cd:14:47:12:f2:
e8:f6:b8:56:4c:60:e1:04:94:09:76:a3:09:45:7b:
5d:56:47:c4:5b:1a:73:39:2f:71:38:73:99:d0:3f:
d4:da:60:c6:24:30:4b:31:74:15:35:72:3c:f4:23:
42:87:d8:e0:9f:e2:bf:6d:b2:1c:16:9f:83:fd:6e:
19:9f:b8:c8:c2:cf:99:16:47:23:ce:6c:6b:22:25:
6a:5a:4a:fd:80:62:13:1f:98:bf:5d:68:00:5f:ca:
3c:b9:bf:48:c8:b2:ff:64:ab:9d:9d:da:16:2b:34:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:ED:B0:6F:46:F5:47:D0:CA:34:E0:2E:5F:73:54:83:52:25:5A:E0
X509v3 Authority Key Identifier:
keyid:86:57:86:C7:5F:C1:65:84:B0:27:1F:F2:7B:97:1D:72:34:16:61:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hleGx1_BZYSwJx_ye5cdcjQWYY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/ZO2wb0b1R9DKNOAuX3NUg1IlWuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/19a649-0442-4f3d-9cb9-8cf9d50adf29/1/hleGx1_BZYSwJx_ye5cdcjQWYY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.96.0/22
37.17.176.0/21
37.208.40.0/21
45.140.24.0/23
87.255.202.0-87.255.223.255
91.185.0.0/19
91.246.80.0-91.246.103.255
94.141.224.0-94.141.243.255
94.141.248.0/22
176.98.224.0-176.98.243.255
178.22.168.0/21
193.104.253.0/24
IPv6:
2a00:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
43:05:e2:85:76:68:bc:f5:5e:69:4c:11:af:b6:4a:8a:c8:83:
7b:e7:1e:9f:df:d2:9d:d3:0c:45:9f:e3:0a:e7:bf:47:da:4b:
73:85:1b:ca:09:c0:93:d1:3e:6e:87:dd:20:42:cf:67:6a:98:
94:b9:32:55:15:8e:db:a6:c4:f1:37:2b:cf:5c:46:9f:f3:f7:
f8:ff:21:8b:3d:bd:22:99:9a:eb:5b:d2:52:19:f6:a5:de:1a:
8b:7c:38:0a:bd:fe:46:eb:24:c6:50:6e:79:64:83:ad:6c:c8:
2d:2c:c0:8e:1b:54:6a:9f:45:8a:08:e0:1d:32:cd:de:c4:0b:
a0:8c:92:17:23:0f:50:3c:d3:71:c5:d8:ca:fb:00:e4:56:90:
a1:9f:23:f4:01:bb:9c:d0:81:8d:1a:fa:d5:7b:c7:a0:5f:d2:
61:70:77:e5:33:df:ed:88:69:d0:04:29:56:d3:ab:09:ba:f7:
70:48:24:28:1d:a2:74:fd:6f:3b:a3:1b:99:eb:44:8a:e2:62:
d7:3d:5b:a6:95:d2:ea:e4:55:d7:38:bc:3c:c8:71:d0:e3:b8:
53:2e:19:ca:34:9d:94:f9:67:ee:ee:82:47:32:a0:b1:36:50:
9b:51:e7:d1:c3:b0:85:7d:55:4e:8b:4a:c0:77:7e:dd:da:41:
cd:df:7f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 11:49:52 2024 by rpki-client on console-fra.rpki-client.org