Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/Zbe_NNnCNE-zyWAhR4Ds1Ab6py8.roa
File: Zbe_NNnCNE-zyWAhR4Ds1Ab6py8.roa (raw, json)
Hash identifier: LoSyWis5LYGDGvHyVPD8kXscSw4VQSQqGbAHl8itcVc=
Subject key identifier: 65:B7:BF:34:D9:C2:34:4F:B3:C9:60:21:47:80:EC:D4:06:FA:A7:2F
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018A4533E90B0715B69BF3FFB681694A72B6
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/Zbe_NNnCNE-zyWAhR4Ds1Ab6py8.roa
Signing time: Wed 30 Aug 2023 06:49:04 +0000
ROA not before: Wed 30 Aug 2023 06:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42473
IP address blocks: 185.228.148.0/22 maxlen: 22
94.16.98.0/24 maxlen: 24
37.235.4.0/24 maxlen: 24
37.235.3.0/24 maxlen: 24
37.235.5.0/24 maxlen: 24
185.2.176.0/22 maxlen: 32
144.208.192.0/18 maxlen: 32
144.208.205.0/24 maxlen: 24
144.208.206.0/24 maxlen: 24
144.208.212.0/22 maxlen: 32
144.208.207.0/24 maxlen: 24
178.255.152.0/21 maxlen: 32
94.16.125.0/24 maxlen: 24
94.16.126.0/24 maxlen: 24
193.33.114.0/23 maxlen: 32
176.123.54.0/23 maxlen: 23
213.227.160.0/19 maxlen: 32
194.1.206.0/24 maxlen: 32
185.116.97.0/24 maxlen: 24
185.116.98.0/24 maxlen: 24
185.116.96.0/24 maxlen: 24
185.116.99.0/24 maxlen: 24
188.172.230.0/23 maxlen: 23
217.146.0.0/19 maxlen: 24
188.172.249.0/24 maxlen: 24
188.172.247.0/24 maxlen: 24
188.172.254.0/24 maxlen: 24
45.132.61.0/24 maxlen: 24
45.132.62.0/23 maxlen: 24
185.81.206.0/24 maxlen: 24
188.172.192.0/18 maxlen: 32
185.81.209.0/24 maxlen: 24
188.172.208.0/24 maxlen: 24
188.65.72.0/21 maxlen: 32
37.252.226.0/24 maxlen: 24
37.252.224.0/19 maxlen: 32
37.252.228.0/24 maxlen: 32
37.252.234.0/24 maxlen: 24
37.252.243.0/24 maxlen: 24
37.252.244.0/24 maxlen: 24
37.252.253.0/24 maxlen: 24
37.252.251.0/24 maxlen: 24
185.50.232.0/23 maxlen: 23
185.50.235.0/24 maxlen: 24
144.208.216.0/24 maxlen: 24
144.208.219.0/24 maxlen: 24
144.208.217.0/24 maxlen: 24
144.208.226.0/24 maxlen: 24
144.208.224.0/24 maxlen: 24
144.208.225.0/24 maxlen: 24
144.208.223.0/24 maxlen: 24
144.208.221.0/24 maxlen: 24
144.208.222.0/24 maxlen: 24
144.208.229.0/24 maxlen: 24
144.208.230.0/24 maxlen: 24
144.208.228.0/24 maxlen: 24
144.208.233.0/24 maxlen: 24
144.208.232.0/24 maxlen: 24
144.208.235.0/24 maxlen: 24
144.208.244.0/24 maxlen: 24
2a00:11c0:66::/48 maxlen: 48
2a00:11c0:dc::/48 maxlen: 48
2a00:11c0::/32 maxlen: 128
2a01:aea0:dd1::/48 maxlen: 48
2a00:11c0:19::/48 maxlen: 48
2a00:11c0:42::/48 maxlen: 48
2a00:11c0:dd::/48 maxlen: 48
2a00:11c0:13::/48 maxlen: 48
2a00:11c0:96::/48 maxlen: 48
2a00:11c0:9a::/48 maxlen: 48
2a00:11c0:1335::/48 maxlen: 48
2a00:11c0:24::/48 maxlen: 48
2a01:aea0::/40 maxlen: 40
2a01:aea0::/32 maxlen: 32
2a00:11c0:43::/48 maxlen: 48
2a00:11c0:83::/48 maxlen: 48
2a00:11c0:86::/48 maxlen: 48
2a00:11c0:97::/48 maxlen: 48
2a00:11c0:4a::/48 maxlen: 48
2a00:11c0:de::/48 maxlen: 48
2a01:aea0:df1::/48 maxlen: 48
2a00:11c0:79::/48 maxlen: 48
2a00:11c0:22::/48 maxlen: 48
2a00:11c0:98::/48 maxlen: 48
2a00:11c0:87::/48 maxlen: 48
2a00:11c0:29::/48 maxlen: 48
2a00:11c0:84::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Sep 2023 09:55:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:33:e9:0b:07:15:b6:9b:f3:ff:b6:81:69:4a:72:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Aug 30 06:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b7bf34d9c2344fb3c960214780ecd406faa72f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:de:03:df:68:d7:28:30:af:4e:30:3d:fe:22:
5e:26:52:b8:b5:2e:30:2c:68:60:c1:4e:3c:d2:d5:
ac:55:ed:d7:a2:c0:8e:bb:fa:e5:92:cc:27:c9:af:
a8:d6:7a:7d:fd:89:05:56:38:a5:31:85:4b:9f:8e:
ff:a0:43:02:03:2d:65:be:db:10:03:34:eb:76:90:
9e:7b:6e:bf:25:4b:3e:7b:fb:3b:19:72:c8:de:ed:
84:7d:5d:3b:b2:cf:62:c3:61:64:51:c2:5e:bf:5d:
50:9f:d0:d7:02:5f:5f:4a:2c:89:c4:ac:a4:12:15:
c4:dc:ff:a3:7a:1d:67:3d:3e:86:1f:44:ea:1f:48:
89:90:49:40:7a:47:39:c4:c1:40:11:0f:a5:c6:00:
4a:f6:9a:0e:b2:f9:41:12:af:b8:c1:28:70:cb:c2:
c0:91:86:63:5e:8f:06:86:8a:78:4f:68:f7:39:0b:
3e:40:95:d7:93:e4:5d:fa:91:5a:7b:ec:84:25:ea:
61:6e:c6:5d:52:e2:65:46:ec:7c:90:04:67:4a:e2:
9d:37:43:6e:da:d9:01:fb:f9:34:fe:fb:c7:0d:a1:
4d:1d:9c:9f:04:00:0b:80:68:38:2a:60:2e:a1:d7:
e2:18:bb:6d:2d:2c:ad:b7:40:ac:c4:ab:52:47:95:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:BF:34:D9:C2:34:4F:B3:C9:60:21:47:80:EC:D4:06:FA:A7:2F
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/Zbe_NNnCNE-zyWAhR4Ds1Ab6py8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.3.0-37.235.5.255
37.252.224.0/19
45.132.61.0-45.132.63.255
94.16.98.0/24
94.16.125.0-94.16.126.255
144.208.192.0/18
176.123.54.0/23
178.255.152.0/21
185.2.176.0/22
185.50.232.0/23
185.50.235.0/24
185.81.206.0/24
185.81.209.0/24
185.116.96.0/22
185.228.148.0/22
188.65.72.0/21
188.172.192.0/18
193.33.114.0/23
194.1.206.0/24
213.227.160.0/19
217.146.0.0/19
IPv6:
2a00:11c0::/32
2a01:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
8b:d6:b2:8e:38:51:e1:47:de:10:13:db:83:8b:0a:0f:f7:41:
04:09:af:12:80:da:dd:2e:c5:a4:dd:9f:5c:23:05:a3:54:72:
64:98:0b:8f:0a:8b:a2:63:45:b9:bc:6c:a9:84:10:5d:d7:d3:
e2:9d:f2:d8:c7:c0:0e:71:5e:3c:ce:2b:9e:5e:f9:ef:c1:e7:
2b:6f:79:13:85:e8:3d:29:5c:57:0e:ff:8a:4f:1d:d2:32:a6:
58:7e:f4:fe:cc:d7:b9:06:a1:c5:0f:d7:27:f6:25:ce:f3:a3:
4a:7a:f4:3c:cc:4e:5b:18:da:36:c9:93:ef:64:68:16:1e:10:
a1:14:03:08:af:df:00:3f:92:24:91:b6:86:2a:b6:70:4b:96:
41:36:b3:36:97:0f:e5:9b:38:f9:3b:4c:61:d0:36:2f:5c:3d:
01:68:59:d8:9e:7c:d2:64:3d:0f:75:d1:10:99:45:31:0e:58:
bd:19:72:9d:6e:06:01:c4:e9:1f:35:43:ef:b1:ee:3a:a3:2b:
7a:e1:97:cb:cf:7b:8e:26:cd:dc:3d:bd:a2:f9:4a:3e:92:93:
7c:dd:ea:cd:86:71:33:af:1e:84:f4:5a:67:8e:a4:a7:3a:18:
d5:63:2e:0c:df:c2:f5:6d:4b:15:73:ea:29:68:ab:e7:37:27:
fd:aa:8d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:14 2024 by rpki-client on console-fra.rpki-client.org