Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zjR-DkzxaoUuowOi0U-nwtJBuhM.roa
File: zjR-DkzxaoUuowOi0U-nwtJBuhM.roa (raw, json)
Hash identifier: VceCRFxkCdg7HgE/+lnYMtqjLqkLzN3GVnUgluMbDA0=
Subject key identifier: CE:34:7E:0E:4C:F1:6A:85:2E:A3:03:A2:D1:4F:A7:C2:D2:41:BA:13
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0186CC390273849CDC420B0F2422C952FDEF
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zjR-DkzxaoUuowOi0U-nwtJBuhM.roa
Signing time: Fri 10 Mar 2023 15:52:13 +0000
ROA not before: Fri 10 Mar 2023 15:52:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 80.66.196.0/22 maxlen: 24
92.60.40.0/23 maxlen: 23
92.60.41.0/24 maxlen: 24
92.60.42.0/24 maxlen: 24
92.60.40.0/24 maxlen: 24
185.255.55.0/24 maxlen: 24
185.255.53.0/24 maxlen: 24
185.255.52.0/22 maxlen: 24
45.80.188.0/22 maxlen: 24
62.133.35.0/24 maxlen: 24
62.133.33.0/24 maxlen: 24
62.133.32.0/24 maxlen: 24
62.133.32.0/22 maxlen: 24
45.147.48.0/24 maxlen: 32
45.147.49.0/24 maxlen: 32
45.153.244.0/22 maxlen: 24
95.214.164.0/22 maxlen: 24
185.248.84.0/22 maxlen: 24
185.194.52.0/22 maxlen: 24
91.200.241.0/24 maxlen: 24
45.11.45.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
147.78.179.0/24 maxlen: 24
147.78.177.0/24 maxlen: 24
147.78.178.0/24 maxlen: 24
147.78.176.0/24 maxlen: 24
147.78.176.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
45.139.192.0/22 maxlen: 24
185.254.75.0/24 maxlen: 24
185.254.73.0/24 maxlen: 24
45.92.157.0/24 maxlen: 24
185.254.74.0/24 maxlen: 24
185.213.151.0/24 maxlen: 24
185.213.149.0/24 maxlen: 24
185.213.148.0/22 maxlen: 24
185.213.148.0/24 maxlen: 24
194.124.216.0/24 maxlen: 24
45.131.152.0/22 maxlen: 24
194.124.228.0/24 maxlen: 24
194.124.227.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
194.124.213.0/24 maxlen: 24
193.111.90.0/23 maxlen: 24
193.177.220.0/22 maxlen: 24
194.36.222.0/23 maxlen: 24
94.124.116.0/22 maxlen: 24
45.90.210.0/24 maxlen: 24
193.111.30.0/23 maxlen: 24
195.245.219.0/24 maxlen: 24
185.49.32.0/22 maxlen: 24
45.130.23.0/24 maxlen: 24
45.130.21.0/24 maxlen: 24
79.143.140.0/22 maxlen: 24
45.130.22.0/24 maxlen: 24
45.130.20.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.233.0/24 maxlen: 24
194.36.25.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
149.62.44.0/22 maxlen: 24
78.142.192.0/22 maxlen: 24
194.169.180.0/23 maxlen: 24
78.142.193.0/24 maxlen: 32
45.13.199.0/24 maxlen: 24
45.13.198.0/24 maxlen: 24
109.94.168.0/22 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.222.216.0/21 maxlen: 24
185.222.216.0/22 maxlen: 24
185.222.220.0/24 maxlen: 24
2a06:4fc0::/29 maxlen: 48
2a07:e900::/29 maxlen: 48
2a09:0:7::/48 maxlen: 48
2a06:57c0::/29 maxlen: 48
2a09:0:4::/48 maxlen: 48
2a09::/29 maxlen: 48
2a0b:4080::/32 maxlen: 48
2a0d:3640::/29 maxlen: 48
2a0c:ed40::/29 maxlen: 48
2a09:0:1::/48 maxlen: 48
2a09:0:1337::/48 maxlen: 64
2a0d:de80::/29 maxlen: 48
2a09:0:6::/48 maxlen: 48
2a09:0:9::/48 maxlen: 48
2a07:fa00::/29 maxlen: 48
2a0d:7540::/29 maxlen: 48
2a03:d9c0::/29 maxlen: 48
2a09:0:3::/48 maxlen: 48
2a10:2600::/29 maxlen: 48
2a0c:59c0::/29 maxlen: 48
2a09:0:11::/48 maxlen: 48
2a0b:89c0::/29 maxlen: 48
2a09:0:8::/48 maxlen: 48
2a0d:4340::/29 maxlen: 48
2a09:0:5::/48 maxlen: 48
2a0e:6200::/29 maxlen: 48
2a07:fe00::/29 maxlen: 48
2a0d:1fc0::/29 maxlen: 48
2a03:d9c0:8000::/48 maxlen: 48
2a03:d9c0:c0de::/48 maxlen: 64
2a0d:4bc0::/29 maxlen: 48
2a09:0:2::/48 maxlen: 48
2a10:480::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Apr 2023 11:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:39:02:73:84:9c:dc:42:0b:0f:24:22:c9:52:fd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 10 15:52:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce347e0e4cf16a852ea303a2d14fa7c2d241ba13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:9f:d5:ff:9d:62:03:85:99:a8:97:94:d4:
ae:03:55:e8:5a:ad:e9:51:be:2a:b4:b0:d2:d8:53:
7d:ff:7c:d8:a4:82:36:be:5e:5b:86:fc:61:b9:dc:
b6:f7:01:77:99:d1:5a:c2:48:8d:6b:d4:45:de:27:
c1:89:2e:e9:5f:fb:9e:08:d0:97:32:f2:2d:52:fb:
35:ee:43:a8:23:87:6d:61:92:2f:06:48:2d:d7:5e:
c4:ac:09:d5:77:01:66:76:87:ba:3a:68:7e:29:0d:
08:a4:50:21:f2:a4:75:3a:7e:bd:9c:12:f9:4d:30:
0c:84:dc:0a:69:ed:4b:d9:c5:b3:10:64:26:62:8e:
5d:22:70:17:93:ba:72:de:18:ea:34:cd:2e:a7:7a:
35:b8:a3:d8:84:c2:b5:eb:2d:55:1c:7c:c3:d9:e1:
dd:85:37:e0:4b:96:73:60:de:65:ca:fb:77:8c:00:
6d:a5:5e:8c:91:5d:6c:20:f7:1e:69:02:96:f8:24:
bd:3e:63:02:41:71:1c:46:0d:ed:a2:05:5d:6f:08:
87:99:df:9a:aa:0a:88:0d:fc:29:5d:5c:56:47:5d:
0e:fb:07:c4:b5:80:58:6a:7a:46:b3:da:ac:4a:56:
e0:5a:03:3b:96:6b:5e:c7:9d:0a:9d:02:d4:78:d1:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:34:7E:0E:4C:F1:6A:85:2E:A3:03:A2:D1:4F:A7:C2:D2:41:BA:13
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/zjR-DkzxaoUuowOi0U-nwtJBuhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.198.0/23
45.80.188.0/22
45.90.210.0/24
45.92.157.0/24
45.130.20.0/22
45.131.152.0/22
45.139.192.0/22
45.143.232.0/22
45.147.48.0/23
45.153.244.0/22
62.133.32.0/22
78.142.192.0/22
79.143.140.0/22
80.66.196.0/22
91.200.241.0/24
92.60.40.0-92.60.42.255
94.124.116.0/22
95.214.164.0/22
109.94.168.0/22
141.98.196.0/22
147.78.176.0/22
149.62.44.0/22
185.49.32.0/22
185.194.52.0/22
185.200.64.0/22
185.213.148.0/22
185.222.216.0/21
185.248.84.0/22
185.254.73.0-185.254.75.255
185.255.52.0/22
193.111.30.0/23
193.111.90.0/23
193.177.220.0/22
194.36.24.0/23
194.36.222.0/23
194.104.152.0/22
194.124.213.0/24
194.124.216.0/24
194.124.227.0-194.124.228.255
194.169.54.0/23
194.169.180.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a03:d9c0::/29
2a06:4fc0::/29
2a06:57c0::/29
2a07:e900::/29
2a07:fa00::/29
2a07:fe00::/29
2a09::/29
2a0b:4080::/32
2a0b:89c0::/29
2a0c:59c0::/29
2a0c:ed40::/29
2a0d:1fc0::/29
2a0d:3640::/29
2a0d:4340::/29
2a0d:4bc0::/29
2a0d:7540::/29
2a0d:de80::/29
2a0e:6200::/29
2a10:480::/29
2a10:2600::/29
Signature Algorithm: sha256WithRSAEncryption
8c:c4:cf:60:6c:6f:43:56:ea:fe:fb:53:39:8a:5e:68:14:f4:
80:ca:9c:6c:3d:2d:18:f3:59:21:b5:b2:21:63:bd:2c:27:54:
12:fe:3b:63:0c:dc:3a:18:4c:7c:4b:d7:64:31:20:ae:d3:ef:
d0:4e:3b:0e:4d:46:91:a2:76:a9:fd:af:d4:30:a0:33:6c:21:
62:bf:06:84:61:84:af:77:46:77:aa:f5:f1:f0:86:3e:2d:9c:
52:65:ba:83:ec:d5:54:ab:64:fc:5e:8a:dc:30:14:9b:91:8f:
a2:70:8b:c0:65:63:e1:6f:82:1f:01:bc:5c:1d:65:79:00:ab:
fa:50:29:37:fb:77:23:08:5e:43:eb:f4:4f:96:a1:6f:ad:24:
83:4a:21:49:37:2b:8c:22:ce:03:56:d0:74:1b:6b:be:bb:81:
15:47:ad:4c:12:02:bc:b8:bc:ca:7f:90:73:2d:a0:2f:e2:d6:
f5:35:fe:d6:e1:a7:06:9b:f0:d0:aa:a9:11:f5:8f:40:51:a4:
a6:04:7c:7b:ac:b5:23:d4:fa:43:b2:fd:67:88:3e:71:ea:c9:
68:d3:0f:4b:dd:e0:22:eb:38:da:77:9d:7e:e8:d9:96:b8:88:
ad:ca:14:81:e0:10:af:e3:ae:27:5a:a2:7c:52:6d:04:90:c0:
14:18:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org