Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZFVp-QkPS65Xbv9D4hrgn5sQ-J0.roa
File: ZFVp-QkPS65Xbv9D4hrgn5sQ-J0.roa (raw, json)
Hash identifier: nu9yQXS3q6QtU35Sc3PzSAd4pMnA5nJDq0HSvTx9854=
Subject key identifier: 64:55:69:F9:09:0F:4B:AE:57:6E:FF:43:E2:1A:E0:9F:9B:10:F8:9D
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D662C01CBCA100E78D42377046C7CD0E2
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZFVp-QkPS65Xbv9D4hrgn5sQ-J0.roa
Signing time: Thu 01 Feb 2024 19:36:16 +0000
ROA not before: Thu 01 Feb 2024 19:36:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8926
IP address blocks: 5.56.64.0/18 maxlen: 24
5.56.64.0/24 maxlen: 24
5.56.72.0/24 maxlen: 24
5.56.73.0/24 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
46.55.0.0/18 maxlen: 18
46.55.64.0/18 maxlen: 18
46.55.111.0/24 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 21
86.105.172.0/22 maxlen: 22
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 21
86.106.208.0/20 maxlen: 20
86.106.213.0/24 maxlen: 24
86.106.224.0/19 maxlen: 24
86.107.64.0/22 maxlen: 22
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 21
89.32.136.0/21 maxlen: 21
89.32.172.0/22 maxlen: 22
89.32.252.0/22 maxlen: 22
89.34.64.0/21 maxlen: 21
89.34.112.0/21 maxlen: 21
89.34.192.0/21 maxlen: 21
89.34.204.0/22 maxlen: 22
89.34.232.0/22 maxlen: 22
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 21
89.35.84.0/22 maxlen: 22
89.35.200.0/22 maxlen: 22
89.36.156.0/22 maxlen: 22
89.37.44.0/22 maxlen: 22
89.37.104.0/24 maxlen: 24
89.38.32.0/22 maxlen: 22
89.38.64.0/22 maxlen: 22
89.38.76.0/22 maxlen: 22
89.39.76.0/22 maxlen: 22
89.39.84.0/22 maxlen: 22
89.39.96.0/21 maxlen: 24
89.39.112.0/21 maxlen: 24
89.40.228.0/22 maxlen: 22
89.41.64.0/18 maxlen: 24
89.42.64.0/22 maxlen: 22
89.42.72.0/21 maxlen: 21
89.42.104.0/22 maxlen: 22
89.42.128.0/22 maxlen: 22
89.42.180.0/22 maxlen: 22
89.42.224.0/22 maxlen: 22
89.43.128.0/22 maxlen: 22
89.43.168.0/22 maxlen: 22
89.44.152.0/22 maxlen: 22
89.45.40.0/22 maxlen: 22
89.46.164.0/22 maxlen: 22
92.114.128.0/17 maxlen: 24
92.114.128.0/18 maxlen: 18
92.114.144.0/20 maxlen: 20
92.114.160.0/20 maxlen: 20
92.114.176.0/20 maxlen: 20
92.114.192.0/18 maxlen: 18
92.114.192.0/20 maxlen: 20
92.115.0.0/16 maxlen: 24
92.115.0.0/18 maxlen: 18
92.115.64.0/18 maxlen: 18
92.115.128.0/18 maxlen: 18
92.115.192.0/18 maxlen: 18
93.113.64.0/21 maxlen: 24
93.113.80.0/21 maxlen: 21
93.113.92.0/22 maxlen: 22
93.113.244.0/22 maxlen: 22
93.115.136.0/21 maxlen: 21
93.116.0.0/16 maxlen: 24
93.116.0.0/18 maxlen: 18
93.116.64.0/18 maxlen: 18
93.116.128.0/18 maxlen: 18
93.116.192.0/18 maxlen: 24
93.117.48.0/20 maxlen: 20
93.117.68.0/22 maxlen: 22
93.117.72.0/21 maxlen: 21
93.117.128.0/21 maxlen: 24
93.117.140.0/22 maxlen: 22
93.117.144.0/21 maxlen: 21
93.117.156.0/22 maxlen: 22
93.117.160.0/21 maxlen: 21
93.117.168.0/22 maxlen: 22
93.118.176.0/22 maxlen: 22
93.118.188.0/22 maxlen: 22
93.119.96.0/21 maxlen: 21
93.119.108.0/22 maxlen: 22
93.119.128.0/21 maxlen: 21
93.119.140.0/22 maxlen: 22
93.119.144.0/21 maxlen: 24
93.119.160.0/21 maxlen: 21
93.119.196.0/22 maxlen: 22
93.119.200.0/21 maxlen: 24
93.119.228.0/22 maxlen: 22
93.119.232.0/21 maxlen: 24
94.176.64.0/20 maxlen: 24
109.185.0.0/16 maxlen: 24
109.185.0.0/18 maxlen: 18
109.185.64.0/18 maxlen: 18
109.185.128.0/18 maxlen: 24
109.185.192.0/18 maxlen: 18
178.132.112.0/20 maxlen: 24
178.132.128.0/18 maxlen: 24
185.28.104.0/22 maxlen: 24
188.208.96.0/22 maxlen: 22
188.208.104.0/22 maxlen: 22
188.208.112.0/22 maxlen: 22
188.208.120.0/21 maxlen: 24
188.208.192.0/22 maxlen: 22
188.208.204.0/22 maxlen: 22
188.209.216.0/21 maxlen: 24
188.210.240.0/21 maxlen: 21
188.210.248.0/22 maxlen: 22
188.212.0.0/22 maxlen: 22
188.212.8.0/21 maxlen: 21
188.212.24.0/21 maxlen: 21
188.212.40.0/21 maxlen: 21
188.213.36.0/22 maxlen: 22
188.213.52.0/22 maxlen: 22
188.213.220.0/22 maxlen: 22
188.213.236.0/22 maxlen: 22
188.213.244.0/22 maxlen: 22
188.214.60.0/22 maxlen: 22
188.214.136.0/22 maxlen: 24
188.214.146.0/24 maxlen: 24
188.214.147.0/24 maxlen: 24
188.214.200.0/21 maxlen: 21
188.214.228.0/22 maxlen: 24
188.215.236.0/22 maxlen: 22
188.215.252.0/22 maxlen: 22
188.237.0.0/16 maxlen: 24
188.237.0.0/18 maxlen: 18
188.237.24.0/22 maxlen: 24
188.237.64.0/18 maxlen: 18
188.237.128.0/18 maxlen: 18
188.237.168.0/24 maxlen: 24
188.237.192.0/18 maxlen: 18
212.0.192.0/19 maxlen: 32
212.0.192.0/22 maxlen: 22
212.0.193.0/24 maxlen: 24
212.0.195.0/24 maxlen: 24
212.0.196.0/24 maxlen: 24
212.0.198.0/24 maxlen: 24
212.0.199.0/24 maxlen: 24
212.0.200.0/21 maxlen: 24
212.0.203.0/24 maxlen: 24
212.0.208.0/20 maxlen: 24
212.0.210.0/24 maxlen: 24
212.0.215.0/24 maxlen: 24
212.0.219.0/24 maxlen: 24
2a02:a30::/32 maxlen: 32
2a02:a30:172::/48 maxlen: 48
2a02:a30:1600::/48 maxlen: 48
2a02:a30:6330:103::/64 maxlen: 64
2a02:a30:f090::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Feb 2024 10:23:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:2c:01:cb:ca:10:0e:78:d4:23:77:04:6c:7c:d0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 1 19:36:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=645569f9090f4bae576eff43e21ae09f9b10f89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9f:0b:8a:3e:58:5e:30:20:02:54:dd:43:c2:
d7:77:3a:78:d6:2a:1f:58:89:f8:2c:b1:36:e1:be:
c8:61:05:d0:e7:48:6c:88:d0:af:5c:94:6d:f8:0e:
a1:ba:30:cc:11:97:1d:26:4c:82:6f:cd:d3:bf:f1:
04:47:40:9e:34:19:96:20:6e:7d:e3:de:94:05:25:
e3:3d:88:d8:27:b1:a4:0e:c4:80:64:18:7e:f8:dd:
9a:06:fc:bf:d5:f9:2e:b8:9b:75:0e:25:b6:e7:87:
69:9b:22:02:3d:48:c4:3d:e5:66:ae:33:95:4e:a6:
b0:c6:21:fe:5e:73:9e:98:17:76:23:b4:c2:81:be:
4f:b7:a5:85:42:f7:6a:11:71:8b:5e:3d:59:d2:2b:
53:f3:36:1c:d4:ee:6d:82:82:9f:f8:93:b3:70:cd:
0a:1a:6d:be:f4:b6:76:ae:fa:cb:e6:9a:6c:b6:a1:
27:f9:64:e9:6a:f2:8e:6e:4f:a1:78:35:2d:2f:a6:
92:10:41:5b:cb:a7:7f:df:78:9a:4c:75:df:9c:2e:
26:2c:10:40:86:e4:b3:72:14:fc:70:6d:7c:11:4e:
0f:96:00:18:eb:01:21:7d:54:76:1d:4a:80:ae:38:
84:75:21:21:58:df:16:02:a5:98:69:1d:52:55:04:
29:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:69:F9:09:0F:4B:AE:57:6E:FF:43:E2:1A:E0:9F:9B:10:F8:9D
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ZFVp-QkPS65Xbv9D4hrgn5sQ-J0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0-86.106.255.255
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
89.38.32.0/22
89.38.64.0/22
89.38.76.0/22
89.39.76.0/22
89.39.84.0/22
89.39.96.0/21
89.39.112.0/21
89.40.228.0/22
89.41.64.0/18
89.42.64.0/22
89.42.72.0/21
89.42.104.0/22
89.42.128.0/22
89.42.180.0/22
89.42.224.0/22
89.43.128.0/22
89.43.168.0/22
89.44.152.0/22
89.45.40.0/22
89.46.164.0/22
92.114.128.0-92.115.255.255
93.113.64.0/21
93.113.80.0/21
93.113.92.0/22
93.113.244.0/22
93.115.136.0/21
93.116.0.0/16
93.117.48.0/20
93.117.68.0-93.117.79.255
93.117.128.0/21
93.117.140.0-93.117.151.255
93.117.156.0-93.117.171.255
93.118.176.0/22
93.118.188.0/22
93.119.96.0/21
93.119.108.0/22
93.119.128.0/21
93.119.140.0-93.119.151.255
93.119.160.0/21
93.119.196.0-93.119.207.255
93.119.228.0-93.119.239.255
94.176.64.0/20
109.185.0.0/16
178.132.112.0-178.132.191.255
185.28.104.0/22
188.208.96.0/22
188.208.104.0/22
188.208.112.0/22
188.208.120.0/21
188.208.192.0/22
188.208.204.0/22
188.209.216.0/21
188.210.240.0-188.210.251.255
188.212.0.0/22
188.212.8.0/21
188.212.24.0/21
188.212.40.0/21
188.213.36.0/22
188.213.52.0/22
188.213.220.0/22
188.213.236.0/22
188.213.244.0/22
188.214.60.0/22
188.214.136.0/22
188.214.146.0/23
188.214.200.0/21
188.214.228.0/22
188.215.236.0/22
188.215.252.0/22
188.237.0.0/16
212.0.192.0/19
IPv6:
2a02:a30::/32
Signature Algorithm: sha256WithRSAEncryption
4a:1e:31:25:1b:63:69:d7:35:c8:a9:7b:a7:12:c7:29:91:37:
2b:82:55:00:30:12:31:9f:47:f0:f9:31:e1:6a:58:b6:20:0f:
30:d1:ad:31:f8:f7:d3:4e:ac:e1:a6:e0:6d:bc:0a:d1:64:92:
67:2c:05:a6:db:35:5f:08:50:d8:db:08:39:9d:d8:a2:af:62:
77:de:ca:72:20:6d:ed:2c:df:1c:33:f5:2e:86:c8:d9:6d:44:
55:9e:e9:c6:ad:f8:60:db:2b:80:fa:0d:3f:0a:67:49:32:25:
0e:db:2f:25:61:7d:bd:c3:be:8e:d6:4c:11:44:02:70:77:77:
fb:66:f5:b6:67:4a:f5:79:d4:81:ee:5c:1a:9c:e8:4c:70:34:
e0:d7:b5:4b:da:a5:a3:19:a8:4d:03:fa:a2:96:c0:d0:55:94:
74:41:b2:14:43:db:92:28:72:2b:8b:46:48:cf:86:4b:aa:6f:
28:40:95:14:31:8e:4b:28:76:74:3b:1e:f2:c2:cb:72:20:f3:
35:66:6d:66:64:3e:e7:68:07:e9:fd:db:85:3e:2d:8c:7d:24:
95:92:4f:af:ad:6e:ea:60:fb:f3:a8:39:36:c3:c3:95:c3:7d:
f8:09:a4:f6:45:48:bd:6a:b6:f8:af:6c:fb:83:9f:92:ec:88:
bb:49:d4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:00 2025 by rpki-client