Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/rz59UIUSBKfFcJ0SfS1i6vcWuM8.roa
File: rz59UIUSBKfFcJ0SfS1i6vcWuM8.roa (raw, json)
Hash identifier: b4J/8MwzsqWmxzn5I/U2gEz16J1ES+KZGnd7Qomr50A=
Subject key identifier: AF:3E:7D:50:85:12:04:A7:C5:70:9D:12:7D:2D:62:EA:F7:16:B8:CF
Certificate issuer: /CN=659abae2b0cae86c4196b020765b823a203207fc
Certificate serial: 019057CC351182E2486A92ACB922E4DC79DB
Authority key identifier: 65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/rz59UIUSBKfFcJ0SfS1i6vcWuM8.roa
Signing time: Thu 27 Jun 2024 03:45:19 +0000
ROA not before: Thu 27 Jun 2024 03:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196949
IP address blocks: 31.200.224.0/20 maxlen: 20
31.200.224.0/23 maxlen: 23
31.200.226.0/23 maxlen: 23
31.200.228.0/23 maxlen: 23
31.200.230.0/23 maxlen: 23
31.200.232.0/23 maxlen: 23
31.200.234.0/23 maxlen: 23
31.200.236.0/23 maxlen: 23
31.200.238.0/23 maxlen: 23
37.200.72.0/21 maxlen: 21
37.200.72.0/23 maxlen: 23
37.200.74.0/23 maxlen: 23
37.200.76.0/23 maxlen: 23
37.200.78.0/23 maxlen: 23
45.146.152.0/22 maxlen: 22
109.110.32.0/19 maxlen: 19
109.110.32.0/23 maxlen: 23
109.110.34.0/23 maxlen: 23
109.110.36.0/23 maxlen: 23
109.110.38.0/23 maxlen: 23
109.110.40.0/23 maxlen: 23
109.110.42.0/23 maxlen: 23
109.110.44.0/23 maxlen: 23
109.110.46.0/23 maxlen: 23
109.110.48.0/23 maxlen: 23
109.110.50.0/23 maxlen: 23
109.110.52.0/23 maxlen: 23
109.110.54.0/23 maxlen: 23
109.110.56.0/23 maxlen: 23
109.110.58.0/23 maxlen: 23
109.110.60.0/23 maxlen: 23
109.110.62.0/23 maxlen: 23
217.150.72.0/21 maxlen: 21
217.150.72.0/23 maxlen: 23
217.150.74.0/23 maxlen: 23
217.150.76.0/23 maxlen: 23
217.150.78.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:57:cc:35:11:82:e2:48:6a:92:ac:b9:22:e4:dc:79:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659abae2b0cae86c4196b020765b823a203207fc
Validity
Not Before: Jun 27 03:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af3e7d50851204a7c5709d127d2d62eaf716b8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:0f:b4:fd:43:24:12:24:2d:19:3a:89:30:
11:97:89:56:c6:27:a8:da:f4:a6:a0:ed:7d:58:27:
bb:88:07:dd:cb:e7:5d:b9:45:7a:24:9c:2f:23:90:
ad:d5:51:be:39:4e:ca:97:97:42:d3:4d:a5:fb:6a:
06:41:33:a5:e2:0d:7d:a1:71:ba:0d:c4:ed:e9:50:
13:1b:b6:9c:e1:cf:d0:89:1c:ac:8d:99:07:36:77:
af:37:c1:13:69:5d:15:f5:ae:c0:ed:6d:fd:9a:29:
de:85:e9:ce:42:8a:ae:7d:4a:12:a1:e5:84:ae:0e:
c8:79:18:a0:d2:bc:c3:2c:23:2a:71:66:6e:ff:12:
87:33:af:b7:90:8d:07:85:51:ce:0e:c0:f9:bb:86:
82:6d:8b:9b:03:dd:22:8f:85:14:f2:0b:35:55:4b:
88:94:d5:2e:89:ca:ce:a9:91:e3:c3:af:ae:4a:76:
94:b8:49:0e:c2:24:07:c0:b8:1b:aa:0c:dd:b2:8b:
18:2e:7c:65:25:72:9d:f2:61:42:83:c4:48:7c:2d:
dc:fc:12:7c:c2:f1:a4:92:68:21:86:43:c5:e0:35:
46:a4:04:5e:1a:ed:4d:ca:a5:2e:5d:a1:bc:8a:c9:
fa:ce:e9:1a:3a:51:b5:20:9b:d2:e8:a0:53:47:26:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3E:7D:50:85:12:04:A7:C5:70:9D:12:7D:2D:62:EA:F7:16:B8:CF
X509v3 Authority Key Identifier:
keyid:65:9A:BA:E2:B0:CA:E8:6C:41:96:B0:20:76:5B:82:3A:20:32:07:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZq64rDK6GxBlrAgdluCOiAyB_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/rz59UIUSBKfFcJ0SfS1i6vcWuM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/694d9b-0e1c-43ad-ac98-02aac8b596dc/1/ZZq64rDK6GxBlrAgdluCOiAyB_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.200.224.0/20
37.200.72.0/21
45.146.152.0/22
109.110.32.0/19
217.150.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:3d:00:7b:fe:6f:94:04:4b:cd:f4:27:cd:3a:3b:51:37:ea:
2d:5b:8b:1a:91:07:25:1d:69:d7:1d:94:01:e2:24:59:c9:b0:
34:08:c2:d4:66:0a:0a:bb:02:e9:43:9b:96:1b:e2:3f:96:3c:
c9:0f:ce:58:61:b5:05:a9:bd:ae:50:a4:17:d6:e4:5e:c7:f3:
57:6b:2f:4a:0d:f3:ae:e7:ef:95:68:e2:30:6a:e8:75:5f:ba:
a7:f8:eb:b2:54:59:34:eb:18:a7:0f:37:5c:e7:e5:6b:73:d4:
a5:ba:1f:cf:e4:a6:f5:a9:eb:7c:58:9f:0a:8d:04:97:1a:7b:
77:57:9f:3c:83:95:8f:9d:f0:29:d1:55:e2:b6:98:df:8a:e6:
a6:5d:aa:79:89:31:09:64:91:da:1a:90:aa:16:28:e8:e9:7d:
5f:32:5a:ef:50:7e:f4:b6:85:98:ee:c7:71:0e:6f:82:2b:14:
76:fe:5c:5d:11:a5:6e:bf:1a:52:c4:72:9d:dc:27:59:7c:48:
1d:43:55:31:63:04:16:39:34:16:17:7f:0e:e7:80:63:cf:3b:
38:3f:17:72:e6:41:2f:67:5e:fb:0c:63:8f:cf:30:d2:c3:4b:
c3:3a:81:9b:f3:47:fd:13:fb:2b:de:f3:a8:15:35:cd:f0:ec:
90:53:11:e7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZBXzDURguJIapKsuSLk3HnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1OWFiYWUyYjBjYWU4NmM0MTk2YjAyMDc2NWI4MjNhMjAz
MjA3ZmMwHhcNMjQwNjI3MDM0NTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjNlN2Q1MDg1MTIwNGE3YzU3MDlkMTI3ZDJkNjJlYWY3MTZiOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2gPtP1DJBIkLRk6iTARl4lWxieo
2vSmoO19WCe7iAfdy+dduUV6JJwvI5Ct1VG+OU7Kl5dC002l+2oGQTOl4g19oXG6
DcTt6VATG7ac4c/QiRysjZkHNnevN8ETaV0V9a7A7W39minehenOQoqufUoSoeWE
rg7IeRig0rzDLCMqcWZu/xKHM6+3kI0HhVHODsD5u4aCbYubA90ij4UU8gs1VUuI
lNUuicrOqZHjw6+uSnaUuEkOwiQHwLgbqgzdsosYLnxlJXKd8mFCg8RIfC3c/BJ8
wvGkkmghhkPF4DVGpAReGu1NyqUuXaG8isn6zukaOlG1IJvS6KBTRyaRMwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFK8+fVCFEgSnxXCdEn0tYur3FrjPMB8GA1UdIwQY
MBaAFGWauuKwyuhsQZawIHZbgjogMgf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgt
MDJhYWM4YjU5NmRjLzEvcno1OVVJVVNCS2ZGY0owU2ZTMWk2dmNXdU04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82OTRkOWItMGUxYy00M2FkLWFjOTgtMDJhYWM4YjU5NmRj
LzEvWlpxNjRyREs2R3hCbHJBZ2RsdUNPaUF5Ql93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQEH8jgAwQD
JchIAwQCLZKYAwQFbW4gAwQD2ZZIMA0GCSqGSIb3DQEBCwUAA4IBAQAfPQB7/m+U
BEvN9CfNOjtRN+otW4sakQclHWnXHZQB4iRZybA0CMLUZgoKuwLpQ5uWG+I/ljzJ
D85YYbUFqb2uUKQX1uRex/NXay9KDfOu5++VaOIwauh1X7qn+OuyVFk06xinDzdc
5+Vrc9Sluh/P5Kb1qet8WJ8KjQSXGnt3V588g5WPnfAp0VXitpjfiuamXap5iTEJ
ZJHaGpCqFijo6X1fMlrvUH70toWY7sdxDm+CKxR2/lxdEaVuvxpSxHKd3CdZfEgd
Q1UxYwQWOTQWF38O54Bjzzs4Pxdy5kEvZ177DGOPzzDSw0vDOoGb80f9E/sr3vOo
FTXN8OyQUxHn
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:24:16 2025 by rpki-client