Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zou-CHxwd8WNoS7UQi4Of-sMuJ8.roa
File: zou-CHxwd8WNoS7UQi4Of-sMuJ8.roa (raw, json)
Hash identifier: OpSm7qzp/Qg0onaLucT1mZJ7jWZPSL3NfZ+Uc8efUJ8=
Subject key identifier: CE:8B:BE:08:7C:70:77:C5:8D:A1:2E:D4:42:2E:0E:7F:EB:0C:B8:9F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018F575EB996C3B5F427E79255A9952E2502
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zou-CHxwd8WNoS7UQi4Of-sMuJ8.roa
Signing time: Wed 08 May 2024 08:42:56 +0000
ROA not before: Wed 08 May 2024 08:42:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:401::/32 maxlen: 32
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3505:d000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/29 maxlen: 36
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3804:e000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3805::/36 maxlen: 36
2a09:3805:1000::/36 maxlen: 36
2a09:3805:2000::/36 maxlen: 36
2a09:3805:3000::/36 maxlen: 36
2a09:3805:4000::/36 maxlen: 36
2a09:3805:5000::/36 maxlen: 36
2a09:3805:6000::/36 maxlen: 36
2a09:3805:7000::/36 maxlen: 36
2a09:3805:8000::/36 maxlen: 36
2a09:3805:9000::/36 maxlen: 36
2a09:3805:a000::/36 maxlen: 36
2a09:3805:b000::/36 maxlen: 36
2a09:3805:c000::/36 maxlen: 36
2a09:3805:d000::/36 maxlen: 36
2a09:3805:e000::/36 maxlen: 36
2a09:3805:f000::/36 maxlen: 36
2a09:3806::/32 maxlen: 32
2a09:3806::/36 maxlen: 36
2a09:3806:1000::/36 maxlen: 36
2a09:3806:2000::/36 maxlen: 36
2a09:3806:3000::/36 maxlen: 36
2a09:3806:4000::/36 maxlen: 36
2a09:3806:5000::/36 maxlen: 36
2a09:3806:6000::/36 maxlen: 36
2a09:3806:7000::/36 maxlen: 36
2a09:3806:8000::/36 maxlen: 36
2a09:3806:9000::/36 maxlen: 36
2a09:3806:a000::/36 maxlen: 36
2a09:3806:b000::/36 maxlen: 36
2a09:3806:c000::/36 maxlen: 36
2a09:3806:d000::/36 maxlen: 36
2a09:3806:e000::/36 maxlen: 36
2a09:3806:f000::/36 maxlen: 36
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:b000::/36 maxlen: 36
2a09:4e01:c000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:6f01::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:f200::/29 maxlen: 36
2a0b:b0c0::/32 maxlen: 32
2a0b:b0c1::/32 maxlen: 32
2a0b:b0c2::/32 maxlen: 32
2a0b:b0c3::/32 maxlen: 32
2a0b:b0c4::/32 maxlen: 32
2a0b:b0c5::/32 maxlen: 32
2a0b:b0c6::/32 maxlen: 32
2a0b:b0c7::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:2107::/36 maxlen: 36
2a0c:2107:6000::/36 maxlen: 36
2a0c:2107:7000::/36 maxlen: 36
2a0c:e8c0::/29 maxlen: 29
2a0d:2e40::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:9880::/29 maxlen: 32
2a0f:c580::/29 maxlen: 36
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:c80::/29 maxlen: 36
2a11:c80:1000::/36 maxlen: 36
2a11:c80:2000::/36 maxlen: 36
2a11:c80:3000::/36 maxlen: 36
2a11:c80:4000::/36 maxlen: 36
2a11:c80:5000::/36 maxlen: 36
2a11:c80:6000::/36 maxlen: 36
2a11:c80:b000::/36 maxlen: 36
2a11:c80:c000::/36 maxlen: 36
2a11:c80:d000::/36 maxlen: 36
2a11:c81::/32 maxlen: 32
2a11:c83::/32 maxlen: 32
2a11:c85::/32 maxlen: 32
2a11:d80::/29 maxlen: 36
2a11:d83::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af00::/29 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a11:af06:a000::/36 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a12:7c00:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sat 11 May 2024 11:10:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:57:5e:b9:96:c3:b5:f4:27:e7:92:55:a9:95:2e:25:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: May 8 08:42:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8bbe087c7077c58da12ed4422e0e7feb0cb89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0b:d6:f3:37:74:8a:a3:72:f5:75:fb:5a:7b:
6b:06:14:13:85:be:cb:31:14:db:f6:b9:04:f3:9a:
83:5d:44:e3:18:e5:45:10:e5:2f:d9:62:9e:28:31:
37:7e:50:89:3c:69:ed:e2:3e:09:ba:de:85:1b:d9:
dd:32:f0:f2:70:79:26:74:c8:34:a8:78:01:ca:c7:
f1:14:d7:06:6f:ee:33:0a:46:ba:fd:2f:f0:eb:f1:
9a:b3:da:ae:20:6e:67:1c:7a:0d:11:6d:2e:fe:ed:
fe:6a:32:0f:ad:cd:e1:1a:a3:d3:0c:04:fc:3e:fb:
bf:2b:d5:4a:ee:f9:27:b8:80:63:b7:e3:f1:cd:b2:
ab:95:ab:dc:9e:94:73:83:9c:38:5d:41:76:70:60:
0c:7a:92:b9:16:43:66:0a:f6:4b:68:a1:86:d7:95:
f6:d9:46:23:b3:2f:94:5e:68:1c:f9:f0:88:b6:52:
75:c5:f5:66:54:1e:8c:4e:b7:08:16:33:83:d3:44:
bc:94:b5:32:f1:1b:7d:3f:59:bb:68:d4:97:39:18:
d0:a1:9e:0d:03:75:79:45:03:88:c1:90:f3:a1:34:
a9:99:30:6b:c1:97:5a:a4:d4:24:96:a6:ce:54:48:
6e:1a:d0:93:8c:94:3c:d4:d1:04:48:d5:cf:e1:f7:
2a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:BE:08:7C:70:77:C5:8D:A1:2E:D4:42:2E:0E:7F:EB:0C:B8:9F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/zou-CHxwd8WNoS7UQi4Of-sMuJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:401::/32
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3505:d000::/36
2a09:3506::/32
2a09:3800::/29
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:cfff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/31
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0a:f200::/29
2a0b:b0c0::/29
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2107::/36
2a0c:2107:6000::/35
2a0c:e8c0::/29
2a0d:2e40::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:9880::/29
2a0f:c580::/29
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:c80::/29
2a11:d80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af00::/29
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
1c:53:77:e5:0f:bc:34:af:a1:cd:3d:3b:94:54:5d:52:98:30:
69:50:cb:63:f8:a7:6f:62:86:77:66:dc:fc:7d:c9:78:e8:d1:
47:af:1c:75:e0:3a:fd:86:c1:32:9d:02:37:ff:e2:08:b5:a4:
5c:90:e2:03:90:c8:60:8f:69:02:93:5a:6f:6a:ef:d1:49:e3:
86:11:08:5f:89:98:84:94:c7:35:c1:30:b3:18:9e:ec:dd:90:
66:4a:7a:b0:53:c7:34:4c:87:e2:df:a1:52:f2:e5:6c:49:9f:
9d:f5:40:f5:32:11:cd:0d:4f:84:ff:b6:9b:dc:9c:78:3b:3e:
1d:ca:60:f0:9c:cd:39:df:8b:de:65:bd:da:38:d5:b3:5f:9c:
0f:ef:ee:6a:11:e1:c6:91:dd:ec:9e:02:1b:f5:29:1b:c2:ea:
90:01:0c:a1:fb:0b:e0:85:db:75:9f:71:48:41:7d:80:4c:57:
2f:92:97:fc:ba:6f:ed:a3:9f:a6:59:04:4a:9a:04:27:60:9e:
04:80:f8:8f:26:14:e9:9f:38:5d:e8:04:22:eb:87:57:8f:7c:
dd:3e:b9:40:83:bb:d2:e8:49:e7:73:48:26:36:03:73:71:a6:
d3:ed:34:61:c5:67:93:d7:e3:b8:9f:e7:d8:6b:b9:f2:f9:4e:
08:b3:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 12:08:23 2024 by rpki-client on console-fra.rpki-client.org