Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/znckaczfKtvuASEmtT1pNJvOdJU.roa
File: znckaczfKtvuASEmtT1pNJvOdJU.roa (raw, json)
Hash identifier: De5e7FtrZeryGjMJd+RQ7JObj2lhmBDNKpAm2wbFvVY=
Subject key identifier: CE:77:24:69:CC:DF:2A:DB:EE:01:21:26:B5:3D:69:34:9B:CE:74:95
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 018CC8706AFCB3EB14F265AFB4CF9466F06F
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/znckaczfKtvuASEmtT1pNJvOdJU.roa
Signing time: Tue 02 Jan 2024 04:30:59 +0000
ROA not before: Tue 02 Jan 2024 04:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47394
IP address blocks: 46.255.144.0/24 maxlen: 24
46.255.144.0/22 maxlen: 22
46.255.144.0/21 maxlen: 21
46.255.145.0/24 maxlen: 24
95.107.150.0/24 maxlen: 24
95.107.146.0/23 maxlen: 23
95.107.157.0/24 maxlen: 24
95.107.159.0/24 maxlen: 24
95.107.156.0/24 maxlen: 24
95.107.162.0/24 maxlen: 24
95.107.164.0/24 maxlen: 24
95.107.165.0/24 maxlen: 24
95.107.166.0/24 maxlen: 24
95.107.160.0/22 maxlen: 22
95.107.160.0/21 maxlen: 21
95.107.160.0/24 maxlen: 24
95.107.162.0/23 maxlen: 23
95.107.164.0/22 maxlen: 22
95.107.172.0/23 maxlen: 23
95.107.168.0/22 maxlen: 22
95.107.167.0/24 maxlen: 24
95.107.168.0/23 maxlen: 23
95.107.170.0/23 maxlen: 23
95.107.176.0/21 maxlen: 21
95.107.174.0/24 maxlen: 24
95.107.177.0/24 maxlen: 24
95.107.184.0/22 maxlen: 22
95.107.182.0/24 maxlen: 24
95.107.184.0/21 maxlen: 21
95.107.180.0/22 maxlen: 22
95.107.192.0/24 maxlen: 24
95.107.188.0/22 maxlen: 22
95.107.188.0/24 maxlen: 24
95.107.192.0/22 maxlen: 22
95.107.196.0/22 maxlen: 22
95.107.195.0/24 maxlen: 24
95.107.196.0/23 maxlen: 23
95.107.196.0/24 maxlen: 24
95.107.198.0/23 maxlen: 23
95.107.193.0/24 maxlen: 24
95.107.194.0/24 maxlen: 24
95.107.194.0/23 maxlen: 23
46.255.148.0/24 maxlen: 24
46.255.149.0/24 maxlen: 24
46.255.150.0/24 maxlen: 24
46.255.151.0/24 maxlen: 24
46.255.146.0/24 maxlen: 24
46.255.147.0/24 maxlen: 24
46.255.148.0/22 maxlen: 22
95.107.128.0/21 maxlen: 21
95.107.129.0/24 maxlen: 24
95.107.132.0/24 maxlen: 24
95.107.136.0/24 maxlen: 24
95.107.135.0/24 maxlen: 24
95.107.136.0/21 maxlen: 21
95.107.144.0/23 maxlen: 23
95.107.141.0/24 maxlen: 24
185.118.150.0/23 maxlen: 23
185.118.148.0/22 maxlen: 22
185.118.148.0/23 maxlen: 23
141.8.200.0/21 maxlen: 21
185.122.228.0/24 maxlen: 24
185.122.228.0/23 maxlen: 23
185.122.228.0/22 maxlen: 22
95.107.254.0/23 maxlen: 23
95.107.200.0/24 maxlen: 24
95.107.201.0/24 maxlen: 24
95.107.200.0/21 maxlen: 21
95.107.204.0/22 maxlen: 22
95.107.202.0/23 maxlen: 23
95.107.212.0/23 maxlen: 23
95.107.212.0/24 maxlen: 24
95.107.209.0/24 maxlen: 24
95.107.212.0/22 maxlen: 22
95.107.208.0/23 maxlen: 23
95.107.208.0/21 maxlen: 21
95.107.208.0/22 maxlen: 22
95.107.208.0/20 maxlen: 20
95.107.216.0/21 maxlen: 21
95.107.216.0/22 maxlen: 22
95.107.216.0/23 maxlen: 23
95.107.218.0/23 maxlen: 23
95.107.224.0/20 maxlen: 20
95.107.224.0/22 maxlen: 22
95.107.220.0/23 maxlen: 23
95.107.222.0/23 maxlen: 23
95.107.220.0/22 maxlen: 22
95.107.228.0/24 maxlen: 24
95.107.228.0/22 maxlen: 22
95.107.232.0/22 maxlen: 22
95.107.238.0/23 maxlen: 23
95.107.240.0/22 maxlen: 22
95.107.234.0/23 maxlen: 23
95.107.236.0/22 maxlen: 22
95.107.240.0/20 maxlen: 20
95.107.244.0/22 maxlen: 22
95.107.252.0/22 maxlen: 22
95.107.248.0/24 maxlen: 24
95.107.248.0/23 maxlen: 23
95.107.248.0/22 maxlen: 22
2a03:8480::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 19 Mar 2024 09:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:70:6a:fc:b3:eb:14:f2:65:af:b4:cf:94:66:f0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Jan 2 04:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce772469ccdf2adbee012126b53d69349bce7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:ba:0d:7a:c0:1e:77:96:1d:48:56:dd:56:
ad:08:aa:54:e5:b2:cb:9f:89:09:1c:b4:ed:e2:b3:
15:89:19:cc:8d:58:61:e2:9d:5e:2d:e6:40:e7:e5:
28:03:66:03:f8:68:fa:0c:b8:76:7c:5a:b2:52:9e:
73:6c:45:98:be:0d:08:f6:db:4a:96:6e:6a:84:d6:
0c:82:fb:ca:30:69:c1:d4:70:3b:76:9c:e3:52:15:
28:d0:d7:27:89:5f:3c:82:cf:7e:16:26:88:b3:1d:
1c:d1:ee:58:e9:6a:55:ca:00:58:2c:05:4d:2a:ff:
63:a7:d9:cb:6f:bd:91:f0:d7:b4:d0:90:0a:03:b6:
c7:aa:f4:80:92:82:59:f5:7b:0f:09:3d:5f:de:9e:
ca:d8:67:42:fe:df:ef:f2:61:da:da:04:62:89:36:
71:f3:54:b6:42:8e:cb:5a:d8:9d:ce:77:40:72:6c:
a2:16:0f:ca:02:30:bd:5c:79:37:e0:30:fd:07:69:
5a:d6:7b:14:ed:60:e0:ce:5b:fb:3d:a8:24:11:25:
7d:96:bd:af:f4:c8:a8:69:07:fc:7b:df:dc:59:cf:
00:74:fc:c8:40:ef:c5:1e:ae:c9:14:25:98:2a:04:
31:2f:c1:71:3c:ab:f3:0f:44:b1:7c:b6:72:80:ed:
c6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:77:24:69:CC:DF:2A:DB:EE:01:21:26:B5:3D:69:34:9B:CE:74:95
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/znckaczfKtvuASEmtT1pNJvOdJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.144.0/21
95.107.128.0-95.107.147.255
95.107.150.0/24
95.107.156.0/23
95.107.159.0-95.107.174.255
95.107.176.0-95.107.255.255
141.8.200.0/21
185.118.148.0/22
185.122.228.0/22
IPv6:
2a03:8480::/32
Signature Algorithm: sha256WithRSAEncryption
23:bf:82:05:93:f1:b4:ba:4a:e9:78:3c:2b:79:49:80:69:19:
f8:d1:db:f3:33:b9:41:e7:db:56:ee:11:8c:bc:fc:fe:ed:24:
43:8d:07:f3:ae:d0:c3:cb:4b:50:24:35:6c:6b:cb:e6:7c:f9:
43:4d:e7:91:51:8b:ec:45:d6:32:0b:6c:ad:2c:a2:3d:b9:44:
00:7f:e2:d5:49:be:6b:81:3d:35:8e:51:29:59:d0:52:bc:dc:
59:b9:a9:bd:c2:bd:d7:a1:54:c8:97:57:3a:65:50:2e:a7:f7:
4b:5b:df:7b:02:f0:fe:f6:7b:70:8d:a5:ce:04:99:b5:82:88:
03:ed:f2:03:c4:fb:e0:54:78:8e:64:d2:fd:14:70:be:fa:e1:
d6:27:66:44:1a:f2:19:d9:44:82:3d:c4:52:d0:a1:f3:3e:e0:
a2:08:ee:f8:b5:f7:09:ae:6e:c7:ad:7e:9e:16:34:e9:82:0a:
d0:da:7e:de:0c:17:e5:cf:7b:07:47:86:74:bc:e4:dd:31:cd:
25:e7:c1:dd:31:ba:69:36:63:8b:47:91:95:05:30:2e:2c:6c:
a3:94:d9:ba:d2:2f:07:10:fa:8e:54:8f:f7:a7:c7:60:2f:40:
e2:47:59:84:c0:25:49:10:3e:fa:c3:92:e0:a9:dc:3a:15:cd:
d7:17:69:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 19 12:46:25 2024 by rpki-client on console-ams.rpki-client.org