Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZRW3B3mlDOFgcQT4jiI_WPBUtH0.roa
File: ZRW3B3mlDOFgcQT4jiI_WPBUtH0.roa (raw, json)
Hash identifier: NzH9ubZjAG7oerWVv0GZwLbeB6gGuPTi8VkmsNIVqMc=
Subject key identifier: 65:15:B7:07:79:A5:0C:E1:60:71:04:F8:8E:22:3F:58:F0:54:B4:7D
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0191295A3BB3BF72DA08DC1216554B845965
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZRW3B3mlDOFgcQT4jiI_WPBUtH0.roa
Signing time: Tue 06 Aug 2024 20:21:05 +0000
ROA not before: Tue 06 Aug 2024 20:21:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 45.89.66.0/24 maxlen: 24
45.89.67.0/24 maxlen: 24
45.128.176.0/22 maxlen: 22
45.128.176.0/24 maxlen: 24
45.128.177.0/24 maxlen: 24
45.128.178.0/24 maxlen: 24
45.128.179.0/24 maxlen: 24
45.132.252.0/24 maxlen: 24
91.217.80.0/24 maxlen: 24
94.142.136.0/21 maxlen: 21
94.142.139.0/24 maxlen: 24
94.142.140.0/24 maxlen: 24
94.142.141.0/24 maxlen: 24
94.142.142.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
185.5.248.0/22 maxlen: 22
185.5.248.0/23 maxlen: 23
185.5.250.0/23 maxlen: 23
185.5.250.0/24 maxlen: 24
185.58.204.0/22 maxlen: 22
185.58.206.0/24 maxlen: 24
185.58.207.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.105.116.0/24 maxlen: 24
185.105.117.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
185.125.216.0/22 maxlen: 22
185.125.218.0/23 maxlen: 23
185.125.229.0/24 maxlen: 24
185.125.230.0/24 maxlen: 24
185.125.231.0/24 maxlen: 24
185.200.188.0/24 maxlen: 24
193.124.176.0/20 maxlen: 20
193.124.176.0/21 maxlen: 21
193.124.176.0/22 maxlen: 22
193.124.176.0/24 maxlen: 24
193.124.177.0/24 maxlen: 24
193.124.178.0/24 maxlen: 24
193.124.179.0/24 maxlen: 24
193.124.180.0/24 maxlen: 24
193.124.181.0/24 maxlen: 24
193.124.182.0/24 maxlen: 24
193.124.183.0/24 maxlen: 24
193.124.184.0/21 maxlen: 21
193.124.184.0/24 maxlen: 24
193.124.186.0/24 maxlen: 24
193.124.187.0/24 maxlen: 24
193.124.189.0/24 maxlen: 24
193.124.191.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
194.67.192.0/19 maxlen: 19
194.67.193.0/24 maxlen: 24
194.67.194.0/23 maxlen: 23
194.67.196.0/22 maxlen: 22
194.67.200.0/21 maxlen: 21
194.67.202.0/24 maxlen: 24
194.67.203.0/24 maxlen: 24
194.67.204.0/22 maxlen: 22
194.67.208.0/20 maxlen: 20
195.47.250.0/24 maxlen: 24
2a0a:9300::/48 maxlen: 48
2a0a:9300:2::/48 maxlen: 48
2a0a:9300:d0::/48 maxlen: 48
2a0a:9300:d1::/48 maxlen: 48
2a0a:9300:d2::/48 maxlen: 48
2a0a:9301::/48 maxlen: 48
2a0a:9301:1::/48 maxlen: 48
2a0a:9301:2::/48 maxlen: 48
2a0a:9302::/32 maxlen: 32
2a0a:9302:1::/48 maxlen: 48
2a0b:7780::/29 maxlen: 29
2a0c:77c0::/32 maxlen: 32
2a0d:3880::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Aug 2024 09:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:5a:3b:b3:bf:72:da:08:dc:12:16:55:4b:84:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Aug 6 20:21:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6515b70779a50ce1607104f88e223f58f054b47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:02:93:3f:56:17:31:10:74:bd:3e:3e:95:
9a:cd:2b:f9:b6:36:48:32:f3:5d:5e:2e:71:f3:b1:
97:c8:84:ee:40:9f:23:22:04:b2:f3:50:f0:47:2c:
9a:8e:77:5d:02:8c:cb:b8:a4:a9:2a:df:d0:b2:e2:
9d:1b:ae:86:9f:fe:be:56:b5:62:24:5b:89:fa:73:
7a:18:c4:0b:7a:a9:81:28:f4:c0:ed:61:fc:cb:74:
06:93:91:6b:c5:f7:f4:d2:6e:d9:de:31:69:9e:05:
1b:38:13:bf:a9:d0:b4:d2:49:fb:71:fd:7c:20:94:
8a:60:01:50:2a:06:41:73:24:61:e7:50:79:74:ae:
b9:db:ad:f3:86:34:a2:6a:31:bc:18:40:89:65:e8:
36:cb:df:b7:20:7c:04:77:f6:e6:02:6e:98:ab:ff:
0c:39:9b:43:4a:0b:6d:01:70:ae:de:98:cc:e9:a8:
34:6d:84:2a:b5:ff:08:bd:b6:ff:74:7b:72:d4:59:
32:9b:a7:c2:8c:71:2d:b9:81:0b:81:6c:99:70:a7:
dd:c6:16:a5:7c:6b:46:d0:f9:cf:90:a2:34:04:ff:
dc:c4:43:8e:a6:d3:7b:e7:ad:fc:22:04:5d:ff:45:
ee:a3:ae:13:a3:d3:21:b4:5d:ce:a7:18:a4:a0:49:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:15:B7:07:79:A5:0C:E1:60:71:04:F8:8E:22:3F:58:F0:54:B4:7D
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/ZRW3B3mlDOFgcQT4jiI_WPBUtH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.66.0/23
45.128.176.0/22
45.132.252.0/24
91.217.80.0/24
94.142.136.0/21
103.82.103.0/24
185.5.248.0/22
185.58.204.0/22
185.87.48.0/22
185.105.116.0/23
185.117.152.0/22
185.125.216.0/22
185.125.229.0-185.125.231.255
185.200.188.0/24
193.124.176.0/20
193.168.224.0/24
194.67.192.0/19
195.47.250.0/24
IPv6:
2a0a:9300::/48
2a0a:9300:2::/48
2a0a:9300:d0::-2a0a:9300:d2:ffff:ffff:ffff:ffff:ffff
2a0a:9301::-2a0a:9301:2:ffff:ffff:ffff:ffff:ffff
2a0a:9302::/32
2a0b:7780::/29
2a0c:77c0::/32
2a0d:3880::/29
Signature Algorithm: sha256WithRSAEncryption
2d:a8:1c:9a:9f:7d:18:8a:26:4d:a9:60:6b:9f:b5:0c:fe:dd:
82:a9:87:ea:be:ac:c8:bd:33:56:1a:6c:4f:cc:d5:4b:a1:f6:
55:46:e5:81:f4:85:b1:ff:e0:0f:08:dc:ee:7a:00:96:0c:ad:
04:1e:64:e5:c5:ef:fd:10:50:f6:43:c8:ad:6b:5c:4c:13:42:
5a:64:40:88:e8:64:ed:97:62:75:54:a9:e2:f6:62:b4:31:aa:
3e:ce:20:ef:c5:63:04:a0:ae:71:c9:9e:e1:9c:21:e8:53:f7:
f8:51:17:23:53:67:84:4c:68:eb:e8:6b:4e:34:6e:af:b8:c9:
ad:1b:e2:e4:17:4e:2e:82:2b:f6:3d:73:7d:9d:e5:4d:2d:71:
ac:1c:f1:fd:47:14:ad:7b:91:7d:7e:86:2d:84:71:8b:d9:58:
14:65:ef:04:a7:7d:4f:46:77:c5:c2:48:fc:fc:d0:d8:e9:d1:
1b:49:1e:39:ed:d4:6f:2e:09:b7:af:b5:c9:ac:36:ab:03:c7:
37:31:51:59:7f:44:e0:63:be:46:a6:3c:09:eb:96:57:c4:bb:
c3:16:cf:96:f6:86:26:c2:41:e1:58:23:2a:39:60:d9:50:2b:
07:3e:ea:1c:62:df:63:87:87:d9:16:53:b9:30:05:6d:48:38:
41:5b:84:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 8 12:52:51 2024 by rpki-client on console-ams.rpki-client.org