Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcNCNkC-jKnk0bQTdLGGpAyY7Ec.roa
File: ZcNCNkC-jKnk0bQTdLGGpAyY7Ec.roa (raw, json)
Hash identifier: n/5VTXio0hPqMnLCOWUCMESqar2Ac8Vsx77ZPQxdy/c=
Subject key identifier: 65:C3:42:36:40:BE:8C:A9:E4:D1:B4:13:74:B1:86:A4:0C:98:EC:47
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188D56BFF339B192EC2DC183CDBD1627A1A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcNCNkC-jKnk0bQTdLGGpAyY7Ec.roa
Signing time: Mon 19 Jun 2023 20:50:04 +0000
ROA not before: Mon 19 Jun 2023 20:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 91.235.41.0/24 maxlen: 24
91.235.40.0/24 maxlen: 24
185.201.152.0/22 maxlen: 24
185.204.244.0/22 maxlen: 24
45.137.160.0/22 maxlen: 24
45.147.104.0/22 maxlen: 24
185.224.220.0/22 maxlen: 24
185.245.32.0/23 maxlen: 23
45.147.116.0/22 maxlen: 24
185.107.152.0/22 maxlen: 24
185.124.108.0/22 maxlen: 24
212.80.208.0/22 maxlen: 24
185.232.8.0/22 maxlen: 24
193.26.152.0/22 maxlen: 24
109.230.250.0/24 maxlen: 24
93.92.228.0/22 maxlen: 24
31.170.100.0/22 maxlen: 24
185.163.168.0/22 maxlen: 24
185.220.240.0/22 maxlen: 24
185.227.176.0/22 maxlen: 24
185.106.124.0/22 maxlen: 24
185.150.78.0/23 maxlen: 24
193.8.112.0/22 maxlen: 24
81.21.228.0/22 maxlen: 24
109.230.194.0/24 maxlen: 24
95.214.144.0/22 maxlen: 24
185.224.184.0/22 maxlen: 24
185.218.16.0/22 maxlen: 24
185.197.216.0/22 maxlen: 24
185.227.204.0/24 maxlen: 24
185.221.16.0/22 maxlen: 24
185.200.228.0/22 maxlen: 24
185.163.232.0/22 maxlen: 24
185.166.36.0/22 maxlen: 24
185.247.4.0/24 maxlen: 24
185.230.48.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
185.230.52.0/22 maxlen: 24
185.230.64.0/22 maxlen: 24
85.115.192.0/22 maxlen: 24
185.239.255.0/24 maxlen: 24
93.189.123.0/24 maxlen: 24
93.189.120.0/24 maxlen: 24
193.17.180.0/22 maxlen: 24
85.31.60.0/22 maxlen: 24
45.159.76.0/22 maxlen: 24
194.41.118.0/24 maxlen: 24
194.41.116.0/22 maxlen: 24
185.105.232.0/22 maxlen: 24
194.35.40.0/24 maxlen: 24
185.217.12.0/22 maxlen: 24
185.223.220.0/22 maxlen: 24
185.176.188.0/22 maxlen: 24
185.166.172.0/22 maxlen: 24
193.35.88.0/22 maxlen: 24
185.119.48.0/22 maxlen: 24
185.179.228.0/22 maxlen: 24
185.179.232.0/22 maxlen: 24
185.129.104.0/22 maxlen: 24
185.128.52.0/22 maxlen: 24
185.118.52.0/23 maxlen: 23
185.118.54.0/23 maxlen: 23
185.226.8.0/22 maxlen: 24
185.212.84.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
185.105.12.0/22 maxlen: 24
185.202.204.0/22 maxlen: 24
45.81.152.0/22 maxlen: 24
185.196.42.0/24 maxlen: 24
185.196.43.0/24 maxlen: 24
185.196.40.0/22 maxlen: 24
185.239.252.0/22 maxlen: 24
185.239.253.0/24 maxlen: 24
185.239.252.0/24 maxlen: 24
185.175.152.0/22 maxlen: 24
185.222.188.0/22 maxlen: 24
185.226.28.0/22 maxlen: 24
185.199.44.0/22 maxlen: 24
185.199.52.0/22 maxlen: 24
185.91.108.0/22 maxlen: 24
88.135.64.0/22 maxlen: 24
185.162.52.0/22 maxlen: 24
185.216.28.0/22 maxlen: 24
185.189.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Aug 2023 15:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d5:6b:ff:33:9b:19:2e:c2:dc:18:3c:db:d1:62:7a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 19 20:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c3423640be8ca9e4d1b41374b186a40c98ec47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:52:0a:f7:57:d6:72:79:96:47:a1:f5:a9:42:
6f:fb:59:c7:b1:0a:05:b6:56:50:4a:75:1a:59:62:
8e:8a:6e:8d:69:76:32:2a:56:1f:5c:b7:9f:4b:a2:
b5:b9:64:ab:0b:09:f7:c8:ab:5c:48:33:65:04:38:
9f:74:76:12:ab:42:37:63:f3:47:5d:7a:34:7b:d2:
9d:a7:7b:a3:a0:07:39:d4:d8:45:e9:17:13:7a:3f:
b2:14:ba:b2:30:b2:e3:6b:e7:78:7c:0d:c0:68:78:
9e:d3:36:c3:2a:42:72:8d:e2:3e:30:88:41:83:c8:
44:c8:03:0d:5d:a4:b8:64:65:9f:f3:78:5c:61:77:
13:e7:2a:c2:18:5c:bf:70:15:be:5d:b8:ea:fc:a9:
aa:68:87:32:f5:fa:bf:6c:4a:97:31:74:78:2d:f9:
5c:82:4a:12:0b:35:d7:53:84:fe:e9:c9:e1:58:93:
dd:3a:1e:8c:f0:fb:0e:4c:9e:9b:52:17:6b:d2:3f:
f9:d9:f1:df:e7:52:67:36:7f:ce:6b:59:5c:1d:92:
6e:9a:75:45:6d:67:29:1c:18:a5:82:a1:4f:50:7f:
19:f3:dc:44:4c:cb:6d:cd:63:59:66:a1:5b:44:fc:
cc:69:83:0b:67:bd:9b:76:42:4b:e4:4e:cf:2d:f0:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C3:42:36:40:BE:8C:A9:E4:D1:B4:13:74:B1:86:A4:0C:98:EC:47
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ZcNCNkC-jKnk0bQTdLGGpAyY7Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.100.0/22
45.81.152.0/22
45.137.160.0/22
45.147.104.0/22
45.147.116.0/22
45.159.76.0/22
81.21.228.0/22
85.31.60.0/22
85.115.192.0/22
88.135.64.0/22
91.235.40.0/23
93.92.228.0/22
93.189.120.0/24
93.189.123.0/24
95.214.144.0/22
109.230.194.0/24
109.230.250.0/24
185.91.108.0/22
185.105.12.0/22
185.105.232.0/22
185.106.124.0/22
185.107.152.0/22
185.118.52.0/22
185.119.48.0/22
185.124.108.0/22
185.128.52.0/22
185.129.104.0/22
185.150.78.0/23
185.162.52.0/22
185.163.168.0/22
185.163.232.0/22
185.166.36.0/22
185.166.172.0/22
185.175.152.0/22
185.176.188.0/22
185.179.228.0-185.179.235.255
185.189.64.0/22
185.196.40.0/22
185.197.216.0/22
185.199.44.0/22
185.199.52.0/22
185.200.228.0/22
185.201.152.0/22
185.202.204.0/22
185.204.244.0/22
185.212.84.0/22
185.216.28.0/22
185.217.12.0/22
185.218.16.0/22
185.220.240.0/22
185.221.16.0/22
185.222.188.0/22
185.223.220.0/22
185.224.184.0/22
185.224.220.0/22
185.226.8.0/22
185.226.28.0/22
185.227.176.0/22
185.227.204.0/24
185.230.48.0/21
185.230.64.0/22
185.232.8.0/22
185.239.252.0/22
185.245.32.0/23
185.247.4.0/24
193.8.112.0/22
193.17.180.0/22
193.26.152.0/22
193.35.88.0/22
194.35.40.0/24
194.38.56.0/22
194.41.116.0/22
212.80.208.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
70:f2:39:da:5f:2f:b3:b2:1e:61:2e:d9:41:cb:0a:71:68:7e:
eb:aa:52:ce:cc:98:00:0b:c5:92:3b:87:f6:fe:f5:1e:2f:01:
20:9f:6e:cf:80:bd:85:0e:81:0b:ba:83:fd:8c:75:ab:10:7b:
8e:80:0a:92:2e:e7:35:63:5c:e7:50:99:9f:d0:e6:50:08:68:
b2:1f:e4:b5:8b:fb:ea:41:91:bc:31:d7:f3:72:5a:28:ee:a0:
fa:d1:23:ca:71:5c:05:9a:a9:1c:58:05:4d:a4:b4:05:37:9d:
b1:8a:6c:4b:a6:55:22:35:7a:fa:0d:b9:51:56:7e:95:1c:3d:
b3:f3:e4:58:cb:1c:20:00:5e:62:ab:82:b9:37:da:1d:c9:13:
55:b6:91:76:1c:31:03:ec:84:f6:dc:08:e1:01:bd:c3:6c:30:
44:84:0e:88:73:cf:5c:0d:53:92:ec:90:c2:f9:6a:7b:40:92:
fb:fc:d9:5d:e1:1a:75:d6:06:2e:b2:29:bc:98:0d:1d:aa:83:
79:e1:2e:d2:e1:d1:96:86:1a:de:0b:57:c8:92:1f:ab:2e:97:
cf:19:42:39:99:e3:f1:4b:a9:06:5b:71:d7:89:9a:69:ca:99:
00:fe:ac:c4:ca:7b:5d:d6:9d:7b:d3:f9:2d:bc:3d:2a:02:ad:
6c:fc:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:27 2024 by rpki-client on console-ams.rpki-client.org