Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ZpAffIyS3KSZ8fZo1QB2oA9J_v4.roa
File: ZpAffIyS3KSZ8fZo1QB2oA9J_v4.roa (raw, json)
Hash identifier: bxOdmZ4bGU1qejGKGX+pUJMNTYx+y8dmGqUJchegPfA=
Subject key identifier: 66:90:1F:7C:8C:92:DC:A4:99:F1:F6:68:D5:00:76:A0:0F:49:FE:FE
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 018CC5005E73847AB9131202F1A7E55581C5
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ZpAffIyS3KSZ8fZo1QB2oA9J_v4.roa
Signing time: Mon 01 Jan 2024 12:29:44 +0000
ROA not before: Mon 01 Jan 2024 12:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12302
IP address blocks: 81.12.216.0/21 maxlen: 21
81.12.224.0/21 maxlen: 21
81.12.231.0/24 maxlen: 24
81.12.230.0/24 maxlen: 24
81.12.229.0/24 maxlen: 24
81.12.228.0/24 maxlen: 24
81.12.232.0/21 maxlen: 21
81.12.245.0/24 maxlen: 24
81.12.243.0/24 maxlen: 24
81.12.242.0/24 maxlen: 24
81.12.240.0/21 maxlen: 21
81.12.246.0/24 maxlen: 24
81.12.248.0/21 maxlen: 21
81.12.247.0/24 maxlen: 24
81.12.160.0/21 maxlen: 21
81.12.168.0/21 maxlen: 21
81.12.176.0/21 maxlen: 21
81.12.184.0/21 maxlen: 21
81.12.192.0/24 maxlen: 24
81.12.192.0/21 maxlen: 21
81.12.195.0/24 maxlen: 24
81.12.199.0/24 maxlen: 24
81.12.200.0/21 maxlen: 21
81.12.200.0/23 maxlen: 23
81.12.208.0/21 maxlen: 21
136.255.224.0/20 maxlen: 20
136.255.251.0/24 maxlen: 24
81.12.128.0/17 maxlen: 17
81.12.132.0/23 maxlen: 23
81.12.130.0/24 maxlen: 24
81.12.128.0/23 maxlen: 23
136.255.0.0/16 maxlen: 24
81.12.128.0/21 maxlen: 21
81.12.136.0/21 maxlen: 21
81.12.134.0/24 maxlen: 24
81.12.144.0/21 maxlen: 21
81.12.152.0/21 maxlen: 21
81.12.153.0/24 maxlen: 24
81.12.159.0/24 maxlen: 24
213.233.123.0/24 maxlen: 24
213.233.122.0/24 maxlen: 24
213.233.121.0/24 maxlen: 24
213.233.120.0/24 maxlen: 24
213.233.119.0/24 maxlen: 24
213.233.125.0/24 maxlen: 24
213.233.124.0/24 maxlen: 24
213.233.127.0/24 maxlen: 24
213.233.126.0/24 maxlen: 24
165.78.160.0/19 maxlen: 19
213.233.67.0/24 maxlen: 24
213.233.66.0/24 maxlen: 24
213.233.65.0/24 maxlen: 24
213.233.71.0/24 maxlen: 24
213.233.70.0/24 maxlen: 24
213.233.69.0/24 maxlen: 24
213.233.68.0/24 maxlen: 24
213.233.74.0/24 maxlen: 24
213.233.73.0/24 maxlen: 24
213.233.72.0/24 maxlen: 24
213.233.78.0/24 maxlen: 24
213.233.77.0/24 maxlen: 24
213.233.76.0/24 maxlen: 24
213.233.75.0/24 maxlen: 24
213.233.81.0/24 maxlen: 24
213.233.80.0/24 maxlen: 24
213.233.79.0/24 maxlen: 24
213.233.85.0/24 maxlen: 24
165.78.96.0/19 maxlen: 19
213.233.84.0/24 maxlen: 24
213.233.83.0/24 maxlen: 24
213.233.82.0/24 maxlen: 24
213.233.88.0/24 maxlen: 24
213.233.87.0/24 maxlen: 24
213.233.86.0/24 maxlen: 24
213.233.91.0/24 maxlen: 24
213.233.90.0/24 maxlen: 24
213.233.89.0/24 maxlen: 24
213.233.95.0/24 maxlen: 24
213.233.94.0/24 maxlen: 24
213.233.93.0/24 maxlen: 24
213.233.92.0/24 maxlen: 24
213.233.98.0/24 maxlen: 24
213.233.97.0/24 maxlen: 24
213.233.96.0/24 maxlen: 24
213.233.102.0/24 maxlen: 24
213.233.101.0/24 maxlen: 24
213.233.100.0/24 maxlen: 24
213.233.99.0/24 maxlen: 24
213.233.105.0/24 maxlen: 24
213.233.104.0/24 maxlen: 24
213.233.103.0/24 maxlen: 24
213.233.109.0/24 maxlen: 24
213.233.108.0/24 maxlen: 24
213.233.107.0/24 maxlen: 24
213.233.106.0/24 maxlen: 24
213.233.112.0/24 maxlen: 24
213.233.111.0/24 maxlen: 24
213.233.110.0/24 maxlen: 24
213.233.118.0/24 maxlen: 24
213.233.117.0/24 maxlen: 24
213.233.116.0/24 maxlen: 24
165.78.128.0/21 maxlen: 21
165.78.128.0/19 maxlen: 19
213.233.115.0/24 maxlen: 24
213.233.114.0/24 maxlen: 24
213.233.113.0/24 maxlen: 24
165.78.192.0/21 maxlen: 21
165.78.192.0/19 maxlen: 19
165.78.224.0/19 maxlen: 19
46.97.232.0/21 maxlen: 21
46.97.240.0/21 maxlen: 21
46.97.248.0/21 maxlen: 21
46.97.176.0/21 maxlen: 21
46.97.184.0/21 maxlen: 21
46.97.192.0/21 maxlen: 21
46.97.200.0/21 maxlen: 21
46.97.208.0/21 maxlen: 21
46.97.216.0/21 maxlen: 21
46.97.224.0/21 maxlen: 21
217.10.192.0/24 maxlen: 24
217.10.193.0/24 maxlen: 24
217.10.199.0/24 maxlen: 24
217.10.198.0/24 maxlen: 24
217.10.197.0/24 maxlen: 24
217.10.196.0/24 maxlen: 24
217.10.195.0/24 maxlen: 24
165.78.32.0/19 maxlen: 19
217.10.194.0/24 maxlen: 24
217.10.200.0/24 maxlen: 24
217.10.206.0/24 maxlen: 24
217.10.205.0/24 maxlen: 24
217.10.204.0/24 maxlen: 24
217.10.203.0/24 maxlen: 24
217.10.202.0/24 maxlen: 24
217.10.201.0/24 maxlen: 24
217.10.207.0/24 maxlen: 24
217.10.213.0/24 maxlen: 24
217.10.212.0/24 maxlen: 24
217.10.211.0/24 maxlen: 24
217.10.210.0/24 maxlen: 24
217.10.209.0/24 maxlen: 24
217.10.208.0/24 maxlen: 24
217.10.214.0/24 maxlen: 24
217.10.219.0/24 maxlen: 24
217.10.218.0/24 maxlen: 24
217.10.217.0/24 maxlen: 24
217.10.216.0/24 maxlen: 24
217.10.215.0/24 maxlen: 24
217.10.221.0/24 maxlen: 24
217.10.220.0/24 maxlen: 24
165.78.64.0/21 maxlen: 21
165.78.64.0/19 maxlen: 19
217.10.223.0/24 maxlen: 24
217.10.222.0/24 maxlen: 24
213.233.64.0/24 maxlen: 24
165.78.0.0/21 maxlen: 21
165.78.0.0/19 maxlen: 19
165.78.0.0/16 maxlen: 16
46.97.16.0/21 maxlen: 21
46.97.24.0/21 maxlen: 21
46.97.32.0/21 maxlen: 21
46.97.40.0/21 maxlen: 21
46.97.48.0/21 maxlen: 21
46.97.56.0/21 maxlen: 21
46.97.64.0/21 maxlen: 21
46.97.0.0/21 maxlen: 21
46.97.8.0/21 maxlen: 21
46.97.0.0/16 maxlen: 16
46.97.120.0/21 maxlen: 21
46.97.128.0/24 maxlen: 24
46.97.128.0/21 maxlen: 21
46.97.136.0/21 maxlen: 21
46.97.144.0/21 maxlen: 21
46.97.152.0/24 maxlen: 24
46.97.152.0/21 maxlen: 21
46.97.153.0/24 maxlen: 24
46.97.156.0/24 maxlen: 24
46.97.155.0/24 maxlen: 24
46.97.160.0/21 maxlen: 21
46.97.168.0/21 maxlen: 21
46.97.72.0/21 maxlen: 21
46.97.80.0/21 maxlen: 21
46.97.88.0/21 maxlen: 21
46.97.96.0/21 maxlen: 21
46.97.104.0/21 maxlen: 21
46.97.104.0/24 maxlen: 24
46.97.112.0/21 maxlen: 21
Validation: Failed, certificate revoked on Wed 17 Apr 2024 11:22:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:5e:73:84:7a:b9:13:12:02:f1:a7:e5:55:81:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jan 1 12:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66901f7c8c92dca499f1f668d50076a00f49fefe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:05:e1:f0:ef:6f:41:22:43:4c:12:43:3c:37:
a2:6d:5a:37:89:0d:71:2e:e6:1a:25:ef:53:ee:c3:
eb:e2:60:d4:54:4a:4b:31:1f:18:31:c7:8d:ff:fa:
8d:37:33:4d:37:56:61:38:e9:51:9b:62:5b:90:5f:
52:67:b3:94:01:c6:bf:03:6e:d7:1b:26:6f:48:f1:
4f:17:17:85:c9:1a:e6:d3:a7:64:4b:2e:db:3b:4b:
2f:9f:86:b3:5c:c8:c8:fa:a5:ee:9e:8a:4c:44:fd:
13:4f:a4:b8:f0:dd:73:ae:a7:62:0e:a8:25:77:7a:
6a:05:28:e1:97:77:2f:0d:c0:b1:0a:35:29:8a:01:
f2:14:f9:de:e4:02:3e:eb:86:c4:75:de:41:f0:01:
d1:f0:6c:b8:a3:7b:17:20:64:9e:cc:0e:46:39:5e:
fb:90:eb:60:0b:d7:9c:07:d2:48:42:a3:14:e1:e1:
01:71:ff:25:f4:b4:00:95:ba:35:70:4c:44:42:ec:
7c:85:71:80:5b:3f:03:7a:53:64:83:09:d1:c1:95:
d4:fd:56:3f:72:17:5c:8a:b0:dc:17:bb:45:a6:de:
09:64:40:7f:57:e0:3f:56:43:20:b2:59:f3:e1:57:
96:b0:67:b5:a6:c3:c1:c5:39:a5:ac:e5:47:a2:a9:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:90:1F:7C:8C:92:DC:A4:99:F1:F6:68:D5:00:76:A0:0F:49:FE:FE
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/ZpAffIyS3KSZ8fZo1QB2oA9J_v4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.97.0.0/16
81.12.128.0/17
136.255.0.0/16
165.78.0.0/16
213.233.64.0/18
217.10.192.0/19
Signature Algorithm: sha256WithRSAEncryption
17:43:16:ae:70:9b:26:d0:82:3b:f5:f3:7c:a0:0f:67:de:f1:
80:d8:ef:75:46:02:f5:b5:ce:92:e2:83:dc:e0:09:ed:14:e8:
34:98:92:7e:88:f0:9f:02:69:23:37:22:7f:44:5c:54:fa:e0:
9d:9b:a5:04:b6:b7:6d:ed:1b:ae:d4:c4:c3:0f:a8:cc:eb:93:
09:7b:01:cb:89:7c:75:91:5e:17:1e:f0:32:b2:55:7b:6a:50:
5f:c0:01:45:48:71:3b:48:a6:e8:af:bd:39:f2:94:bd:f0:6e:
cc:a1:b9:58:0c:c4:9e:94:9a:24:3c:52:6d:dd:5c:36:ea:f6:
ba:af:d9:3c:4d:7e:3c:c5:1b:f2:8d:5f:d1:55:18:e1:59:a3:
a1:26:b9:88:73:38:49:01:97:ca:4b:b7:6f:73:57:5a:71:cd:
c4:2c:37:e7:4e:fb:4f:b5:f5:98:37:7f:79:6a:da:21:9b:11:
4a:69:35:51:86:f2:d4:9e:a9:b5:a9:a9:76:de:5f:d1:76:c7:
35:b5:06:ba:ea:7e:b8:47:4f:c1:48:89:37:f2:ff:8b:ee:84:
1f:cf:28:58:88:56:68:ca:6e:79:ab:d6:10:00:e4:1b:62:43:
20:36:42:c9:2a:45:6f:bf:40:2d:e2:fe:72:e0:92:f8:dc:13:
a5:b1:2a:ae
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzFAF5zhHq5ExIC8aflVYHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjQwMTAxMTIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjkwMWY3YzhjOTJkY2E0OTlmMWY2NjhkNTAwNzZhMDBmNDlmZWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAXh8O9vQSJDTBJDPDeibVo3iQ1x
LuYaJe9T7sPr4mDUVEpLMR8YMceN//qNNzNNN1ZhOOlRm2JbkF9SZ7OUAca/A27X
GyZvSPFPFxeFyRrm06dkSy7bO0svn4azXMjI+qXunopMRP0TT6S48N1zrqdiDqgl
d3pqBSjhl3cvDcCxCjUpigHyFPne5AI+64bEdd5B8AHR8Gy4o3sXIGSezA5GOV77
kOtgC9ecB9JIQqMU4eEBcf8l9LQAlbo1cExEQux8hXGAWz8DelNkgwnRwZXU/VY/
chdcirDcF7tFpt4JZEB/V+A/VkMgslnz4VeWsGe1psPBxTmlrOVHoqkKpwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGaQH3yMktykmfH2aNUAdqAPSf7+MB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvWnBBZmZJeVMzS1NaOGZabzFRQjJvQTlKX3Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAnBAIAATAhAwMALmEDBAdR
DIADAwCI/wMDAKVOAwQG1elAAwQF2QrAMA0GCSqGSIb3DQEBCwUAA4IBAQAXQxau
cJsm0II79fN8oA9n3vGA2O91RgL1tc6S4oPc4AntFOg0mJJ+iPCfAmkjNyJ/RFxU
+uCdm6UEtrdt7Ruu1MTDD6jM65MJewHLiXx1kV4XHvAyslV7alBfwAFFSHE7SKbo
r7058pS98G7MoblYDMSelJokPFJt3Vw26va6r9k8TX48xRvyjV/RVRjhWaOhJrmI
czhJAZfKS7dvc1dacc3ELDfnTvtPtfWYN395atohmxFKaTVRhvLUnqm1qal23l/R
dsc1tQa66n64R0/BSIk38v+L7oQfzyhYiFZoym55q9YQAOQbYkMgNkLJKkVvv0At
4v5y4JL43BOlsSqu
-----END CERTIFICATE-----
Generated at Wed Apr 17 15:04:51 2024 by rpki-client on console-ams.rpki-client.org