Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ZA0vKInfzAuzCfuwchJI1WW6Lpk.roa
File: ZA0vKInfzAuzCfuwchJI1WW6Lpk.roa (raw, json)
Hash identifier: WLsQFVmAdaGJWk37BkYei/CI24oOC2MECQk+EQnDVzw=
Subject key identifier: 64:0D:2F:28:89:DF:CC:0B:B3:09:FB:B0:72:12:48:D5:65:BA:2E:99
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 01963E4808CB0089B78BD2BFB889FB6C55CF
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ZA0vKInfzAuzCfuwchJI1WW6Lpk.roa
Signing time: Wed 16 Apr 2025 11:07:10 +0000
ROA not before: Wed 16 Apr 2025 11:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 31.178.0.0/15 maxlen: 15
31.186.192.0/19 maxlen: 19
31.187.0.0/18 maxlen: 18
31.187.0.0/19 maxlen: 19
31.187.32.0/19 maxlen: 19
77.236.0.0/19 maxlen: 19
81.18.192.0/20 maxlen: 20
81.18.208.0/20 maxlen: 20
83.144.64.0/18 maxlen: 18
84.10.0.0/16 maxlen: 16
84.10.0.0/17 maxlen: 17
84.10.128.0/17 maxlen: 17
85.222.0.0/17 maxlen: 17
85.222.0.0/18 maxlen: 18
85.222.64.0/18 maxlen: 18
87.206.0.0/15 maxlen: 15
87.206.0.0/16 maxlen: 16
87.207.0.0/16 maxlen: 16
89.64.0.0/12 maxlen: 12
89.64.0.0/13 maxlen: 13
89.72.0.0/13 maxlen: 13
92.244.32.0/19 maxlen: 19
92.244.32.0/20 maxlen: 20
92.244.48.0/20 maxlen: 20
94.75.64.0/18 maxlen: 18
94.75.64.0/19 maxlen: 19
94.75.96.0/19 maxlen: 19
94.172.0.0/16 maxlen: 16
94.172.0.0/17 maxlen: 17
94.172.128.0/17 maxlen: 17
95.158.64.0/18 maxlen: 18
178.73.0.0/18 maxlen: 18
178.73.0.0/19 maxlen: 19
178.73.32.0/19 maxlen: 19
188.93.160.0/21 maxlen: 21
188.93.160.0/22 maxlen: 22
188.93.164.0/22 maxlen: 22
193.47.158.0/23 maxlen: 23
193.47.160.0/24 maxlen: 24
194.187.40.0/22 maxlen: 22
195.34.208.0/22 maxlen: 22
212.76.32.0/19 maxlen: 19
212.76.32.0/20 maxlen: 20
212.76.48.0/20 maxlen: 20
213.134.160.0/19 maxlen: 19
2001:4050::/32 maxlen: 32
2001:4050::/33 maxlen: 33
2001:4050:8000::/33 maxlen: 33
2a02:a300::/27 maxlen: 27
2a02:a300::/28 maxlen: 28
2a02:a310::/28 maxlen: 28
Validation: Failed, certificate revoked on Wed 16 Apr 2025 11:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:48:08:cb:00:89:b7:8b:d2:bf:b8:89:fb:6c:55:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Apr 16 11:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=640d2f2889dfcc0bb309fbb0721248d565ba2e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:ae:62:41:dc:68:0b:36:fc:53:ba:21:ed:
25:bc:b9:e7:03:85:b5:c6:62:19:1e:67:67:6a:ad:
ff:5a:4a:08:28:22:9a:70:a2:7a:71:f4:00:df:38:
42:a9:e3:7f:42:e3:91:c5:21:9f:26:e6:db:de:84:
de:fc:d3:2a:2e:17:45:28:c9:22:e5:fb:36:f9:a5:
14:1b:f9:24:92:bc:b5:2e:94:4e:d2:6e:fa:8c:79:
03:d2:29:9c:86:5a:6b:7c:be:e3:5f:a7:a8:c4:65:
37:ae:ba:a0:44:a6:0b:17:62:b1:a2:2c:d7:36:47:
be:c2:31:e6:a9:e8:44:5d:9d:fc:18:aa:82:72:94:
c1:a8:ab:e6:7e:45:f2:0f:e1:b6:4e:f6:ba:e8:44:
43:dd:1c:02:b7:75:c0:4c:b5:3e:0b:11:b3:be:03:
ea:7d:e1:03:9b:bd:7c:fc:01:79:16:7e:9b:35:4b:
bf:ce:db:d1:b4:83:e7:03:63:6d:8d:b9:78:3d:d5:
4d:36:0c:7f:26:80:6f:e4:03:8c:a9:df:b7:93:f5:
f6:ef:43:f8:e5:46:3d:00:db:31:33:a8:8c:37:38:
a1:91:db:d1:48:53:b6:c5:3a:26:b2:c2:f0:21:56:
76:d6:54:ac:3d:fd:33:22:3a:35:31:03:b7:20:87:
df:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0D:2F:28:89:DF:CC:0B:B3:09:FB:B0:72:12:48:D5:65:BA:2E:99
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/ZA0vKInfzAuzCfuwchJI1WW6Lpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.178.0.0/15
31.186.192.0/19
31.187.0.0/18
77.236.0.0/19
81.18.192.0/19
83.144.64.0/18
84.10.0.0/16
85.222.0.0/17
87.206.0.0/15
89.64.0.0/12
92.244.32.0/19
94.75.64.0/18
94.172.0.0/16
95.158.64.0/18
178.73.0.0/18
188.93.160.0/21
193.47.158.0-193.47.160.255
194.187.40.0/22
195.34.208.0/22
212.76.32.0/19
213.134.160.0/19
IPv6:
2001:4050::/32
2a02:a300::/27
Signature Algorithm: sha256WithRSAEncryption
1c:7d:bb:d6:81:ad:b5:94:2f:6d:a9:54:45:d8:49:08:1b:eb:
f4:ee:40:4f:cd:c5:2f:04:57:db:0a:b6:ce:ff:e1:13:19:78:
37:40:52:eb:51:6b:9b:11:be:fa:56:ab:37:db:4f:e9:93:12:
45:a7:b0:33:35:1c:e8:19:c1:75:16:cd:62:c2:4d:86:ce:92:
e0:75:53:a3:fb:6a:c6:74:43:cf:79:23:2f:15:53:de:b1:79:
24:3e:f2:44:11:7b:a9:10:99:94:8c:7d:35:7a:33:5d:96:3d:
9b:41:57:0d:cc:1e:6b:0e:2b:8a:58:32:b4:b4:72:b1:bc:f5:
7d:36:90:d2:32:8e:f6:a4:ec:30:c8:ed:46:b7:53:38:f3:2d:
5d:97:f6:fd:4b:20:7a:6f:dd:47:78:de:e2:eb:3f:3c:6a:c9:
8d:0c:43:09:30:16:6d:30:20:e5:cc:fb:d2:a9:a2:a0:5a:b2:
11:fa:a9:92:fe:b2:75:a6:58:2d:d9:09:0d:86:10:5a:6d:6c:
3e:2b:f3:ad:39:83:48:1f:39:a2:da:15:4a:a7:27:db:67:df:
a7:ad:2b:91:b8:64:82:b6:e0:a8:a1:de:42:24:bf:fd:ed:96:
52:45:38:2e:a3:ad:6b:b2:74:58:39:57:f4:27:25:ba:2b:a1:
c4:d0:c4:81
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZY+SAjLAIm3i9K/uIn7bFXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUwNDE2MTEwNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDBkMmYyODg5ZGZjYzBiYjMwOWZiYjA3MjEyNDhkNTY1YmEyZTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0auYkHcaAs2/FO6Ie0lvLnnA4W1
xmIZHmdnaq3/WkoIKCKacKJ6cfQA3zhCqeN/QuORxSGfJubb3oTe/NMqLhdFKMki
5fs2+aUUG/kkkry1LpRO0m76jHkD0imchlprfL7jX6eoxGU3rrqgRKYLF2KxoizX
Nke+wjHmqehEXZ38GKqCcpTBqKvmfkXyD+G2Tva66ERD3RwCt3XATLU+CxGzvgPq
feEDm718/AF5Fn6bNUu/ztvRtIPnA2Ntjbl4PdVNNgx/JoBv5AOMqd+3k/X270P4
5UY9ANsxM6iMNzihkdvRSFO2xTomssLwIVZ21lSsPf0zIjo1MQO3IIffYwIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFGQNLyiJ38wLswn7sHISSNVlui6ZMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvWkEwdktJbmZ6QXV6Q2Z1d2NoSkkxV1c2THBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBiAQCAAEwgYEDAwEf
sgMEBR+6wAMEBh+7AAMEBU3sAAMEBVESwAMEBlOQQAMDAFQKAwQHVd4AAwMBV84D
AwRZQAMEBVz0IAMEBl5LQAMDAF6sAwQGX55AAwQGskkAAwQDvF2gMAwDBAHBL54D
BADBL6ADBALCuygDBALDItADBAXUTCADBAXVhqAwFAQCAAIwDgMFACABQFADBQUq
AqMAMA0GCSqGSIb3DQEBCwUAA4IBAQAcfbvWga21lC9tqVRF2EkIG+v07kBPzcUv
BFfbCrbO/+ETGXg3QFLrUWubEb76Vqs320/pkxJFp7AzNRzoGcF1Fs1iwk2GzpLg
dVOj+2rGdEPPeSMvFVPesXkkPvJEEXupEJmUjH01ejNdlj2bQVcNzB5rDiuKWDK0
tHKxvPV9NpDSMo72pOwwyO1Gt1M48y1dl/b9SyB6b91HeN7i6z88asmNDEMJMBZt
MCDlzPvSqaKgWrIR+qmS/rJ1plgt2QkNhhBabWw+K/OtOYNIHzmi2hVKpyfbZ9+n
rSuRuGSCtuCood5CJL/97ZZSRTguo61rsnRYOVf0JyW6K6HE0MSB
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:10:35 2025 by rpki-client