Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zMvKhir6u3PsSzvEzVpUG2qsyrA.roa
File: zMvKhir6u3PsSzvEzVpUG2qsyrA.roa (raw, json)
Hash identifier: 0I2wb349I40ZfUDoVO2GrcL3rRMG176LdGcufgt4mYk=
Subject key identifier: CC:CB:CA:86:2A:FA:BB:73:EC:4B:3B:C4:CD:5A:54:1B:6A:AC:CA:B0
Certificate issuer: /CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Certificate serial: 018F7784D8299701F9CDFF24814E10EB99C6
Authority key identifier: F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zMvKhir6u3PsSzvEzVpUG2qsyrA.roa
Signing time: Tue 14 May 2024 14:32:25 +0000
ROA not before: Tue 14 May 2024 14:32:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 91.123.0.0/24 maxlen: 24
91.123.1.0/24 maxlen: 24
91.123.2.0/24 maxlen: 24
91.123.3.0/24 maxlen: 24
91.123.4.0/24 maxlen: 24
91.123.5.0/24 maxlen: 24
91.123.6.0/24 maxlen: 24
91.123.7.0/24 maxlen: 24
190.106.160.0/24 maxlen: 24
190.106.161.0/24 maxlen: 24
190.106.162.0/24 maxlen: 24
190.106.163.0/24 maxlen: 24
190.106.164.0/24 maxlen: 24
190.106.165.0/24 maxlen: 24
190.106.166.0/24 maxlen: 24
190.106.167.0/24 maxlen: 24
190.106.168.0/24 maxlen: 24
190.106.169.0/24 maxlen: 24
190.106.170.0/24 maxlen: 24
190.106.171.0/24 maxlen: 24
190.106.172.0/24 maxlen: 24
190.106.173.0/24 maxlen: 24
190.106.174.0/24 maxlen: 24
190.106.175.0/24 maxlen: 24
190.106.176.0/24 maxlen: 24
190.106.177.0/24 maxlen: 24
190.106.178.0/24 maxlen: 24
190.106.179.0/24 maxlen: 24
190.106.180.0/24 maxlen: 24
190.106.181.0/24 maxlen: 24
190.106.182.0/24 maxlen: 24
190.106.183.0/24 maxlen: 24
190.106.184.0/24 maxlen: 24
190.106.185.0/24 maxlen: 24
190.106.186.0/24 maxlen: 24
190.106.187.0/24 maxlen: 24
190.106.188.0/24 maxlen: 24
190.106.189.0/24 maxlen: 24
190.106.190.0/24 maxlen: 24
190.106.191.0/24 maxlen: 24
206.195.128.0/24 maxlen: 24
206.195.129.0/24 maxlen: 24
206.195.130.0/24 maxlen: 24
206.195.131.0/24 maxlen: 24
206.195.132.0/24 maxlen: 24
206.195.133.0/24 maxlen: 24
206.195.134.0/24 maxlen: 24
206.195.135.0/24 maxlen: 24
206.195.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 06:39:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:77:84:d8:29:97:01:f9:cd:ff:24:81:4e:10:eb:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cc7a447482e57b0604babb82a52409cde3b36d
Validity
Not Before: May 14 14:32:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cccbca862afabb73ec4b3bc4cd5a541b6aaccab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:4f:0b:f1:7f:be:21:e4:b2:1a:03:5a:41:
87:16:2a:3b:da:56:65:16:79:19:e1:bf:34:b4:04:
10:6c:6e:1b:b3:f8:e4:0c:77:63:19:2e:f7:2f:68:
b4:a0:09:55:ee:1d:58:dc:65:b2:83:aa:64:cc:18:
30:1d:b7:93:fc:9e:91:f5:2c:f7:e7:88:f9:6d:3c:
ec:ce:f8:1a:55:6e:32:c5:b0:52:ef:68:b7:2b:76:
ce:92:5d:35:9b:04:3c:d5:1c:7c:b8:8e:12:7e:82:
0d:b1:82:99:a2:86:18:a6:e0:aa:49:f8:e6:4f:22:
21:77:d0:42:b0:80:bb:48:e1:77:51:0d:1e:6f:f3:
4a:8f:a3:65:c8:b2:df:93:54:0e:5c:29:6c:f6:6c:
28:81:c8:ce:23:e4:39:87:0e:8c:ee:ea:a2:9a:d8:
2f:a3:e8:45:c4:c9:f1:1d:a5:c6:a2:f4:b0:7c:69:
46:5c:8e:06:96:dc:56:89:f5:a9:56:29:2b:ef:68:
ad:4e:d0:92:32:65:a4:51:f2:f8:94:8a:23:e4:e8:
9f:b3:50:e5:12:2d:a5:b9:96:db:d9:a3:29:17:da:
56:bd:5c:46:80:25:50:39:a6:30:db:23:14:4a:63:
80:07:bf:f2:ce:6f:77:4a:e4:ff:b1:a7:9e:dc:db:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CB:CA:86:2A:FA:BB:73:EC:4B:3B:C4:CD:5A:54:1B:6A:AC:CA:B0
X509v3 Authority Key Identifier:
keyid:F0:CC:7A:44:74:82:E5:7B:06:04:BA:BB:82:A5:24:09:CD:E3:B3:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Mx6RHSC5XsGBLq7gqUkCc3js20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/zMvKhir6u3PsSzvEzVpUG2qsyrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0e58dc-7c90-49d7-8855-fa32d2d52968/1/8Mx6RHSC5XsGBLq7gqUkCc3js20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.123.0.0/21
190.106.160.0/19
206.195.128.0-206.195.136.255
Signature Algorithm: sha256WithRSAEncryption
2e:8b:1f:90:58:6b:aa:9b:ec:92:70:14:b3:ae:61:69:3b:55:
59:a5:14:c5:32:7f:2f:ef:e4:a7:57:f7:91:f1:ca:c6:de:0b:
65:75:96:0b:6b:54:e8:ee:91:20:28:1f:ec:af:63:b0:65:7c:
0b:01:3e:c6:db:48:4d:ea:5f:0b:fa:c2:6f:8c:c2:33:56:2b:
f8:1d:16:54:91:5c:2c:1b:41:b1:93:86:5e:67:4c:3b:76:3d:
51:e7:84:23:8b:56:f6:80:ed:92:a3:b7:bd:5d:8a:a5:a8:db:
81:38:ce:89:3a:c4:d3:ae:55:2a:6e:af:db:e3:17:8f:ea:01:
86:36:c5:c0:0e:2e:5b:a5:e4:c8:d9:a7:bf:23:13:35:34:b8:
b8:28:02:60:b2:81:28:2d:fc:cf:12:18:19:42:e3:f5:d2:3c:
05:6f:6a:48:e5:7f:7d:6b:f7:91:89:c5:cc:6a:fd:a6:c1:43:
2d:f8:88:f7:30:1a:65:32:90:a8:42:4d:8f:19:77:40:13:27:
67:eb:a6:f2:73:bf:bc:cf:60:3e:11:7f:5e:80:ae:8a:a2:8c:
18:5f:5d:f5:d6:a6:fa:fb:2e:61:18:45:df:80:8b:c8:53:83:
d5:75:0a:0a:7f:ec:40:8a:75:5f:64:43:f5:98:03:36:ad:2c:
07:33:76:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:16:16 2025 by rpki-client