Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-mXHBDDPlSVYdetYRTh_OuyNblY.roa
File: 1-mXHBDDPlSVYdetYRTh_OuyNblY.roa (raw, json)
Hash identifier: 8Pd1UtMZv7YB0obFAa4iUO0e5JyAm3m4LduysGqIYas=
Subject key identifier: FA:65:C7:04:30:CF:95:25:58:75:EB:58:45:38:7F:3A:EC:8D:6E:56
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018F0430A8F8DE48CEB3E557844157D711EF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-mXHBDDPlSVYdetYRTh_OuyNblY.roa
Signing time: Mon 22 Apr 2024 05:04:08 +0000
ROA not before: Mon 22 Apr 2024 05:04:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:401::/32 maxlen: 32
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3505:d000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/29 maxlen: 36
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3804:e000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3805::/36 maxlen: 36
2a09:3805:1000::/36 maxlen: 36
2a09:3805:2000::/36 maxlen: 36
2a09:3805:3000::/36 maxlen: 36
2a09:3805:4000::/36 maxlen: 36
2a09:3805:5000::/36 maxlen: 36
2a09:3805:6000::/36 maxlen: 36
2a09:3805:7000::/36 maxlen: 36
2a09:3805:8000::/36 maxlen: 36
2a09:3805:9000::/36 maxlen: 36
2a09:3805:a000::/36 maxlen: 36
2a09:3805:b000::/36 maxlen: 36
2a09:3805:c000::/36 maxlen: 36
2a09:3805:d000::/36 maxlen: 36
2a09:3805:e000::/36 maxlen: 36
2a09:3805:f000::/36 maxlen: 36
2a09:3806::/32 maxlen: 32
2a09:3806::/36 maxlen: 36
2a09:3806:1000::/36 maxlen: 36
2a09:3806:2000::/36 maxlen: 36
2a09:3806:3000::/36 maxlen: 36
2a09:3806:4000::/36 maxlen: 36
2a09:3806:5000::/36 maxlen: 36
2a09:3806:6000::/36 maxlen: 36
2a09:3806:7000::/36 maxlen: 36
2a09:3806:8000::/36 maxlen: 36
2a09:3806:9000::/36 maxlen: 36
2a09:3806:a000::/36 maxlen: 36
2a09:3806:b000::/36 maxlen: 36
2a09:3806:c000::/36 maxlen: 36
2a09:3806:d000::/36 maxlen: 36
2a09:3806:e000::/36 maxlen: 36
2a09:3806:f000::/36 maxlen: 36
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:6f01::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:f200::/29 maxlen: 36
2a0b:b0c0::/32 maxlen: 32
2a0b:b0c1::/32 maxlen: 32
2a0b:b0c2::/32 maxlen: 32
2a0b:b0c3::/32 maxlen: 32
2a0b:b0c4::/32 maxlen: 32
2a0b:b0c5::/32 maxlen: 32
2a0b:b0c6::/32 maxlen: 32
2a0b:b0c7::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:2107::/36 maxlen: 36
2a0c:2107:6000::/36 maxlen: 36
2a0c:e8c0::/29 maxlen: 29
2a0d:2e40::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:9880::/29 maxlen: 32
2a0f:c580::/29 maxlen: 36
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:c80::/29 maxlen: 36
2a11:c80:1000::/36 maxlen: 36
2a11:c80:2000::/36 maxlen: 36
2a11:c80:3000::/36 maxlen: 36
2a11:c80:4000::/36 maxlen: 36
2a11:c80:5000::/36 maxlen: 36
2a11:c80:6000::/36 maxlen: 36
2a11:c80:b000::/36 maxlen: 36
2a11:c80:c000::/36 maxlen: 36
2a11:c80:d000::/36 maxlen: 36
2a11:c81::/32 maxlen: 32
2a11:c83::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a11:af06:a000::/36 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a12:7c00:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 24 Apr 2024 07:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:30:a8:f8:de:48:ce:b3:e5:57:84:41:57:d7:11:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Apr 22 05:04:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa65c70430cf95255875eb5845387f3aec8d6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:6d:0d:e3:29:f5:30:a1:a2:61:8f:3e:0c:
0f:2c:32:99:71:ac:7c:86:12:20:8b:10:14:e0:e2:
42:e2:f3:8c:6a:37:51:73:28:9a:b8:95:28:b4:0b:
5b:ec:19:11:1f:1d:15:9a:45:66:89:eb:e5:e7:30:
c9:70:29:00:05:9a:a1:39:ea:6f:6f:be:cd:45:c1:
4b:2a:aa:4b:3a:24:a6:a0:66:cb:6e:c2:78:a1:f7:
1f:1b:ff:5e:f6:46:ed:c6:0b:a3:40:31:af:87:52:
38:99:f1:f9:26:8e:42:89:3f:07:6a:68:0d:bd:6c:
38:c4:86:6f:52:ad:97:b5:07:40:f5:a2:d1:5e:59:
fe:5b:cf:d2:38:e4:63:7d:c9:ed:02:38:a8:51:ee:
45:ff:02:19:a7:ab:7d:1e:2a:0c:5f:f6:4e:a4:dd:
43:6f:c0:71:1d:55:77:55:65:2e:2b:f5:4f:84:62:
1b:a7:36:4c:48:98:4d:3c:21:a0:e0:3b:cf:93:5c:
4f:bb:8e:d0:37:b8:fe:a6:31:ff:47:6d:07:65:e5:
65:46:b0:ac:94:8d:39:88:6b:ba:12:01:07:22:48:
ea:cf:16:bc:aa:73:4a:ba:d8:18:95:d2:3c:0e:13:
66:6d:d7:9b:db:f6:6a:0c:e3:43:c1:f5:0e:f5:53:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:65:C7:04:30:CF:95:25:58:75:EB:58:45:38:7F:3A:EC:8D:6E:56
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-mXHBDDPlSVYdetYRTh_OuyNblY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:401::/32
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3505:d000::/36
2a09:3506::/32
2a09:3800::/29
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/31
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0a:f200::/29
2a0b:b0c0::/29
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2107::/36
2a0c:2107:6000::/36
2a0c:e8c0::/29
2a0d:2e40::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:9880::/29
2a0f:c580::/29
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:c80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a11:af06:a000::/36
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
08:d4:65:71:79:0e:0c:e3:00:2c:12:63:a6:7d:5f:b7:f5:91:
d6:06:cf:f6:f7:0a:83:c4:ab:12:f5:6e:a1:45:bb:50:c1:f2:
54:66:08:2d:1a:8a:2e:82:0e:cd:87:b1:9d:c2:c9:9e:94:ae:
c6:ea:d7:eb:78:62:16:75:61:a2:d1:ca:1d:f8:b4:7a:fe:ca:
f7:03:ef:4b:4e:2a:15:7d:96:76:27:5d:aa:8a:04:0f:88:0c:
c5:89:32:7c:69:ac:cd:e3:ab:91:5c:b7:a4:2b:36:3e:e9:5f:
bb:3c:84:21:78:ce:53:74:9b:ed:d7:2a:23:e7:20:19:ac:9f:
23:8f:f4:08:72:ef:60:53:67:6a:fa:ec:fe:ef:2c:5c:00:fb:
88:08:c9:e8:1d:6b:96:b7:5f:7c:97:23:ca:89:c1:b6:48:c9:
ef:5e:1f:5a:56:fb:a7:2f:59:71:d1:c4:8d:8b:17:cf:bd:b9:
1d:2e:d7:30:e6:1d:1a:b8:a2:ce:9d:da:7d:63:59:5c:bb:88:
96:ac:df:5a:84:d0:d8:cd:d9:08:97:c5:47:47:58:7b:12:d7:
7b:cf:bb:40:0e:ef:31:3d:78:4f:85:6b:61:ef:85:65:31:b9:
51:e9:e8:32:ec:4d:72:27:54:dd:31:0d:6b:80:67:28:03:53:
64:d9:1f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org