Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-xPeWsQVhvlmVC_tG9v0gXOvP-E.roa
File: 1-xPeWsQVhvlmVC_tG9v0gXOvP-E.roa (raw, json)
Hash identifier: EqnEGLaPfqtBPaaqoiym2boKtclQ9AKIKW/eZEXig0w=
Subject key identifier: FB:13:DE:5A:C4:15:86:F9:66:54:2F:ED:1B:DB:F4:81:73:AF:3F:E1
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018B5C799DD393AF89B69B4AA3526004BF19
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-xPeWsQVhvlmVC_tG9v0gXOvP-E.roa
Signing time: Mon 23 Oct 2023 12:19:15 +0000
ROA not before: Mon 23 Oct 2023 12:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:3800::/32 maxlen: 32
2a11:200:a000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Mon 20 Nov 2023 09:28:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:79:9d:d3:93:af:89:b6:9b:4a:a3:52:60:04:bf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 23 12:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb13de5ac41586f966542fed1bdbf48173af3fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:74:e6:6d:7e:23:ef:f2:f4:c3:96:2d:cc:17:
e3:c4:de:c0:51:8e:59:02:a9:92:29:d7:92:4d:3e:
bd:f9:9f:d2:10:33:b3:78:d3:c0:15:7a:e5:3d:31:
e2:8f:98:39:d9:1d:57:06:75:b4:f1:49:75:d3:1f:
25:3e:0e:48:13:79:b1:c7:02:7f:ea:7c:4f:39:71:
2e:20:8c:f4:08:e5:b6:d8:24:f3:87:48:97:0d:f9:
02:fd:88:3d:42:a0:1f:f2:df:1a:f7:9f:82:58:7b:
74:77:21:ff:fb:a6:48:b9:0b:83:0a:c2:53:6a:92:
24:b0:f6:1b:7c:61:ca:d9:1c:01:f9:39:54:4e:61:
f5:d7:19:f5:2b:f5:32:e2:fa:fb:cf:e3:36:30:87:
43:d4:0d:d5:e7:93:ab:94:7f:5b:73:5e:e4:d3:af:
4b:83:a6:e3:4f:09:84:40:00:b4:8f:57:e1:3d:02:
fb:4a:dd:1a:a4:dc:bd:50:68:82:08:ad:12:7b:18:
44:97:f4:f0:10:db:44:a9:1f:26:b4:20:e4:01:d3:
d5:ae:a0:fc:fa:bb:fb:3b:13:1b:7e:78:98:e3:ab:
4a:c1:71:a6:e8:f7:f9:0b:2f:44:e4:bc:3c:ba:38:
50:2d:2e:51:10:2f:a1:00:e0:77:8a:36:77:79:94:
be:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:13:DE:5A:C4:15:86:F9:66:54:2F:ED:1B:DB:F4:81:73:AF:3F:E1
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-xPeWsQVhvlmVC_tG9v0gXOvP-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3506::/32
2a09:3800::/32
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a0c:2104::/32
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:200:a000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
58:77:36:d9:4e:be:84:cf:4c:cf:43:42:ef:46:ef:28:43:03:
bc:37:9a:39:11:f5:ca:a5:2e:50:73:f0:43:e8:66:96:c2:25:
16:14:d6:69:cc:60:ce:c5:0c:17:00:a4:23:cb:bf:8a:66:47:
c8:a4:78:63:ef:ea:51:02:82:4b:98:d5:97:90:b5:26:b1:03:
5f:c3:6b:ae:1b:0f:ae:aa:06:96:99:8e:a7:14:20:31:d1:c1:
02:3e:5e:a6:bc:2d:05:56:9c:5f:15:1b:d8:a5:47:4c:7f:31:
33:e7:26:0f:79:7d:27:38:1d:d2:ea:4f:66:c6:1e:53:c5:c3:
e1:af:4d:1d:70:2e:d9:51:9d:10:f3:c3:22:ed:90:84:28:b4:
73:2b:e7:db:df:3f:96:2e:bb:74:96:c5:b6:f7:a3:4b:0a:b4:
93:13:3b:54:88:14:d7:f8:33:f0:36:ac:31:77:50:e1:4c:99:
41:7b:c2:d6:35:5b:bd:ed:85:b4:cf:3d:54:08:cc:3b:00:2f:
e0:a2:a2:09:f7:a9:b1:af:6c:17:52:19:c1:0d:94:78:f4:e9:
cb:9f:80:e6:9a:f4:99:58:6d:c3:6a:56:56:de:7f:a0:31:71:
33:25:24:0d:40:db:14:7d:52:bd:f6:5f:e0:3c:92:8f:56:4b:
9d:b4:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org