Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1q4bkXEUduIGAwmLxpiHW-1ybic.roa
File: 1q4bkXEUduIGAwmLxpiHW-1ybic.roa (raw, json)
Hash identifier: 9WZPWsfmJvamUlidMH8sLXu4jGh6rVbKfRXabnTCX7E=
Subject key identifier: D6:AE:1B:91:71:14:76:E2:06:03:09:8B:C6:98:87:5B:ED:72:6E:27
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D63A1FAE61AFE3A5767DA5915BFFFFD20
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1q4bkXEUduIGAwmLxpiHW-1ybic.roa
Signing time: Thu 01 Feb 2024 07:46:16 +0000
ROA not before: Thu 01 Feb 2024 07:46:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
95.215.109.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Fri 02 Feb 2024 07:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:a1:fa:e6:1a:fe:3a:57:67:da:59:15:bf:ff:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 1 07:46:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6ae1b91711476e20603098bc698875bed726e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:c2:fe:21:d0:ec:dd:20:e9:4b:06:b3:8f:
de:2c:f1:8f:6f:49:7e:34:76:7b:e0:1f:b2:d5:e8:
b5:c6:05:10:83:63:4e:3e:ba:93:ad:62:39:b6:94:
c4:d8:d4:ed:fb:1a:ca:51:3e:fd:d6:6c:a2:24:df:
93:a5:ae:bb:87:25:05:0f:81:6f:84:4b:e7:79:42:
55:97:fe:6b:ee:70:f9:f1:7c:f7:20:c8:b7:68:80:
56:2c:3a:e7:66:96:82:49:da:28:01:d7:4c:28:98:
71:53:fd:54:7a:6a:44:dd:21:ce:d5:d9:90:6d:a7:
91:88:82:f0:0b:42:24:01:0a:0d:f3:8b:20:ec:c5:
c6:78:19:bb:4d:03:a2:29:bf:52:b7:41:fa:0f:1e:
bb:ad:18:3c:7d:1c:74:65:f5:57:4c:b3:9f:09:d9:
4e:ed:82:0a:4d:f6:5e:22:1b:ac:2a:66:55:ae:4c:
53:a3:ed:31:4d:2b:24:77:22:f9:e0:44:76:16:59:
ae:c1:30:88:1c:14:b4:6d:74:89:18:ff:91:67:53:
03:58:3c:ed:39:09:8f:8b:85:8d:98:30:71:6e:d3:
81:49:b6:ab:71:f8:43:e6:27:aa:ce:56:b0:09:29:
72:e8:56:da:93:d9:07:a3:04:de:6d:63:44:9a:b7:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:1B:91:71:14:76:E2:06:03:09:8B:C6:98:87:5B:ED:72:6E:27
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1q4bkXEUduIGAwmLxpiHW-1ybic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::/36
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
91:57:a5:62:4f:12:14:a4:91:bc:f7:41:bb:98:9b:f4:48:6c:
42:17:ed:76:34:c8:d3:51:19:02:9c:74:9f:aa:42:69:40:9e:
ae:b8:d9:15:8d:15:9e:3c:3c:05:15:73:ca:19:96:0d:dd:a3:
bc:04:b9:d7:86:5a:bb:6b:51:8d:cf:42:9a:a4:57:c3:4f:14:
1b:08:8f:29:b4:73:39:c6:55:71:fb:5f:29:a0:41:a4:44:2a:
51:f7:01:52:f2:a9:85:9c:b0:89:c3:d2:e4:4b:5a:83:f2:c8:
42:52:62:8c:30:a1:c9:42:c6:6d:bd:ae:8a:66:02:22:4f:70:
2b:cb:4d:3b:1b:23:ad:10:4a:17:f3:51:88:ed:ff:6d:7d:e1:
e7:90:c4:06:f6:ea:83:f8:22:4d:47:f7:5d:2a:a4:52:7f:20:
21:34:0c:05:45:61:76:1d:0c:b0:f2:87:a9:de:56:08:6c:5a:
7d:d3:7c:2e:72:58:02:7d:d5:48:e9:70:26:c7:55:3e:17:0d:
3f:e4:c7:78:6a:02:6a:87:ad:c3:ed:a6:1e:08:f6:0e:7a:38:
23:85:58:dd:3e:79:7d:46:43:bd:f1:9c:a5:d6:a1:ed:21:a0:
bc:74:83:e6:8b:e4:d8:d0:d0:16:3c:51:75:14:35:8e:e4:85:
8b:d3:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org