Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/46bXjgFcPqiT0QXLXSOmAty8nac.roa
File: 46bXjgFcPqiT0QXLXSOmAty8nac.roa (raw, json)
Hash identifier: UGRHO298itmZBeBPAv1R/Q2MEpB9StRRAaseup86MGY=
Subject key identifier: E3:A6:D7:8E:01:5C:3E:A8:93:D1:05:CB:5D:23:A6:02:DC:BC:9D:A7
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CC26D53E29719EE4B08BD449300246ABA
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/46bXjgFcPqiT0QXLXSOmAty8nac.roa
Signing time: Mon 01 Jan 2024 00:29:53 +0000
ROA not before: Mon 01 Jan 2024 00:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
45.151.137.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.211.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.67.0/24 maxlen: 24
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:f000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:7000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jan 2024 09:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:53:e2:97:19:ee:4b:08:bd:44:93:00:24:6a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 00:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3a6d78e015c3ea893d105cb5d23a602dcbc9da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5a:ee:2b:55:df:88:ff:21:35:fb:79:fe:6e:
d2:7c:94:5a:d0:88:87:03:9d:63:e4:56:6c:3b:7f:
43:e6:af:3d:0c:d2:1e:73:55:07:29:17:2f:d5:5f:
a3:7d:11:a0:0e:6c:16:f6:5a:2f:00:6b:f7:84:0e:
55:eb:74:da:4f:19:34:19:84:36:ab:79:b6:3a:58:
81:43:2a:91:cc:81:92:63:4b:71:dd:46:40:0a:d4:
c2:87:c2:2c:f7:56:39:d4:df:5a:1a:14:82:9c:15:
e5:4b:21:54:57:06:63:a6:5a:5b:38:5e:71:32:06:
14:9a:77:17:ca:6b:f5:a0:80:f9:c2:0f:68:1d:39:
3b:3e:ae:cf:06:67:d3:6e:b4:0c:88:17:00:9a:4c:
67:88:35:13:b9:6f:4a:37:82:3f:f0:3e:22:5a:2e:
eb:42:de:29:e8:6b:2e:68:cf:a1:97:01:48:c5:a5:
32:30:56:8f:59:22:70:f8:1e:9c:0e:d3:05:da:96:
93:cf:22:35:1d:60:33:65:44:e0:db:27:2d:59:0e:
3f:1a:f2:76:67:f3:3a:53:08:38:d5:7b:d6:f5:28:
20:9c:95:7b:a0:36:a8:2d:39:ac:45:5e:45:a3:2f:
67:b5:07:67:6c:f4:f1:c2:d8:76:f5:da:15:a5:26:
4e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:D7:8E:01:5C:3E:A8:93:D1:05:CB:5D:23:A6:02:DC:BC:9D:A7
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/46bXjgFcPqiT0QXLXSOmAty8nac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
6d:e4:f2:61:d2:9c:18:a9:ff:94:ab:4e:62:d0:cb:79:4f:20:
81:4f:92:eb:09:34:bf:c1:f2:b6:a3:68:da:bc:4e:4e:9d:76:
c7:c4:e8:90:85:56:11:91:51:16:86:3e:9f:fd:30:89:e9:35:
df:3b:3b:e7:a3:cc:0e:9e:8b:4e:89:f1:04:f0:63:a4:26:df:
04:c6:3c:c7:7e:60:4a:51:f7:8b:b4:6f:55:27:11:78:dc:5c:
17:75:47:4a:03:dc:6c:a2:67:6f:64:a6:a5:70:4a:4b:5a:43:
9c:89:c1:7b:01:6e:c9:92:3c:6d:cc:17:34:32:ef:47:cf:4e:
89:68:7d:c9:e3:b1:5c:96:fc:63:13:bc:15:57:80:55:5a:07:
db:5c:83:e1:73:01:77:ec:8a:46:17:05:91:2e:a3:6a:01:1b:
e2:1b:10:ae:51:04:e0:8a:64:38:5a:49:11:78:8c:98:9a:f0:
24:29:49:a9:67:eb:3e:19:98:89:33:6c:84:cf:f7:32:a8:59:
8a:2e:33:b7:cc:14:fe:dc:bc:c0:2c:7e:ac:40:25:5c:eb:0b:
2b:b1:d5:dc:21:be:96:fd:b9:a3:f6:0b:6f:98:0f:70:50:0a:
6b:82:33:e4:56:b8:5a:0a:29:cc:b1:33:b0:63:2f:9c:fd:ec:
2f:ba:a3:fd
-----BEGIN CERTIFICATE-----
MIIGOjCCBSKgAwIBAgISAYzCbVPilxnuSwi9RJMAJGq6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMTAxMDAyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2E2ZDc4ZTAxNWMzZWE4OTNkMTA1Y2I1ZDIzYTYwMmRjYmM5ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlruK1XfiP8hNft5/m7SfJRa0IiH
A51j5FZsO39D5q89DNIec1UHKRcv1V+jfRGgDmwW9lovAGv3hA5V63TaTxk0GYQ2
q3m2OliBQyqRzIGSY0tx3UZACtTCh8Is91Y51N9aGhSCnBXlSyFUVwZjplpbOF5x
MgYUmncXymv1oID5wg9oHTk7Pq7PBmfTbrQMiBcAmkxniDUTuW9KN4I/8D4iWi7r
Qt4p6GsuaM+hlwFIxaUyMFaPWSJw+B6cDtMF2paTzyI1HWAzZUTg2yctWQ4/GvJ2
Z/M6Uwg41XvW9SggnJV7oDaoLTmsRV5Foy9ntQdnbPTxwth29doVpSZOkQIDAQAB
o4IDRjCCA0IwHQYDVR0OBBYEFOOm144BXD6ok9EFy10jpgLcvJ2nMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvNDZiWGpnRmNQcWlUMFFYTFhTT21BdHk4bmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBWgYIKwYBBQUHAQcBAf8EggFJMIIBRTCBlwQCAAEwgZAD
BAEtjtADBAAtjtMDBAItl4gDBABQTCgDBABUNiUDBABUNicDBAJf12wDBAK5dkAD
BAK5nLADBAC5sXEDBAC5sXMDBAG5xUgDBAK53CAwDAMEArnmjAMEALnmjgMEAbn2
dAMEALn2dzAMAwQCuf68AwQAuf6+MAwDBAPBJugDBADBJuoDBADCcWgDBADCcWsw
gagEAgACMIGhMA4DBQAqBftBAwUAKgX7QgMFASoF+0QDBwEqBxTAAAADBgQqBxTA
EDAQAwYEKgcUwDADBgQqBxTAYAMGBCoHFMDQMA4DBQAqBxTBAwUAKgcUwgMFASoH
FMYDBQIqCkeAAwUAKgpHhQMFACoMUkEDBQAqDFJFAwYEKgxSR3ADBgYqDFJHwAMF
ASoNYMADBQAqDWDDAwUAKg13QAMFACoNd0cwDQYJKoZIhvcNAQELBQADggEBAG3k
8mHSnBip/5SrTmLQy3lPIIFPkusJNL/B8rajaNq8Tk6ddsfE6JCFVhGRURaGPp/9
MInpNd87O+ejzA6ei06J8QTwY6Qm3wTGPMd+YEpR94u0b1UnEXjcXBd1R0oD3Gyi
Z29kpqVwSktaQ5yJwXsBbsmSPG3MFzQy70fPTolofcnjsVyW/GMTvBVXgFVaB9tc
g+FzAXfsikYXBZEuo2oBG+IbEK5RBOCKZDhaSRF4jJia8CQpSaln6z4ZmIkzbITP
9zKoWYouM7fMFP7cvMAsfqxAJVzrCyux1dwhvpb9uaP2C2+YD3BQCmuCM+RWuFoK
KcyxM7BjL5z97C+6o/0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org