Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HNzeGiZvNxfYzRNP_p60ov3sGMg.roa
File: HNzeGiZvNxfYzRNP_p60ov3sGMg.roa (raw, json)
Hash identifier: xFsMBuMu8+6E2tMcu8V1ux8pQh1Vs9u+VtObxlWTjd4=
Subject key identifier: 1C:DC:DE:1A:26:6F:37:17:D8:CD:13:4F:FE:9E:B4:A2:FD:EC:18:C8
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018A41170EFA3BF82009D14DEAF153ACC2EC
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HNzeGiZvNxfYzRNP_p60ov3sGMg.roa
Signing time: Tue 29 Aug 2023 11:39:04 +0000
ROA not before: Tue 29 Aug 2023 11:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 45.151.139.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:8000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a06:d900::/29 maxlen: 29
2a11:780::/29 maxlen: 36
2a09:3b00::/29 maxlen: 29
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 05 Sep 2023 09:14:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:17:0e:fa:3b:f8:20:09:d1:4d:ea:f1:53:ac:c2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 29 11:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cdcde1a266f3717d8cd134ffe9eb4a2fdec18c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:a8:ce:d6:df:b5:81:87:c5:f1:b2:06:28:
84:86:a6:98:3d:ab:e5:c2:11:50:89:3b:d6:a4:1d:
1a:63:3a:b2:6d:f8:fe:18:eb:5d:8b:c4:37:ee:8f:
45:f9:43:11:7d:fb:da:6a:6e:5b:3c:d6:23:41:cd:
79:ab:ef:c0:66:b1:be:48:fb:44:57:4e:67:3a:3b:
15:30:00:83:9c:5e:85:02:50:4a:e9:ae:64:5d:0c:
fa:59:f9:1b:24:ee:89:41:0f:70:7e:04:19:fa:12:
b1:9c:31:85:b9:dc:58:74:9e:36:e5:d8:bc:04:f0:
aa:9f:9e:8d:e6:ba:f8:73:ba:54:f5:e0:b9:cf:ed:
a8:ee:56:f7:9f:77:29:29:f1:07:67:d5:7a:70:fb:
1b:5c:7f:8b:0b:d7:3a:c2:c5:98:57:55:9a:f1:3e:
09:bb:f8:ea:65:01:3e:8a:59:e0:68:3e:77:af:b6:
c0:69:d2:a6:48:ca:97:51:27:cd:7f:55:09:02:79:
06:8f:c8:50:2b:89:80:e4:ed:e7:cd:65:b9:de:4c:
f8:4a:ba:5f:7f:2f:d3:fc:9c:75:d6:89:ff:7a:5f:
77:6b:39:b6:50:50:d4:92:22:9c:89:df:98:6e:0a:
ba:f0:65:0c:07:13:35:94:bd:e0:d0:41:13:75:5b:
9d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DC:DE:1A:26:6F:37:17:D8:CD:13:4F:FE:9E:B4:A2:FD:EC:18:C8
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/HNzeGiZvNxfYzRNP_p60ov3sGMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/23
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::/36
2a09:b680::/29
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:200:a000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/32
2a11:780::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
8b:e2:7d:fb:7d:a2:28:fa:93:6c:20:0c:c5:40:c3:0a:df:a7:
4d:af:a6:db:68:fd:ed:a4:42:e2:7b:30:01:15:75:b1:f9:e4:
81:4a:63:27:30:88:1f:19:bb:3c:f8:79:f4:8a:5e:32:f5:9d:
c4:17:de:6e:8f:d8:2b:15:4f:b0:51:09:12:13:00:8b:19:3b:
c6:b9:63:cd:48:8b:3f:f7:dc:a6:94:ca:ad:be:e6:3d:e5:d3:
51:ff:b4:8d:29:75:70:37:eb:8d:aa:6a:2d:45:f9:5a:5b:c3:
6b:11:4d:87:6a:8f:ac:9a:55:20:8b:1e:5a:e3:84:aa:bd:02:
b4:f6:7a:aa:42:74:61:7d:40:75:63:f1:a7:0c:01:6d:b7:f2:
31:ff:9c:ba:fc:67:25:bc:4a:e9:43:82:bf:6c:b7:ef:04:e3:
90:c6:c6:55:08:ab:03:6a:6f:4e:ab:ea:f0:f8:9f:c8:4a:9e:
fd:76:2c:b1:c9:00:d5:76:f1:ac:e5:6e:7c:24:77:d0:89:a0:
3e:ed:6e:5e:a0:72:6a:a1:75:ba:3a:7f:45:30:7f:7d:31:d3:
95:98:1d:9e:8b:8d:25:2a:c9:87:60:8f:29:80:fc:24:e2:b5:
e2:72:ee:c0:1e:dd:89:17:d1:73:76:20:dd:4a:58:98:00:17:
b9:67:d5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org