Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JnAJhPgtYDSdt8N37qM30W9B5OU.roa
File: JnAJhPgtYDSdt8N37qM30W9B5OU.roa (raw, json)
Hash identifier: jezhVmh4J2MOBUKnWR2SB84lL2sw48LqRTEXeo1I6gE=
Subject key identifier: 26:70:09:84:F8:2D:60:34:9D:B7:C3:77:EE:A3:37:D1:6F:41:E4:E5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D1C78BEE38B5CCF4A4EA3214247FC7DE0
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JnAJhPgtYDSdt8N37qM30W9B5OU.roa
Signing time: Thu 18 Jan 2024 12:08:11 +0000
ROA not before: Thu 18 Jan 2024 12:08:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
95.215.109.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Fri 19 Jan 2024 11:46:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:78:be:e3:8b:5c:cf:4a:4e:a3:21:42:47:fc:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 18 12:08:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26700984f82d60349db7c377eea337d16f41e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:93:27:f9:20:9e:30:8e:27:23:a6:4d:80:
de:f0:53:44:4a:e1:8f:63:5b:e0:15:5e:75:6e:26:
7f:f1:63:92:ef:df:f3:33:12:2b:66:66:12:92:43:
2a:f5:d3:93:04:f2:aa:ae:b8:fc:92:3e:f4:bc:e3:
7e:94:64:1c:f2:0d:2c:9e:e5:5d:f6:c2:ac:cf:49:
ef:78:63:84:a3:d9:bf:bd:d5:02:db:f0:29:e8:2b:
17:fb:c0:de:90:7a:53:17:d6:29:e4:6a:99:47:8c:
0c:fd:b0:f6:19:2d:ed:2c:cc:66:d7:33:21:f2:69:
40:8e:51:65:b5:a8:7b:85:14:bc:81:e9:66:9d:06:
e8:10:9f:b5:e9:46:0d:3e:37:87:be:42:04:7a:31:
60:7c:1c:37:9d:0e:ea:1b:9e:b2:5e:d4:39:09:dc:
0d:84:a6:89:fa:51:a3:0b:24:bb:c2:fc:d8:7f:b2:
37:73:b8:ab:63:24:cd:99:e3:8d:77:ac:84:75:83:
4e:47:9e:cd:01:a9:c9:d2:6e:a1:95:3e:c4:1b:9d:
45:15:8f:2c:c4:f1:3f:a8:4a:3a:3c:3f:ad:22:4c:
4f:2d:e9:b7:c5:2f:87:00:5c:3f:07:34:32:9a:b2:
a9:6f:ef:c5:04:b1:79:06:04:df:a7:d5:86:fd:58:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:09:84:F8:2D:60:34:9D:B7:C3:77:EE:A3:37:D1:6F:41:E4:E5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/JnAJhPgtYDSdt8N37qM30W9B5OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:5fff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
86:44:0c:85:26:7b:58:1e:47:8f:77:47:de:44:c7:eb:66:9d:
b8:22:ff:94:4f:ee:d8:25:49:40:e4:66:18:17:e5:4c:6e:e3:
3f:cd:44:f1:ad:b9:ee:14:16:3f:f6:09:67:95:13:e0:ab:20:
5b:03:68:c1:4b:2d:6f:82:4e:38:ed:70:0b:f9:a2:d0:79:33:
0d:46:49:c7:ea:98:b2:89:1f:c6:45:3d:b2:ff:9c:23:57:d2:
fd:57:0a:d9:5d:1b:2a:be:8b:fe:be:00:00:91:c7:e7:07:2f:
4b:c9:48:b7:73:a5:9b:8e:f6:18:5d:26:94:2d:28:1b:55:85:
80:b2:dd:1a:4d:eb:25:a9:5b:aa:de:73:30:9b:89:5a:57:83:
ac:6a:f4:ef:a3:d9:ed:c5:25:80:f0:9f:f4:68:9a:b6:b6:7c:
eb:2d:3c:6d:82:e0:e7:d5:5c:16:28:df:e6:7a:d4:7d:fd:6e:
8b:c8:dc:22:21:0e:1c:57:93:1c:2d:11:73:a1:bb:9a:22:30:
8e:43:6d:6a:b9:bd:cf:84:ad:1b:48:8f:7d:c0:a6:af:3e:a2:
1f:e3:95:b1:16:67:f7:77:42:0a:57:82:03:f8:66:8b:45:3f:
e1:15:b3:cf:94:e0:75:3b:da:34:5d:70:cf:81:58:1d:3b:bb:
f6:19:0d:8c
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgISAY0ceL7ji1zPSk6jIUJH/H3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMTE4MTIwODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjcwMDk4NGY4MmQ2MDM0OWRiN2MzNzdlZWEzMzdkMTZmNDFlNGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZiTJ/kgnjCOJyOmTYDe8FNESuGP
Y1vgFV51biZ/8WOS79/zMxIrZmYSkkMq9dOTBPKqrrj8kj70vON+lGQc8g0snuVd
9sKsz0nveGOEo9m/vdUC2/Ap6CsX+8DekHpTF9Yp5GqZR4wM/bD2GS3tLMxm1zMh
8mlAjlFltah7hRS8gelmnQboEJ+16UYNPjeHvkIEejFgfBw3nQ7qG56yXtQ5CdwN
hKaJ+lGjCyS7wvzYf7I3c7irYyTNmeONd6yEdYNOR57NAanJ0m6hlT7EG51FFY8s
xPE/qEo6PD+tIkxPLem3xS+HAFw/BzQymrKpb+/FBLF5BgTfp9WG/Vh0VwIDAQAB
o4IDrTCCA6kwHQYDVR0OBBYEFCZwCYT4LWA0nbfDd+6jN9FvQeTlMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvSm5BSmhQZ3RZRFNkdDhOMzdxTTMwVzlCNU9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwQYIKwYBBQUHAQcBAf8EggGwMIIBrDAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQAX9dtAwQAwnFpMIIBfAQCAAIwggF0AwUD
KgbZAAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMqCTgDBQAqCTgCMA8DBQIq
CTgEAwYFKgk4BEAwDgMFACoJOAUDBQMqCTgAAwUDKgk7AAMFAyoJPQAwEAMGBCoJ
TgEwAwYFKglOAUAwEAMGBCoJTgGQAwYEKglOAaADBQAqCU4DAwUAKglvAAMFAyoJ
toADBQAqCb2AMA4DBQAqDCEDAwUAKgwhBAMFAyoM6MADBQMqDV7AMA4DBQAqDYsD
AwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/MhwADBQMqEMDAAwUDKhDDQAMGBCoR
AgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhECAKAwEAMGBioRAgDAAwYEKhECAOAw
DgMFACoRAgEDBQAqEQICAwUCKhECBAMFAyoRB4ADBQMqEQmAAwUDKhELgAMFACoR
DoIDBgQqEQ6HYDAOAwUAKhGvAQMFACoRrwIDBQMqEnwAMA0GCSqGSIb3DQEBCwUA
A4IBAQCGRAyFJntYHkePd0feRMfrZp24Iv+UT+7YJUlA5GYYF+VMbuM/zUTxrbnu
FBY/9glnlRPgqyBbA2jBSy1vgk447XAL+aLQeTMNRknH6piyiR/GRT2y/5wjV9L9
VwrZXRsqvov+vgAAkcfnBy9LyUi3c6WbjvYYXSaULSgbVYWAst0aTeslqVuq3nMw
m4laV4OsavTvo9ntxSWA8J/0aJq2tnzrLTxtguDn1VwWKN/metR9/W6LyNwiIQ4c
V5McLRFzobuaIjCOQ21qub3PhK0bSI99wKavPqIf45WxFmf3d0IKV4ID+GaLRT/h
FbPPlOB1O9o0XXDPgVgdO7v2GQ2M
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org