Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KJEyOxnoRxq6K-NFkDfCLnRGWcw.roa
File: KJEyOxnoRxq6K-NFkDfCLnRGWcw.roa (raw, json)
Hash identifier: uoWT+hZEH0K0CNv1l9QVnVLNRQVQlKZlRkF//IQbhZo=
Subject key identifier: 28:91:32:3B:19:E8:47:1A:BA:2B:E3:45:90:37:C2:2E:74:46:59:CC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01856FF970AB65D3568E111CA7C0A0D89FFF
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KJEyOxnoRxq6K-NFkDfCLnRGWcw.roa
Signing time: Mon 02 Jan 2023 00:54:56 +0000
ROA not before: Mon 02 Jan 2023 00:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
45.151.139.0/24 maxlen: 24
45.151.138.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:f000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:7000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 May 2023 07:43:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:70:ab:65:d3:56:8e:11:1c:a7:c0:a0:d8:9f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 2 00:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2891323b19e8471aba2be3459037c22e744659cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:17:bd:e2:c6:7a:4b:ae:f7:73:43:40:92:99:
d0:9c:90:39:cf:ad:22:57:26:a6:1e:93:75:f6:41:
6e:c6:75:5f:82:bc:a4:6f:d9:be:ef:fa:68:07:5f:
0b:4c:b9:d9:54:f3:45:48:96:a3:19:c5:31:79:f7:
2a:df:63:fb:5a:b2:0b:cf:6a:cd:dc:d2:8f:30:ac:
8e:58:39:5c:ab:52:91:d1:bd:ea:9a:15:4c:7d:7c:
fb:33:e2:56:72:53:8d:d6:85:3e:c9:ee:e2:9e:fe:
d2:c7:8f:7f:85:48:f6:ae:22:bd:07:d3:72:42:c2:
bb:96:17:09:2e:55:b7:a5:13:a2:93:5f:c8:4e:22:
61:32:8a:2b:9b:df:33:29:be:56:f6:a5:7c:e0:a2:
76:c9:31:9e:5d:0e:e9:2a:98:0a:f0:5d:a5:db:80:
d2:cd:88:7e:7d:b9:f6:36:3b:1a:86:89:2b:67:e2:
ab:22:6f:bf:b2:00:eb:3b:76:f8:ef:c0:ea:76:2a:
6e:42:e8:76:24:78:97:5d:71:e2:d2:86:3c:b9:2e:
d8:aa:aa:f9:9d:47:b4:38:37:d1:45:d6:ed:70:87:
2b:f8:49:53:1f:7b:d4:61:e0:fb:a3:a7:80:69:b2:
0a:dc:9b:35:f0:2b:48:32:ec:31:00:a9:87:3d:88:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:32:3B:19:E8:47:1A:BA:2B:E3:45:90:37:C2:2E:74:46:59:CC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/KJEyOxnoRxq6K-NFkDfCLnRGWcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
45.151.136.0/22
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
35:02:2c:86:8b:99:c5:5a:8c:01:c4:3c:4b:68:07:54:cc:1f:
a6:ad:1c:df:aa:32:46:43:93:ab:9a:92:64:63:25:ec:4f:50:
52:67:47:fa:be:62:f2:6d:78:eb:43:bd:88:ea:58:2d:e3:e6:
c3:fe:b3:0f:6b:65:61:10:e4:a8:27:50:21:84:d7:c6:90:45:
6c:80:aa:f3:48:e3:50:be:ea:59:78:31:29:df:3d:e7:36:2d:
3e:3a:a1:e6:7e:dd:ef:81:d5:8a:38:fd:c0:37:93:91:35:64:
a4:64:28:42:52:6a:62:f4:60:36:e0:64:bf:b5:fd:b4:5b:14:
8d:52:e9:7e:1b:3d:31:04:d9:b4:85:b8:fd:7f:6e:0e:c6:a7:
34:b6:c6:0a:41:06:79:b8:04:64:4f:54:b6:59:03:1c:cf:f6:
f5:e2:57:16:ab:6a:e5:d7:17:7c:e4:08:8b:93:83:c0:d7:3a:
14:bb:a2:41:81:bd:c4:26:73:6f:08:7c:1a:a7:b9:2c:0f:58:
c1:de:aa:2b:19:cb:0b:3a:89:75:25:59:c2:68:af:c3:87:d3:
25:08:ac:2b:42:47:a0:02:93:0b:8a:8c:51:37:66:a9:59:23:
ec:4b:38:5b:83:31:fe:d0:b5:7f:d0:67:84:c2:a9:8d:d2:d7:
c2:28:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org