Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MvOGU2h0zIigUNIPmEHUvGBiGaM.roa
File: MvOGU2h0zIigUNIPmEHUvGBiGaM.roa (raw, json)
Hash identifier: 89hGxdSdjtGx8lotKenXbL9kQ9PoPDE/c/jklTIBs58=
Subject key identifier: 32:F3:86:53:68:74:CC:88:A0:50:D2:0F:98:41:D4:BC:60:62:19:A3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018A649F7B351AB60D58A4E036BD628182E3
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MvOGU2h0zIigUNIPmEHUvGBiGaM.roa
Signing time: Tue 05 Sep 2023 09:14:47 +0000
ROA not before: Tue 05 Sep 2023 09:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 45.151.139.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:a000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a06:d900::/29 maxlen: 29
2a11:780::/29 maxlen: 36
2a09:3b00::/29 maxlen: 29
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:9f:7b:35:1a:b6:0d:58:a4:e0:36:bd:62:81:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 5 09:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32f386536874cc88a050d20f9841d4bc606219a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:df:29:2f:a3:2c:72:f2:db:68:d7:08:b3:
65:40:70:0c:0b:94:34:b7:9b:4f:27:bd:00:70:d0:
30:7a:6b:6d:2e:d8:e0:b8:91:fa:ac:69:b3:f5:0d:
5e:db:84:6a:10:bd:b5:a7:d9:6a:bd:33:b8:ab:38:
a5:52:fc:72:88:88:3c:2c:d0:92:25:aa:e1:4e:61:
15:ef:6f:dd:9e:3c:95:81:bb:9b:e6:37:e5:7a:4d:
76:70:09:80:5b:a0:49:bc:f3:04:6d:43:61:d7:de:
31:c3:7d:5f:d0:e9:ec:a7:90:58:43:81:4e:9d:a3:
4d:65:c8:84:e8:48:b2:be:e5:45:cb:75:0b:80:14:
ae:a1:17:f9:3e:df:41:dc:b8:a0:59:fa:e7:8a:ac:
fb:06:70:b2:c2:e8:c2:3f:a7:53:0b:d9:b1:56:51:
f9:33:84:7d:53:06:b0:ce:e0:dd:2f:1b:a9:ae:86:
a0:57:59:b8:c6:f8:12:36:fe:89:62:2f:f6:29:13:
1e:71:02:04:b4:89:54:5d:6c:07:38:68:a4:6d:8e:
9d:5d:60:00:32:05:f0:13:d4:13:cb:39:15:4a:1d:
05:eb:9d:a4:a1:5e:52:39:51:d5:d6:5d:c2:32:83:
d1:29:0c:27:52:91:0f:06:31:62:68:c7:e1:e2:02:
12:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:86:53:68:74:CC:88:A0:50:D2:0F:98:41:D4:BC:60:62:19:A3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/MvOGU2h0zIigUNIPmEHUvGBiGaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/23
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::/36
2a09:b680::/29
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:200:a000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/32
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
b3:0b:72:a5:41:95:87:2b:91:c8:ee:eb:1e:dc:c0:42:59:a5:
1f:82:5d:08:a5:f9:2a:23:0c:84:d6:f9:e8:72:84:d7:9b:db:
97:6a:0b:b8:19:ee:f0:19:62:0b:9b:1c:cb:d9:57:71:52:bb:
2d:e7:e2:81:53:76:78:2e:d4:f6:01:ff:d2:95:e0:c6:41:e4:
00:ab:ca:28:da:5c:26:01:9b:19:db:67:e9:f6:97:a5:13:a0:
68:4d:f1:a8:1e:4f:94:4c:8f:6e:9f:53:1d:a6:12:46:b7:71:
d5:7c:e7:fc:73:2e:f8:a1:ff:7f:94:e0:70:ba:08:c1:9d:61:
97:74:74:39:90:c0:d7:a4:c0:bd:d6:b6:bc:a8:bb:b1:84:72:
48:89:31:17:da:3b:f2:46:7d:99:08:8b:d4:30:54:c5:63:aa:
6d:c5:9f:0c:09:6d:8e:f7:dd:53:ed:45:e4:f3:51:de:d5:ac:
54:1d:f4:c3:77:66:1b:bb:b7:2a:54:79:98:2f:73:b7:90:2d:
1e:0b:03:f7:c1:df:a4:60:c9:00:9b:cd:12:2a:fd:e7:47:e8:
ac:42:6a:2f:26:66:de:50:bd:d6:13:bd:e8:d5:7f:3e:0d:11:
ef:8f:02:fb:cd:b1:d1:58:45:8f:f0:6b:cb:c9:5e:d9:dc:b3:
80:eb:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 10:12:45 2023 by rpki-client on console-ams.rpki-client.org