Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OCwjOUwGuprJTPuoo5s5FFLCkxg.roa
File: OCwjOUwGuprJTPuoo5s5FFLCkxg.roa (raw, json)
Hash identifier: NmM1l8nrhwfouyD6A2bFFmFRxgiv+pdSa1NJQt0rv5A=
Subject key identifier: 38:2C:23:39:4C:06:BA:9A:C9:4C:FB:A8:A3:9B:39:14:52:C2:93:18
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DF947CB6FAD8D30BB876661AA16606D49
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OCwjOUwGuprJTPuoo5s5FFLCkxg.roa
Signing time: Fri 01 Mar 2024 09:10:48 +0000
ROA not before: Fri 01 Mar 2024 09:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Thu 07 Mar 2024 07:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f9:47:cb:6f:ad:8d:30:bb:87:66:61:aa:16:60:6d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 1 09:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=382c23394c06ba9ac94cfba8a39b391452c29318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a5:eb:4d:20:3f:84:7b:1a:ab:83:a4:bd:e2:
fa:eb:7d:5d:b5:86:df:88:b8:a2:bf:67:76:ae:0f:
06:80:3b:e2:e2:e9:bf:bc:d9:4c:09:61:6c:0c:fe:
c7:73:fb:67:20:a5:a3:77:38:af:7c:7c:64:cc:de:
61:7b:b4:1c:e7:4f:fa:18:4b:04:a1:28:21:ba:b9:
23:95:c6:b0:65:d8:e1:c0:dc:9e:b2:f4:94:45:45:
ed:60:ab:6b:2b:10:9b:e7:f3:4a:86:88:4a:f7:27:
0e:68:69:31:51:07:31:eb:5e:ee:3d:00:fc:5b:e4:
8b:9e:d1:77:79:06:11:e8:32:69:c9:e7:3a:d7:4d:
39:84:c5:86:69:f5:da:64:a3:1f:f7:44:51:8b:84:
de:f4:bb:83:9e:58:b5:71:74:07:ae:cd:f1:91:11:
52:6b:60:62:6d:c0:6b:1b:24:ff:06:5a:9b:61:40:
97:c1:f6:1d:e4:86:45:c6:ad:cd:bc:19:14:c7:4b:
04:56:19:ff:cf:5a:0d:4e:a6:fe:11:5e:9b:f6:e3:
9b:bf:2c:ec:6e:04:de:fb:9f:c4:dc:74:7f:5a:53:
d2:8d:01:cc:35:7e:89:79:6d:e6:35:b7:7f:c2:66:
82:8b:3f:67:05:b7:e2:36:59:fb:59:0a:3f:42:8e:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2C:23:39:4C:06:BA:9A:C9:4C:FB:A8:A3:9B:39:14:52:C2:93:18
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/OCwjOUwGuprJTPuoo5s5FFLCkxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
1a:c5:2d:2d:2f:07:81:98:3f:fd:3e:84:d3:06:fa:ca:e5:64:
c0:06:54:48:69:1c:b4:c1:6b:e8:ec:e5:30:a6:af:bd:37:8d:
b5:c1:c8:31:cd:e8:ab:09:67:52:b8:5b:b0:47:d4:2c:c2:6f:
07:3e:1f:a8:be:2e:75:8a:fd:ba:35:db:15:f4:67:5e:94:79:
99:d9:57:5e:4b:4e:91:90:de:99:62:06:10:0b:a7:ae:5e:a5:
8e:1c:af:53:10:df:86:1e:c5:27:8e:3c:50:1e:3f:58:33:65:
45:7c:9c:eb:f2:31:15:0f:18:d4:73:a0:02:cb:fa:e4:72:3f:
84:a5:02:90:15:0c:45:96:ee:ec:63:d0:72:d1:1b:6d:b2:e4:
b1:47:bd:b0:86:d8:c2:46:32:9d:b6:cf:3b:24:d3:c5:ec:2b:
4e:cf:ab:ec:77:67:ee:92:e2:0c:f2:24:86:dd:40:51:4c:a0:
0f:b7:ba:d4:0b:52:33:4c:2e:1f:e5:a4:a6:c0:4f:9f:c3:74:
37:0f:2c:f2:34:de:f9:55:4a:18:58:f6:4b:31:31:ad:48:bd:
fe:48:90:05:f6:40:0c:32:0e:11:47:95:1b:e0:c9:20:41:7c:
5e:b8:14:21:b8:85:74:46:f1:de:7b:76:c5:90:9f:a1:f3:fb:
d0:50:91:8f
-----BEGIN CERTIFICATE-----
MIIG5zCCBc+gAwIBAgISAY35R8tvrY0wu4dmYaoWYG1JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMzAxMDkxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODJjMjMzOTRjMDZiYTlhYzk0Y2ZiYThhMzliMzkxNDUyYzI5MzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaXrTSA/hHsaq4OkveL6631dtYbf
iLiiv2d2rg8GgDvi4um/vNlMCWFsDP7Hc/tnIKWjdzivfHxkzN5he7Qc50/6GEsE
oSghurkjlcawZdjhwNyesvSURUXtYKtrKxCb5/NKhohK9ycOaGkxUQcx617uPQD8
W+SLntF3eQYR6DJpyec61005hMWGafXaZKMf90RRi4Te9LuDnli1cXQHrs3xkRFS
a2BibcBrGyT/BlqbYUCXwfYd5IZFxq3NvBkUx0sEVhn/z1oNTqb+EV6b9uObvyzs
bgTe+5/E3HR/WlPSjQHMNX6JeW3mNbd/wmaCiz9nBbfiNln7WQo/Qo6L8QIDAQAB
o4ID8zCCA+8wHQYDVR0OBBYEFDgsIzlMBrqayUz7qKObORRSwpMYMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvT0N3ak9Vd0d1cHJKVFB1b281czVGRkxDa3hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICBwYIKwYBBQUHAQcBAf8EggH2MIIB8jAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIBwgQCAAIwggG6AwUD
KgbZAAMFACoJNQADBgQqCTUFYAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMq
CTgDBQAqCTgCMA8DBQIqCTgEAwYEKgk4BGAwEAMGByoJOASAAwYFKgk4BMAwDgMF
ACoJOAUDBQMqCTgAAwUDKgk7AAMFAyoJPQAwEAMGBCoJTgEwAwYFKglOAUAwEAMG
BCoJTgGQAwYEKglOAaADBQAqCU4DAwUAKglvAAMGBCoJpMdgAwUDKgm2gAMFACoJ
vYADBQAqCkeEMA4DBQAqDCEDAwUAKgwhBAMFAyoM6MADBQMqDV7AMA4DBQAqDYsD
AwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/MhwADBgQqD8yHkAMFAyoQwMADBQMq
EMNAAwYEKhECAAADBgUqEQIAQDAQAwYEKhECAHADBgQqEQIAoDAQAwYGKhECAMAD
BgQqEQIA4DAOAwUAKhECAQMFACoRAgIDBQIqEQIEAwUDKhEHgAMFAyoRCYADBQMq
EQqAAwUDKhELgAMFACoRDoIDBgQqEQ6HYDAOAwUAKhGvAQMFACoRrwIDBQAqEa8E
AwUDKhJ8ADANBgkqhkiG9w0BAQsFAAOCAQEAGsUtLS8HgZg//T6E0wb6yuVkwAZU
SGkctMFr6OzlMKavvTeNtcHIMc3oqwlnUrhbsEfULMJvBz4fqL4udYr9ujXbFfRn
XpR5mdlXXktOkZDemWIGEAunrl6ljhyvUxDfhh7FJ448UB4/WDNlRXyc6/IxFQ8Y
1HOgAsv65HI/hKUCkBUMRZbu7GPQctEbbbLksUe9sIbYwkYynbbPOyTTxewrTs+r
7Hdn7pLiDPIkht1AUUygD7e61AtSM0wuH+WkpsBPn8N0Nw8s8jTe+VVKGFj2SzEx
rUi9/kiQBfZADDIOEUeVG+DJIEF8XrgUIbiFdEbx3nt2xZCfofP70FCRjw==
-----END CERTIFICATE-----
Generated at Thu Mar 7 11:06:31 2024 by rpki-client on console-ams.rpki-client.org