Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TG-nmll339T_ZDqHxDs9ObvJPKo.roa
File: TG-nmll339T_ZDqHxDs9ObvJPKo.roa (raw, json)
Hash identifier: ZlJhorv1DugUVNll7S4HR9zfw/P3DCwNZ9W1lyuucZw=
Subject key identifier: 4C:6F:A7:9A:59:77:DF:D4:FF:64:3A:87:C4:3B:3D:39:BB:C9:3C:AA
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DEEE8C3BA9851875D1EF5E918A9542BAC
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TG-nmll339T_ZDqHxDs9ObvJPKo.roa
Signing time: Wed 28 Feb 2024 08:50:48 +0000
ROA not before: Wed 28 Feb 2024 08:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Fri 01 Mar 2024 09:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:e8:c3:ba:98:51:87:5d:1e:f5:e9:18:a9:54:2b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 28 08:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c6fa79a5977dfd4ff643a87c43b3d39bbc93caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:d0:64:19:99:e0:d6:c0:0f:96:a2:a3:2c:
1d:4b:e3:b4:d4:5a:4d:1d:dd:f2:4a:07:c3:d5:ac:
ba:ca:6e:c4:db:cd:72:b5:98:6a:38:1d:ba:ab:a7:
23:65:9e:01:5e:63:45:8c:67:65:8b:d6:58:dd:aa:
08:3a:d6:14:14:37:b4:83:dd:40:95:04:f5:28:7b:
f9:87:b9:c1:29:df:1d:dc:b3:33:22:5d:c4:39:8b:
4b:15:2b:d8:c4:75:97:82:73:c6:1a:67:9a:0c:0f:
35:2d:f2:b5:61:e6:49:65:08:aa:e5:99:2d:df:02:
cd:b1:5a:94:46:fb:5e:b5:4d:9f:13:ba:2c:82:0a:
9a:82:cc:25:3f:5c:16:ad:3d:ec:18:72:1c:4b:00:
8f:c0:e9:2a:66:5c:df:34:0f:23:c2:f8:af:d3:f9:
bb:86:88:85:08:1e:61:6c:36:18:27:8c:9a:a5:39:
db:b5:f8:c1:51:af:e4:62:5a:ec:ff:f6:61:a4:be:
df:34:53:1d:be:6f:d9:cc:4b:7f:ba:ba:b4:38:46:
58:c2:6b:67:a5:2b:d0:ae:e8:65:dd:f5:48:95:cf:
f2:98:e0:08:11:96:03:30:07:7a:5e:42:d8:7e:6d:
c9:50:fd:e6:95:fd:59:d6:f7:b6:6b:af:4a:3d:cd:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6F:A7:9A:59:77:DF:D4:FF:64:3A:87:C4:3B:3D:39:BB:C9:3C:AA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TG-nmll339T_ZDqHxDs9ObvJPKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
23:7a:23:97:02:84:96:8b:18:08:3d:4e:e3:58:41:9b:8c:b7:
8b:34:c6:e1:6e:2d:b3:ba:b7:8b:50:95:97:c3:7d:6f:e4:bf:
19:f9:59:56:0d:44:ec:27:dc:4c:9a:cf:a7:eb:f1:b0:1f:b0:
eb:df:dd:01:47:64:b8:99:26:ab:a0:c6:a6:57:b8:5b:7a:f5:
66:bd:9a:36:7f:fa:b0:9c:57:b3:4d:3c:41:cf:c8:28:4e:ed:
49:51:92:85:ec:e0:2b:e5:0e:d0:0b:29:2f:9a:dd:b2:63:ec:
d5:40:cc:3c:da:bf:37:39:1a:0c:cf:71:0b:3f:ab:d9:eb:c3:
c1:b2:0b:78:20:92:44:d3:a5:8c:f3:4b:fe:ce:89:5e:4b:09:
65:bf:fd:c2:67:4d:cb:29:1b:a9:b9:59:2c:8d:46:09:4d:65:
18:65:a8:f1:e8:68:3f:98:6b:76:4d:48:65:e4:fc:72:58:48:
22:28:77:75:b5:4b:a8:64:d8:70:48:f3:52:6e:f1:d4:52:b8:
80:1d:2e:66:c1:20:70:42:7d:78:a7:06:4b:a6:a7:61:e8:78:
0f:2f:e3:e9:09:33:40:89:39:23:99:21:4e:49:0a:a9:c6:73:
51:62:ba:bd:5a:9b:00:33:23:83:bb:6e:e2:a2:df:d1:f8:2e:
8a:a4:03:b6
-----BEGIN CERTIFICATE-----
MIIG3zCCBcegAwIBAgISAY3u6MO6mFGHXR716RipVCusMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMjI4MDg1MDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzZmYTc5YTU5NzdkZmQ0ZmY2NDNhODdjNDNiM2QzOWJiYzkzY2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1rQZBmZ4NbAD5aioywdS+O01FpN
Hd3ySgfD1ay6ym7E281ytZhqOB26q6cjZZ4BXmNFjGdli9ZY3aoIOtYUFDe0g91A
lQT1KHv5h7nBKd8d3LMzIl3EOYtLFSvYxHWXgnPGGmeaDA81LfK1YeZJZQiq5Zkt
3wLNsVqURvtetU2fE7osggqagswlP1wWrT3sGHIcSwCPwOkqZlzfNA8jwviv0/m7
hoiFCB5hbDYYJ4yapTnbtfjBUa/kYlrs//ZhpL7fNFMdvm/ZzEt/urq0OEZYwmtn
pSvQruhl3fVIlc/ymOAIEZYDMAd6XkLYfm3JUP3mlf1Z1ve2a69KPc3FPwIDAQAB
o4ID6zCCA+cwHQYDVR0OBBYEFExvp5pZd9/U/2Q6h8Q7PTm7yTyqMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvVEctbm1sbDMzOVRfWkRxSHhEczlPYnZKUEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB/wYIKwYBBQUHAQcBAf8EggHuMIIB6jAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIBugQCAAIwggGyAwUD
KgbZAAMFACoJNQADBgQqCTUFYAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMq
CTgDBQAqCTgCMA8DBQIqCTgEAwYEKgk4BGAwEAMGByoJOASAAwYFKgk4BMAwDgMF
ACoJOAUDBQMqCTgAAwUDKgk7AAMFAyoJPQAwEAMGBCoJTgEwAwYFKglOAUAwEAMG
BCoJTgGQAwYEKglOAaADBQAqCU4DAwUAKglvAAMGBCoJpMdgAwUDKgm2gAMFACoJ
vYADBQAqCkeEMA4DBQAqDCEDAwUAKgwhBAMFAyoM6MADBQMqDV7AMA4DBQAqDYsD
AwUAKg2LBAMFACoNiwcDBQEqD8yAAwYEKg/MhwADBQMqEMDAAwUDKhDDQAMGBCoR
AgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhECAKAwEAMGBioRAgDAAwYEKhECAOAw
DgMFACoRAgEDBQAqEQICAwUCKhECBAMFAyoRB4ADBQMqEQmAAwUDKhEKgAMFAyoR
C4ADBQAqEQ6CAwYEKhEOh2AwDgMFACoRrwEDBQAqEa8CAwUAKhGvBAMFAyoSfAAw
DQYJKoZIhvcNAQELBQADggEBACN6I5cChJaLGAg9TuNYQZuMt4s0xuFuLbO6t4tQ
lZfDfW/kvxn5WVYNROwn3Eyaz6fr8bAfsOvf3QFHZLiZJqugxqZXuFt69Wa9mjZ/
+rCcV7NNPEHPyChO7UlRkoXs4CvlDtALKS+a3bJj7NVAzDzavzc5GgzPcQs/q9nr
w8GyC3ggkkTTpYzzS/7OiV5LCWW//cJnTcspG6m5WSyNRglNZRhlqPHoaD+Ya3ZN
SGXk/HJYSCIod3W1S6hk2HBI81Ju8dRSuIAdLmbBIHBCfXinBkump2HoeA8v4+kJ
M0CJOSOZIU5JCqnGc1Fiur1amwAzI4O7buKi39H4LoqkA7Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org