Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TJQSk2wIXA7D7okJ3ertaW5PUK8.roa
File: TJQSk2wIXA7D7okJ3ertaW5PUK8.roa (raw, json)
Hash identifier: T+9/xREW/gh7EtCHA4FnVfp3U6/oM388DB6JJmp73Nc=
Subject key identifier: 4C:94:12:93:6C:08:5C:0E:C3:EE:89:09:DD:EA:ED:69:6E:4F:50:AF
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018E17BACA41FBA29FB7F37F0684CA162C2C
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TJQSk2wIXA7D7okJ3ertaW5PUK8.roa
Signing time: Thu 07 Mar 2024 07:05:01 +0000
ROA not before: Thu 07 Mar 2024 07:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a11:af06:a000::/36 maxlen: 36
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Mon 11 Mar 2024 06:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:ba:ca:41:fb:a2:9f:b7:f3:7f:06:84:ca:16:2c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 7 07:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c9412936c085c0ec3ee8909ddeaed696e4f50af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:50:a9:08:71:76:bb:0d:fe:c2:fd:dd:4a:
c8:1b:d5:3a:c1:fb:b3:d9:a9:6b:dc:6a:34:31:06:
04:a2:75:4f:5f:6f:ee:69:8d:97:f3:c0:62:18:ab:
3e:61:fd:ec:48:ac:e1:ef:f9:df:e6:20:02:f6:45:
f0:91:27:a2:bb:b0:19:87:c3:87:b3:39:31:16:9f:
e2:a9:2c:8c:d7:89:ba:cf:8c:24:cf:68:b5:8a:c3:
26:33:45:b0:c3:3c:b0:89:68:9b:30:0b:3b:8a:78:
5b:f6:f0:73:3e:f8:d5:25:e1:ac:2f:21:76:8a:ec:
a6:a2:b9:eb:43:97:16:dc:45:b2:59:ca:b9:13:c8:
65:ed:62:e2:de:c6:d5:da:68:2e:14:38:c4:15:ca:
4e:c8:21:58:96:e4:ec:f5:e5:0f:a0:8d:72:d8:fe:
96:5e:e2:cb:8c:8a:37:ac:30:d4:73:74:44:6d:14:
31:00:85:2e:a2:03:72:9f:4c:64:d7:a4:06:27:c7:
a5:f7:01:4b:eb:4b:a7:f5:0f:17:c5:cd:3b:3d:41:
5d:41:26:cf:2a:d2:ee:a1:91:38:e7:fe:cc:ea:8b:
5c:6b:0e:21:aa:07:b1:32:66:b1:75:10:5a:d2:25:
d7:82:8d:b1:68:5e:7e:0b:65:d2:4a:c1:64:ee:26:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:94:12:93:6C:08:5C:0E:C3:EE:89:09:DD:EA:ED:69:6E:4F:50:AF
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/TJQSk2wIXA7D7okJ3ertaW5PUK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a11:af06:a000::/36
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
10:26:0e:7a:c4:94:6a:64:50:f2:ab:7b:6b:9f:d2:c0:b9:98:
fc:82:45:db:51:28:b4:02:e0:94:e1:73:f2:72:4d:57:2d:0d:
25:fc:97:78:c9:3b:35:67:06:bc:2d:67:e0:a1:5e:e6:57:ee:
11:58:cd:85:bf:62:d3:17:65:30:66:2f:4d:e9:e4:fc:ec:3b:
16:17:f5:e3:60:56:fe:5a:c0:41:92:12:4a:6b:48:bc:8d:5e:
47:6e:49:f2:d5:92:ec:ea:bb:84:21:bf:b6:e7:04:73:54:56:
e7:a8:bb:f6:64:3d:73:6f:fc:e7:41:3a:58:18:0e:3e:d0:95:
f0:aa:10:3c:ed:89:3e:e2:a9:37:f3:0b:ed:98:06:84:fb:a8:
e1:ed:78:f7:45:0b:6e:e2:83:05:8e:b3:87:5d:53:d2:91:79:
cc:84:68:ef:92:9a:41:68:d4:52:b6:a6:af:8c:91:08:d1:14:
1a:65:53:84:4d:72:3f:eb:a3:12:61:f0:87:d6:b7:97:d5:3f:
48:ea:7d:ff:f7:18:22:7b:fd:07:2c:10:cd:a9:4c:39:22:58:
31:cc:dc:14:2c:42:a6:07:13:47:ba:84:02:d5:fc:13:9e:13:
b0:29:30:f2:cc:f3:68:05:85:40:aa:fe:46:fc:4f:7d:4c:a4:
e8:b4:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org