Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/XpUq4NaMK2AYdkAWzjDB0B6QTsE.roa
File: XpUq4NaMK2AYdkAWzjDB0B6QTsE.roa (raw, json)
Hash identifier: wTbRcYny01eoyF4QQWakI6pVZU6Ba5D8PtEEFuHgTiE=
Subject key identifier: 5E:95:2A:E0:D6:8C:2B:60:18:76:40:16:CE:30:C1:D0:1E:90:4E:C1
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CA47E6E50C41DA1D8A8E683B79B03F41E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/XpUq4NaMK2AYdkAWzjDB0B6QTsE.roa
Signing time: Tue 26 Dec 2023 04:59:58 +0000
ROA not before: Tue 26 Dec 2023 04:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a09:3805::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:3800::/32 maxlen: 32
2a11:200:a000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:782::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a09:3804:1000::/36 maxlen: 36
2a09:3804::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a4:7e:6e:50:c4:1d:a1:d8:a8:e6:83:b7:9b:03:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Dec 26 04:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e952ae0d68c2b6018764016ce30c1d01e904ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:22:cd:c8:7c:d2:d0:54:b4:3b:aa:36:6a:
49:59:24:e9:bf:be:71:e9:11:60:f9:e0:a5:c2:e7:
05:41:f1:fa:dd:37:66:b6:15:be:b0:d5:4d:eb:da:
8e:d0:c4:ee:4f:43:9f:28:16:2d:d9:36:2a:1f:80:
bb:73:27:54:ba:52:64:23:58:ce:5f:4e:c3:75:12:
79:70:fa:1e:b7:0a:eb:bb:92:44:48:62:87:f9:9e:
02:31:98:b8:24:84:6c:c7:8d:27:6f:ec:c6:15:d9:
8e:90:79:d6:44:64:86:48:23:96:2a:e5:8f:74:38:
27:02:8e:17:5c:65:33:8e:23:4d:ef:9d:7a:19:aa:
88:e2:a5:e1:fb:45:c9:c9:61:96:f4:ae:34:d3:b7:
9d:5f:05:8d:77:ea:d7:37:08:5a:45:be:1e:09:d4:
cd:a9:31:ce:32:4c:e2:97:02:38:8e:7c:11:94:6c:
5d:72:59:97:e9:cc:49:b1:61:42:7b:eb:e1:b9:e3:
ea:73:0c:7b:7a:a7:63:73:f0:e1:9b:42:e3:31:f0:
27:22:cc:d0:aa:fd:11:6a:b3:13:d8:bd:c5:45:1f:
58:3c:38:c0:39:ca:0b:56:68:a9:99:ae:d0:40:94:
41:b2:2e:1c:34:ec:2f:6e:78:1d:6f:93:6a:96:a0:
93:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:2A:E0:D6:8C:2B:60:18:76:40:16:CE:30:C1:D0:1E:90:4E:C1
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/XpUq4NaMK2AYdkAWzjDB0B6QTsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:2fff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a0c:2104::/32
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
47:c3:cf:df:dc:d8:35:98:6e:f9:d9:fb:9f:78:54:35:fd:12:
b4:9b:db:de:09:5f:1e:94:f5:c1:71:6d:7d:0b:15:b4:07:d0:
fa:02:49:d2:44:1f:bd:1b:05:67:08:d0:24:ea:1d:7a:fc:f2:
dd:0b:dd:bc:99:f5:4c:a1:69:5e:47:80:5e:d5:80:3e:49:14:
29:5c:b9:ad:07:35:5b:4a:93:3d:95:c1:86:03:1a:8e:ef:4a:
ed:66:38:58:fa:19:ab:d0:3f:cf:a5:41:e0:f2:98:f1:4f:78:
de:cf:13:77:66:06:02:03:1f:df:a3:48:b9:d9:80:a9:ae:f9:
ab:10:00:ff:81:ae:df:e1:86:76:21:7c:fa:50:f3:7c:a7:98:
4d:12:c4:db:39:9a:d2:d1:0b:34:63:2a:b5:b5:92:76:62:25:
e8:88:1a:c5:46:e2:db:43:31:c2:10:bb:0b:c4:d0:00:86:ba:
36:82:db:2a:e6:5c:6c:de:aa:ac:34:3c:b7:8c:89:15:e2:d6:
5f:e3:d9:1d:d1:a7:92:a6:5a:4a:d8:35:42:d4:32:5f:bf:8f:
82:19:e8:f2:d0:ab:9f:9f:6c:ca:2c:64:9f:b4:2d:85:d4:4d:
6b:0d:51:a9:06:e6:1b:53:d8:07:bb:d2:c1:34:4c:68:b0:f3:
56:45:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 29 11:30:58 2023 by rpki-client on console-fra.rpki-client.org