Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YLVUWCBARQzwLwrwwFe4VwCR_XQ.roa
File: YLVUWCBARQzwLwrwwFe4VwCR_XQ.roa (raw, json)
Hash identifier: tk1GU7GGHsCo43OlmINU6YM1hVsombnGvS7UQsmaHXw=
Subject key identifier: 60:B5:54:58:20:40:45:0C:F0:2F:0A:F0:C0:57:B8:57:00:91:FD:74
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DE554FC9BE19A23991410F88ACCAB4E38
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YLVUWCBARQzwLwrwwFe4VwCR_XQ.roa
Signing time: Mon 26 Feb 2024 12:12:48 +0000
ROA not before: Mon 26 Feb 2024 12:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 27 Feb 2024 10:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:54:fc:9b:e1:9a:23:99:14:10:f8:8a:cc:ab:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 26 12:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60b554582040450cf02f0af0c057b8570091fd74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b2:cd:01:29:f4:8f:df:41:0c:56:88:c4:66:
f6:35:76:1b:26:b2:89:03:95:c9:db:c3:7d:d0:f0:
c8:85:b3:96:a9:12:fc:8f:0d:0f:2f:d3:9b:8d:41:
10:10:c4:c9:12:17:7d:43:14:8f:ef:63:03:54:e3:
00:fd:e8:a9:4f:e8:ae:67:b3:26:b3:df:53:fd:7d:
51:b1:03:cf:8e:91:89:91:43:f1:3b:54:eb:9e:82:
5d:8a:53:a3:8a:1c:3a:46:c6:75:00:df:94:e4:e8:
2c:ff:2f:d3:8a:83:d9:59:cd:06:77:e2:ff:0d:fe:
d7:db:5b:c9:c7:25:1c:77:1e:d1:aa:ab:9e:1d:29:
62:fe:79:cd:94:bf:6c:5a:d2:fa:1a:44:fb:0a:61:
ec:ad:9e:bf:45:1f:de:e7:2f:b4:54:b2:a7:bc:e7:
e4:b5:97:0a:c4:ad:98:c9:79:7f:84:69:4b:08:6d:
ed:20:b9:b8:75:05:3f:b5:8b:7c:46:37:60:11:ef:
5a:ef:2e:ce:64:94:13:e3:37:0f:bc:32:72:d3:8e:
5e:67:3d:fd:53:95:86:7d:3e:7b:a1:94:af:6c:8d:
a5:53:8c:be:93:38:d8:b2:80:f0:d2:3b:77:61:a7:
19:8b:f6:2b:e4:b3:14:c3:2e:b3:b5:2a:3f:28:5c:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B5:54:58:20:40:45:0C:F0:2F:0A:F0:C0:57:B8:57:00:91:FD:74
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YLVUWCBARQzwLwrwwFe4VwCR_XQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
3d:fa:66:7e:57:27:0a:82:5b:98:82:fd:30:82:fb:ce:f3:49:
f9:09:39:32:e5:7b:58:e8:21:3c:aa:4a:00:86:18:5d:79:e4:
be:3b:4b:ce:54:1f:de:7f:99:d8:36:85:d5:5f:04:60:6d:c8:
e2:38:ce:3a:84:ff:8d:c8:90:97:ef:cf:b9:77:53:62:af:aa:
9d:6f:b2:3f:54:bd:23:5e:e9:96:65:1d:4a:c0:79:17:51:6f:
4d:11:73:33:5d:45:2d:a5:3a:df:e3:67:ea:ac:b4:a4:00:1b:
24:c4:84:a2:2f:db:72:4d:98:8a:b2:35:2c:7e:46:08:dc:76:
9d:47:46:a0:1f:15:02:f8:75:b5:37:9c:9d:3e:dc:02:e4:8b:
d8:a9:77:32:76:76:b2:0e:2a:01:c6:cc:52:b5:40:02:1a:2d:
62:5f:45:e2:15:da:0e:2a:e2:5b:70:48:f7:58:b3:53:f1:66:
83:9a:d3:1c:1e:e4:71:30:b6:39:bc:cb:56:26:8b:35:71:91:
6f:0c:b9:ce:c5:04:ca:e2:73:ed:6f:55:d0:d6:e3:a0:2f:35:
00:75:3b:c9:30:85:32:38:89:b3:e2:85:a4:3e:ec:b1:98:6e:
31:24:cf:ed:19:85:4f:5b:97:47:0d:ff:40:19:1d:22:98:17:
84:72:1c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org