Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YQI37t4jsJsGnUKSSD1r6y34NVo.roa
File: YQI37t4jsJsGnUKSSD1r6y34NVo.roa (raw, json)
Hash identifier: EJmhkbWyHq4P4bRo6aNqQ9qWoVU5desA9px010fwS94=
Subject key identifier: 61:02:37:EE:DE:23:B0:9B:06:9D:42:92:48:3D:6B:EB:2D:F8:35:5A
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DEA2807808E18282DC012B07933D368E6
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YQI37t4jsJsGnUKSSD1r6y34NVo.roa
Signing time: Tue 27 Feb 2024 10:41:48 +0000
ROA not before: Tue 27 Feb 2024 10:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 27 Feb 2024 13:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:28:07:80:8e:18:28:2d:c0:12:b0:79:33:d3:68:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 27 10:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=610237eede23b09b069d4292483d6beb2df8355a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:ec:65:89:2e:4e:98:dd:69:5e:99:87:62:
d3:16:7f:f5:c5:bd:7d:25:67:f4:7c:c7:fa:7c:ac:
f7:e8:6c:c1:04:08:b4:5f:f5:c6:38:ad:8c:da:13:
71:f6:2a:31:6e:6a:06:7f:5c:7d:ab:d6:f5:de:bf:
02:7d:95:f5:ea:49:5a:28:7f:a5:e8:28:99:11:1f:
37:76:c0:f3:59:a9:18:fa:1f:b5:aa:e6:74:05:df:
b9:48:3a:c4:b0:ea:6c:10:19:ce:91:2d:69:46:6d:
81:2f:55:39:b5:cd:57:01:a9:ad:11:3b:ba:00:e5:
5a:11:b3:00:11:e3:9f:04:e9:d8:36:26:f7:8c:6e:
ec:29:61:d2:74:50:90:93:bf:0f:16:40:0e:24:f0:
ff:47:2d:31:0c:96:16:8c:e2:cc:82:1a:b4:23:5c:
bc:0f:0f:aa:d8:6f:5b:6c:7a:a4:42:47:d3:b1:68:
d3:31:5c:7a:21:9f:c0:1d:de:93:a6:c5:f9:1b:02:
d9:fd:a8:62:ea:38:15:6c:a7:2b:80:8f:c9:92:37:
7c:50:9d:72:f7:6d:73:98:24:9e:28:74:7a:97:b2:
74:89:c9:e0:bc:03:4a:20:70:4c:e9:e6:a7:3b:9c:
04:3d:9d:f7:85:96:6e:3c:5d:2a:10:0b:2f:6d:e3:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:37:EE:DE:23:B0:9B:06:9D:42:92:48:3D:6B:EB:2D:F8:35:5A
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/YQI37t4jsJsGnUKSSD1r6y34NVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
82:bf:de:d6:8f:71:5d:89:b8:1c:64:c7:98:48:46:60:08:9d:
44:3e:29:9b:d5:09:1d:a0:ad:f3:7b:0e:ea:ca:15:d1:12:b0:
29:b8:89:14:ce:71:c3:32:20:ae:16:0e:f3:d8:38:fd:5b:8e:
5e:47:5c:f2:99:81:45:aa:be:88:67:ce:57:04:85:09:e3:bb:
14:ed:95:d0:fa:ef:d3:29:e9:bf:61:86:f0:36:47:2d:f0:a5:
76:a0:2d:fd:38:0f:23:f3:ac:72:85:94:c6:af:02:e5:d1:6c:
53:59:1e:7f:b1:25:9a:85:65:23:36:ee:19:18:09:f0:15:c7:
15:d6:e1:67:23:7a:f6:84:1a:d3:02:91:78:23:22:87:26:87:
2f:45:d5:fa:82:8e:fe:95:67:e1:bd:8c:fb:8c:f3:2d:4f:48:
92:4c:d4:77:d0:17:58:90:58:5d:9e:b7:eb:6b:6f:9e:6e:bb:
e2:9d:3b:1a:0d:bc:e2:77:77:bb:b3:e1:c2:04:c1:b5:e9:19:
e0:f3:67:73:73:cb:bb:aa:35:cb:42:36:df:1a:53:fc:c4:60:
8e:8b:06:1a:98:9d:5c:e5:92:34:21:80:3b:1e:12:58:47:f7:
66:b7:5d:99:cb:1a:d7:fd:49:7f:d4:3f:f5:7c:0e:24:33:93:
d1:f3:58:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org