Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZjSJa2uMR97AfThJ8jk7eTZedMU.roa
File: ZjSJa2uMR97AfThJ8jk7eTZedMU.roa (raw, json)
Hash identifier: nOrQ+C99578BReM0JfZOpFqzqucZU72h7Dk6tR45pZ8=
Subject key identifier: 66:34:89:6B:6B:8C:47:DE:C0:7D:38:49:F2:39:3B:79:36:5E:74:C5
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CFCFA250972EC2FDA6B01D5CC182CBA1A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZjSJa2uMR97AfThJ8jk7eTZedMU.roa
Signing time: Fri 12 Jan 2024 09:21:41 +0000
ROA not before: Fri 12 Jan 2024 09:21:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a11:205::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a09:3805::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a11:200:5000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:782::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804::/36 maxlen: 36
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Sat 13 Jan 2024 11:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:fa:25:09:72:ec:2f:da:6b:01:d5:cc:18:2c:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 12 09:21:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6634896b6b8c47dec07d3849f2393b79365e74c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:f1:45:3a:5c:e8:f6:cd:d9:93:b4:95:68:
d9:87:e3:52:3c:33:c2:de:59:df:52:ec:3e:1c:08:
b5:03:54:e2:04:59:ec:81:03:5c:69:b5:55:d1:cb:
5a:11:15:5a:29:8c:d7:2b:6b:70:1d:ba:79:65:a2:
d0:b2:16:3a:2a:2a:6f:a8:6f:c9:8c:6e:68:1d:46:
e6:67:a9:67:da:37:48:c2:e4:1c:49:76:54:97:7f:
80:4e:3f:95:c5:b0:d5:27:42:a7:15:c1:68:f2:16:
01:f0:6a:38:5e:bb:de:06:91:6f:10:a1:c3:6b:c8:
c2:16:eb:76:db:2c:96:62:82:f6:e4:13:54:8e:26:
d3:f3:06:95:5a:17:50:30:e1:37:2a:97:39:fc:0a:
7c:23:22:0b:9b:c2:04:9b:6a:ed:ca:ab:d9:d5:06:
6d:b7:8e:95:0f:7c:64:0c:0a:7e:63:4a:60:bf:a7:
9a:6c:49:1f:cf:21:5b:8b:3a:eb:67:a2:98:49:22:
f1:73:73:d4:1e:27:ff:a1:03:3b:d4:e1:1b:0a:21:
84:da:c3:91:79:d5:46:20:8d:36:3e:b3:a5:02:2b:
47:60:3c:85:d3:87:4f:c6:f9:ae:77:03:87:18:1a:
05:f5:e4:ce:bd:33:7a:06:a1:75:a4:8d:13:17:f5:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:89:6B:6B:8C:47:DE:C0:7D:38:49:F2:39:3B:79:36:5E:74:C5
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ZjSJa2uMR97AfThJ8jk7eTZedMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::/34
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a09:bd80::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
30:e5:0c:de:55:f7:69:c0:65:20:b0:90:ba:e6:33:d4:98:54:
4c:ab:63:8b:b5:27:44:9f:57:04:96:88:97:ff:f1:5a:ff:b7:
1b:fa:46:b4:e0:06:79:2c:2c:c2:a4:63:40:a3:b1:15:ec:cd:
5c:5f:cc:a3:55:50:52:ab:0a:c8:d2:d5:28:81:26:9d:fa:e3:
59:f5:a9:d3:71:2b:83:3b:55:50:9e:5f:e1:1e:82:38:e0:db:
03:7c:83:a3:d0:40:84:cb:97:19:3a:6b:ce:4c:49:28:b3:1e:
c7:00:1e:6c:a3:f8:19:ac:ed:25:84:bb:b8:0d:ab:b8:ba:bd:
29:fa:43:48:60:b5:04:ea:87:1e:29:c1:5c:73:70:cf:26:99:
6b:4d:e1:26:1d:9b:02:65:58:13:f5:66:32:a3:36:23:86:14:
8c:8d:23:a8:6e:c6:4a:a6:67:97:2e:99:13:9d:c2:4b:5b:8a:
89:db:92:5f:5a:64:e9:e1:1a:9b:7d:15:c9:9d:34:20:36:fe:
a5:74:50:82:4d:92:a1:8b:a6:d0:4b:6d:c6:ba:26:db:35:89:
ae:dd:7c:04:2c:6c:cf:27:9c:6e:8c:6e:ab:9e:a8:df:b6:b2:
3a:1b:66:e1:ce:41:b6:2a:ff:75:ab:5b:d7:14:d5:b8:df:71:
b3:26:00:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org