Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/a3Xcaks8UmMflX0bdg9Bk-7YNtc.roa
File: a3Xcaks8UmMflX0bdg9Bk-7YNtc.roa (raw, json)
Hash identifier: d/CCVZJeHxwYeLauF3UQHEEP6nh5jAEP4wsrsjD/M40=
Subject key identifier: 6B:75:DC:6A:4B:3C:52:63:1F:95:7D:1B:76:0F:41:93:EE:D8:36:D7
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0192769E80CD6AEAE07CAE9E89F3BEC63736
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/a3Xcaks8UmMflX0bdg9Bk-7YNtc.roa
Signing time: Thu 10 Oct 2024 13:29:12 +0000
ROA not before: Thu 10 Oct 2024 13:29:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 45.142.208.0/24 maxlen: 24
45.142.209.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
45.151.137.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
95.215.108.0/23 maxlen: 23
95.215.109.0/24 maxlen: 24
95.215.110.0/23 maxlen: 23
185.118.64.0/22 maxlen: 22
185.118.64.0/24 maxlen: 24
185.118.65.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.66.0/24 maxlen: 24
185.118.67.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
185.156.176.0/24 maxlen: 24
185.156.177.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.178.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
185.230.142.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.104.114/32 maxlen: 32
194.113.107.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a07:14c0:1::/48 maxlen: 48
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c1::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:5241::/32 maxlen: 32
2a0c:5245::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0d:60c0::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 13 Nov 2024 12:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:9e:80:cd:6a:ea:e0:7c:ae:9e:89:f3:be:c6:37:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Oct 10 13:29:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b75dc6a4b3c52631f957d1b760f4193eed836d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:81:25:9b:50:7b:33:89:71:e4:ac:a2:f3:
b4:6f:24:94:61:70:34:1e:d7:04:49:82:ee:e6:1b:
7d:c3:e8:3a:9f:e8:39:d5:93:e1:f4:aa:dd:23:f6:
10:bc:d5:07:3f:d6:3f:b6:e3:e7:19:60:ad:da:14:
c1:07:d8:ed:db:7e:1b:43:d4:f2:73:6d:c5:33:cc:
0c:25:b1:47:ed:d4:76:34:ad:b9:42:5a:a7:26:a1:
85:dd:74:6d:6b:97:03:02:a4:74:cc:ce:19:27:43:
56:ce:ea:2d:b4:83:54:35:eb:87:b8:ab:c1:ae:f2:
6e:e0:cf:5e:00:72:e8:50:6f:6c:f4:ea:9e:aa:77:
cd:da:f7:16:4c:13:58:fc:72:14:e8:88:19:1f:b7:
6a:9b:ad:78:68:b8:01:40:8a:02:ba:95:43:1d:90:
d1:11:bc:cd:46:b7:ed:00:cb:a1:32:c3:5a:22:4d:
79:fd:94:66:b5:ad:42:f7:0b:68:d9:50:e9:82:da:
52:7f:02:a2:e1:49:ee:f3:80:ae:a7:09:02:ef:88:
79:f2:d3:73:8a:7c:d7:73:04:08:aa:55:17:1b:4f:
24:e9:5c:ed:13:f4:6b:66:f3:28:4d:db:86:56:21:
89:6a:11:16:3e:85:15:8b:bd:b5:fe:f1:76:67:20:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:75:DC:6A:4B:3C:52:63:1F:95:7D:1B:76:0F:41:93:EE:D8:36:D7
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/a3Xcaks8UmMflX0bdg9Bk-7YNtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/23
45.142.211.0/24
45.151.136.0/22
80.76.40.0/24
83.171.240.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::-2a0a:4785:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:2103::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
63:d2:fa:8d:f1:03:6e:36:d4:d8:93:0b:b5:4d:6d:c8:93:80:
98:b8:a0:8d:45:6f:74:0b:15:cd:d1:6b:79:e6:77:ee:98:e5:
a6:e4:23:71:1b:ef:2d:4d:69:b8:32:c7:bf:0d:d3:12:0b:fd:
4a:3f:e6:c2:b1:f5:4a:8d:a7:a2:97:50:e4:95:0a:3c:17:6c:
d8:68:d4:45:81:6b:d1:ed:d3:0e:e4:2c:34:9f:29:23:97:7a:
fb:a6:7f:7e:96:10:2e:1f:86:61:dd:41:47:22:b4:10:dc:d1:
1b:22:b5:54:e7:26:fb:54:ac:33:c8:e5:8d:9c:4c:e8:e6:6e:
89:ef:97:ab:17:3e:6f:07:fd:37:c7:f9:d9:e3:51:a4:41:6d:
cf:c0:46:29:2a:eb:56:6e:06:33:95:8d:9e:b9:68:a1:bf:1e:
94:49:77:0f:69:3d:7e:66:e6:5c:08:fc:29:d0:42:09:53:03:
b9:a7:e7:34:db:1a:42:a8:12:41:94:1e:0d:4e:29:cd:82:90:
1b:41:cb:74:90:ae:c9:47:81:a2:d3:0f:39:54:01:c5:02:40:
34:2c:e4:5e:d0:ca:c8:06:a6:78:90:9c:b4:2d:fb:96:e9:72:
dd:f1:33:7a:d5:06:75:23:c5:d8:2c:bb:0c:d2:51:8d:89:f8:
ae:7a:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 16:39:58 2024 by rpki-client on console-ams.rpki-client.org