Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/arDDScXf4TVcBT4A08PrsGkUSBE.roa
File: arDDScXf4TVcBT4A08PrsGkUSBE.roa (raw, json)
Hash identifier: N/V+fFzjlKsC1AK5SxqN7hMcg70A6ZVCGIgQl/Zrksk=
Subject key identifier: 6A:B0:C3:49:C5:DF:E1:35:5C:05:3E:00:D3:C3:EB:B0:69:14:48:11
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018DEAD166E1E0B7C9DC36C87D9EF7EA5464
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/arDDScXf4TVcBT4A08PrsGkUSBE.roa
Signing time: Tue 27 Feb 2024 13:46:48 +0000
ROA not before: Tue 27 Feb 2024 13:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 28 Feb 2024 08:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ea:d1:66:e1:e0:b7:c9:dc:36:c8:7d:9e:f7:ea:54:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 27 13:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ab0c349c5dfe1355c053e00d3c3ebb069144811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f1:a0:8b:1f:14:62:ac:5d:aa:c2:f2:5a:eb:
2c:cb:d3:01:3c:d2:21:23:a9:ab:39:51:8e:3f:e6:
3a:b2:0f:d2:5a:46:50:c0:b5:96:dc:d2:de:f2:6e:
81:09:99:ff:46:e9:0a:ff:4d:ab:67:46:37:a5:76:
3c:e2:df:55:da:68:4d:ab:1d:fb:e4:86:d7:66:79:
1b:b1:46:02:f4:a1:a6:52:7e:5b:dc:9c:fe:22:bd:
7c:9b:00:32:64:b6:fe:6d:be:37:1c:75:e3:23:94:
c8:a5:27:eb:10:2a:a1:df:ce:ab:65:f2:5a:7e:21:
b8:8c:80:fe:9b:b6:5b:fc:4c:ba:94:1b:bd:e8:91:
af:93:2a:bd:e4:d6:30:37:f4:f0:77:89:0b:35:47:
7b:6e:5a:5f:d0:25:7b:51:3a:2f:d7:fa:99:ac:4b:
a9:17:b4:a7:6f:ba:fb:5a:1a:12:ec:e3:d5:77:20:
6c:84:e3:67:f6:f7:4e:c6:e3:49:a1:20:02:d7:f1:
1d:86:f5:37:c4:e3:da:cb:a5:d7:a6:67:37:6c:b0:
b6:f3:cc:ca:27:be:4d:4f:49:3e:3b:5d:e6:69:97:
37:5f:0d:5d:cf:b8:13:d4:53:67:3f:91:26:c5:cb:
1e:07:62:8c:a2:33:da:ca:53:14:b9:31:83:98:a9:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B0:C3:49:C5:DF:E1:35:5C:05:3E:00:D3:C3:EB:B0:69:14:48:11
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/arDDScXf4TVcBT4A08PrsGkUSBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
25:83:eb:9a:4a:2f:57:d1:98:22:6b:38:d4:81:81:77:5c:0c:
b7:90:9a:1c:46:6c:64:0d:47:aa:49:c4:7b:b6:ad:48:e2:49:
2a:43:7d:e0:e9:ce:ca:4a:b2:7f:47:d8:e1:7d:66:3e:e1:04:
55:21:2f:9b:e6:d9:42:c7:4f:0d:8d:a6:6b:aa:a1:1c:15:87:
cc:07:b5:ea:1c:b0:8a:30:3c:ac:9a:6e:d0:5f:ce:72:60:80:
14:02:ca:3c:91:65:c2:ca:c8:fd:f8:e2:19:da:c4:c5:5f:b9:
55:af:d5:47:48:b4:60:4a:2b:74:e4:32:74:55:6a:44:16:51:
ea:e7:1d:30:ef:96:e9:ff:28:2d:95:aa:4f:d7:91:81:a9:91:
57:f8:42:8f:d0:47:da:d4:ba:49:6a:de:64:b1:51:70:8e:df:
6d:44:a1:ec:29:08:dc:ca:92:2d:ec:e1:3c:2c:a3:86:0d:60:
38:c1:67:a9:e0:63:11:ac:57:17:59:64:bd:b3:97:14:6e:23:
2d:36:ed:aa:2d:ea:3a:cb:ba:a6:57:a3:d6:8d:7b:3f:53:32:
a8:ea:f7:ed:c1:3b:aa:69:c1:6a:2a:6d:5a:7d:62:e0:04:fb:
be:da:3c:e8:a5:d7:84:16:9d:c9:67:4e:47:85:11:9f:e2:de:
c0:b7:0c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org