Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa
File: eJfYmFr-xSvaS54NHeZV3BrXPyg.roa (raw, json)
Hash identifier: 1UgZfWZ8PvD521/GXssNyID/gq8sQSx+vpuNM3sUEs4=
Subject key identifier: 78:97:D8:98:5A:FE:C5:2B:DA:4B:9E:0D:1D:E6:55:DC:1A:D7:3F:28
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D02AD7E198471C04C1042F4C33B7BCC9A
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa
Signing time: Sat 13 Jan 2024 11:55:40 +0000
ROA not before: Sat 13 Jan 2024 11:55:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a11:205::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a09:3805::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a11:200:a000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:782::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:3804::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a09:3804:4000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 17 Jan 2024 07:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:ad:7e:19:84:71:c0:4c:10:42:f4:c3:3b:7b:cc:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 13 11:55:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7897d8985afec52bda4b9e0d1de655dc1ad73f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b9:24:2f:cc:fa:c1:ba:a0:6a:ef:5e:aa:26:
dc:79:68:31:72:96:36:c9:2a:29:74:f0:50:4d:69:
7a:aa:16:7b:e8:8a:de:23:ce:f5:25:fd:c6:39:8c:
ed:96:3a:83:a5:9c:f7:dc:51:46:3a:80:3f:f9:a0:
b2:c0:0f:5f:eb:ea:d2:3c:17:f2:b9:1a:a0:df:c1:
da:10:7c:c1:e1:42:1e:f8:4e:a0:2b:03:f8:18:90:
f5:b8:bb:87:94:47:a9:66:04:1d:5f:03:d8:25:23:
6c:6f:3f:2e:f7:d3:76:2c:e5:de:55:01:14:b3:73:
b7:9f:d8:38:70:e6:b2:c1:bc:70:8c:02:9c:6c:94:
2b:fe:01:87:62:fc:d7:ef:e6:5f:a8:b0:dd:57:9c:
43:5a:db:74:93:18:bb:2a:9f:58:e0:2a:da:86:8b:
7e:42:db:c0:cb:e3:29:19:81:09:63:c7:bb:8c:6e:
bd:a3:bb:97:19:62:9a:ad:76:ee:92:ee:a6:95:f2:
3a:dc:ef:2b:cf:79:12:fe:fa:ea:86:6f:36:a0:e4:
12:b3:a9:a9:df:8e:cf:97:4f:a7:7c:a9:f0:56:b9:
54:55:41:da:5f:6b:5b:cd:20:f1:ba:32:77:3b:5b:
6a:0d:df:df:48:e0:43:58:86:88:22:24:4f:e4:3e:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:97:D8:98:5A:FE:C5:2B:DA:4B:9E:0D:1D:E6:55:DC:1A:D7:3F:28
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eJfYmFr-xSvaS54NHeZV3BrXPyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:4fff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a09:bd80::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
a4:4d:0c:6e:c3:3b:fc:fb:49:15:3d:09:44:8a:f7:64:35:8b:
ef:50:f5:ff:61:c2:bb:e0:76:43:92:f7:d4:7e:ea:c4:00:2a:
39:47:74:3c:91:d9:20:e6:8a:4b:29:5d:66:9b:b0:b3:3e:98:
88:fc:c9:9e:4d:29:07:e1:e9:3d:91:b1:b2:db:f0:84:f3:27:
fc:c0:0e:3c:95:53:aa:cf:c8:13:6c:36:0d:a6:59:be:23:d7:
a8:df:a0:0c:66:a1:c4:2e:42:53:5c:db:e1:ea:fa:3d:29:a1:
02:82:57:94:22:ea:d2:dc:97:02:ef:db:f3:3b:88:b9:7b:e1:
95:fb:e3:91:1f:0e:e2:c2:59:0c:7d:2d:60:87:85:68:d2:ce:
47:35:7a:65:ca:21:b8:52:c2:0f:70:31:a8:ed:e5:3d:52:31:
d6:55:ee:6d:12:95:6c:1a:63:9b:2c:72:bb:b3:b0:da:0a:3c:
97:6d:3a:34:b3:ba:9f:b8:22:a0:b0:fe:00:22:aa:18:0f:02:
77:0d:dc:6c:0b:48:20:3f:fb:e0:9f:b9:82:b5:d4:84:49:80:
ad:5a:e1:74:cb:48:3b:12:b7:04:9b:62:b3:f8:88:f7:45:48:
41:ad:bb:aa:54:2d:10:ea:41:b9:5c:76:22:d0:3e:6a:c1:43:
80:1e:9d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org