Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eakEXV9il2hr6H6REtgAA_zpELM.roa
File: eakEXV9il2hr6H6REtgAA_zpELM.roa (raw, json)
Hash identifier: XgkF2acUmViSdznDWmMbA9F3Zyd6yMRlB7+s9/d7nQk=
Subject key identifier: 79:A9:04:5D:5F:62:97:68:6B:E8:7E:91:12:D8:00:03:FC:E9:10:B3
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018A934113A23108807AE763F2CCAE0F407E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eakEXV9il2hr6H6REtgAA_zpELM.roa
Signing time: Thu 14 Sep 2023 10:33:50 +0000
ROA not before: Thu 14 Sep 2023 10:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 45.151.139.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
45.142.211.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:8000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a06:d900::/29 maxlen: 29
2a11:780::/29 maxlen: 36
2a09:3b00::/29 maxlen: 29
2a10:c0c5::/32 maxlen: 32
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:41:13:a2:31:08:80:7a:e7:63:f2:cc:ae:0f:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Sep 14 10:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79a9045d5f6297686be87e9112d80003fce910b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:36:75:c4:b4:14:30:d7:e5:b3:d2:20:70:
41:0a:91:94:f0:38:ab:b0:b5:ea:00:9c:22:5d:3d:
27:f9:5c:ef:f5:f7:53:87:70:0b:d1:e6:38:28:40:
5a:2d:51:56:9a:8f:fa:42:17:08:d3:dc:29:fb:df:
f7:f7:b6:f5:25:77:dd:9f:65:91:48:1e:15:98:44:
72:5c:8c:5b:43:95:30:43:4a:e8:19:00:c3:3e:fb:
b1:2c:70:19:10:cc:8f:d3:a5:9a:e3:77:b5:fa:4f:
00:35:f7:f5:64:5b:6a:eb:16:ab:35:fb:98:90:06:
2c:22:7b:42:18:75:bc:15:8c:49:0c:ad:7d:c8:10:
b1:4b:ec:20:3f:21:6d:dd:4e:a3:05:50:2d:ff:ee:
a5:70:ab:e0:ff:98:9e:dc:ac:fe:a9:9f:00:15:ab:
ca:55:ca:8d:d3:2b:ee:25:7f:cb:eb:fe:fb:70:71:
61:55:08:ed:85:9d:c7:3e:0e:8b:59:58:4e:47:7b:
cf:47:00:7a:2d:09:b0:dd:b1:ce:d3:8d:85:20:09:
81:5b:74:75:f4:74:a1:55:20:27:d7:40:21:02:5f:
b4:c2:84:34:5a:11:f6:68:6d:63:f6:f5:c9:80:b3:
da:c9:97:da:a2:c4:29:20:bf:a2:92:03:e1:db:40:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A9:04:5D:5F:62:97:68:6B:E8:7E:91:12:D8:00:03:FC:E9:10:B3
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/eakEXV9il2hr6H6REtgAA_zpELM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/23
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:b680::/29
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:200:a000::/36
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/31
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
8e:fd:63:a5:be:fc:33:e2:cf:0d:82:d1:f4:73:18:b3:a9:96:
7d:ff:b9:d0:4c:db:5e:e4:f8:57:e8:89:2b:27:7f:9f:7d:6b:
27:15:9e:e9:04:04:72:ee:ac:5d:d4:f3:63:a0:d9:dc:33:7c:
ba:91:7d:6b:3c:9c:36:d3:36:ba:bf:2c:c4:a7:7f:fa:3b:46:
12:f2:4f:d4:a0:0a:58:7e:6c:b6:84:60:13:a1:4f:c5:4c:be:
49:05:bf:16:59:78:aa:a9:57:e1:78:6d:4d:08:43:9c:9f:ed:
05:d3:59:ae:10:af:22:97:e4:44:bf:64:36:21:a8:c9:05:25:
d2:d4:30:ba:7f:35:28:82:d7:c6:a1:da:69:ac:74:74:97:3c:
37:d1:ba:3f:a7:19:dd:cf:b2:c9:63:08:b8:32:b2:ca:89:ba:
9c:a6:d0:65:3f:9b:c3:56:fe:ab:df:2b:98:59:cb:95:b8:62:
f4:87:cc:ad:3c:ee:c8:a9:ab:9f:30:8d:2f:60:1f:5a:4f:75:
89:c6:2f:d1:2f:5d:ae:06:cd:fe:7d:ed:d3:e6:e2:fe:6a:64:
78:3d:05:c4:dc:bc:2d:26:67:1c:23:83:3e:f1:c0:60:aa:5d:
79:9c:08:e7:97:5a:a4:89:df:e5:d6:f7:e9:dd:03:02:d0:ce:
cf:eb:cc:61
-----BEGIN CERTIFICATE-----
MIIF/TCCBOWgAwIBAgISAYqTQROiMQiAeudj8syuD0B+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjMwOTE0MTAzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE5MDQ1ZDVmNjI5NzY4NmJlODdlOTExMmQ4MDAwM2ZjZTkxMGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP02dcS0FDDX5bPSIHBBCpGU8Dir
sLXqAJwiXT0n+Vzv9fdTh3AL0eY4KEBaLVFWmo/6QhcI09wp+9/397b1JXfdn2WR
SB4VmERyXIxbQ5UwQ0roGQDDPvuxLHAZEMyP06Wa43e1+k8ANff1ZFtq6xarNfuY
kAYsIntCGHW8FYxJDK19yBCxS+wgPyFt3U6jBVAt/+6lcKvg/5ie3Kz+qZ8AFavK
VcqN0yvuJX/L6/77cHFhVQjthZ3HPg6LWVhOR3vPRwB6LQmw3bHO042FIAmBW3R1
9HShVSAn10AhAl+0woQ0WhH2aG1j9vXJgLPayZfaosQpIL+ikgPh20C42wIDAQAB
o4IDCTCCAwUwHQYDVR0OBBYEFHmpBF1fYpdoa+h+kRLYAAP86RCzMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvZWFrRVhWOWlsMmhyNkg2UkV0Z0FBX3pwRUxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBHQYIKwYBBQUHAQcBAf8EggEMMIIBCDAkBAIAATAeAwQB
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQAwnFpMIHfBAIAAjCB2AMFAyoG2QADBgQq
CTUFkAMFAyoJOwADBQMqCT0AMBADBgQqCU4BMAMGBSoJTgFAMBADBgQqCU4BkAMG
BCoJTgGgAwUDKgm2gAMFAyoM6MADBQMqDV7AAwYEKg/MhwADBQMqEMDAAwUDKhDD
QAMGBCoRAgAAAwYFKhECAEAwEAMGBCoRAgBwAwYEKhECAIADBgQqEQIAoDAOAwUA
KhECAQMFACoRAgIDBQEqEQIEAwUDKhEHgAMFAyoRCYADBQMqEQuAAwUAKhEOggMG
BCoRDodgAwUAKhGvATANBgkqhkiG9w0BAQsFAAOCAQEAjv1jpb78M+LPDYLR9HMY
s6mWff+50EzbXuT4V+iJKyd/n31rJxWe6QQEcu6sXdTzY6DZ3DN8upF9azycNtM2
ur8sxKd/+jtGEvJP1KAKWH5stoRgE6FPxUy+SQW/Fll4qqlX4XhtTQhDnJ/tBdNZ
rhCvIpfkRL9kNiGoyQUl0tQwun81KILXxqHaaax0dJc8N9G6P6cZ3c+yyWMIuDKy
yom6nKbQZT+bw1b+q98rmFnLlbhi9IfMrTzuyKmrnzCNL2AfWk91icYv0S9drgbN
/n3t0+bi/mpkeD0FxNy8LSZnHCODPvHAYKpdeZwI55dapInf5db36d0DAtDOz+vM
YQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org