Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iMXxY2oZd2FozIi43NOlqF49di4.roa
File: iMXxY2oZd2FozIi43NOlqF49di4.roa (raw, json)
Hash identifier: 23sKDMasgiVrTG7YQJkixxm6XXiI//jANRyjdbTDcdA=
Subject key identifier: 88:C5:F1:63:6A:19:77:61:68:CC:88:B8:DC:D3:A5:A8:5E:3D:76:2E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018E36E9F1376650E8C4C6415145AF49570C
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iMXxY2oZd2FozIi43NOlqF49di4.roa
Signing time: Wed 13 Mar 2024 08:24:45 +0000
ROA not before: Wed 13 Mar 2024 08:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3505:d000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:c80:1000::/36 maxlen: 36
2a11:c80:2000::/36 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a11:af06:a000::/36 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a12:7c00:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 13 Mar 2024 08:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:e9:f1:37:66:50:e8:c4:c6:41:51:45:af:49:57:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 13 08:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88c5f1636a19776168cc88b8dcd3a5a85e3d762e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:38:e2:e6:4e:82:eb:c2:c5:dd:64:dd:de:80:
09:ce:06:ae:3d:cf:8f:b9:61:19:54:7a:01:29:1a:
95:63:f0:05:5b:58:93:ce:ad:39:50:1d:96:4b:7a:
6f:a6:01:5e:7f:36:6d:32:a4:1c:ab:7a:81:ba:b6:
9e:e7:36:83:ca:22:7a:7a:a6:55:c1:50:87:8e:1e:
67:ed:24:1d:03:37:f5:b4:dc:f5:b8:74:ec:ea:63:
e2:1b:4c:98:87:ee:79:31:61:f3:fd:92:12:b4:5a:
b3:5d:33:73:b1:c8:e3:42:3c:1f:a3:f0:09:e7:b7:
8f:a8:bb:43:16:ce:6d:3f:a0:87:88:9e:1e:a1:14:
a3:fd:2a:78:ff:7e:c8:9e:9f:35:84:ae:ad:50:e9:
20:0a:02:40:03:10:ed:3e:62:d5:66:f3:32:62:2f:
91:38:7b:1e:de:56:8a:34:55:36:ff:a6:b2:b9:64:
95:bd:ad:d8:6d:8e:bb:bb:6c:5c:58:c6:b4:94:7b:
b5:96:d4:7f:40:58:22:79:a7:16:e8:0a:75:9f:6d:
f2:74:a9:c5:16:33:48:91:51:27:99:82:cc:db:5f:
75:3e:c9:96:c4:0e:72:cc:d0:07:d9:7c:4e:23:af:
b4:ec:35:0a:aa:95:42:bc:95:1b:7c:4f:8e:a9:1f:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C5:F1:63:6A:19:77:61:68:CC:88:B8:DC:D3:A5:A8:5E:3D:76:2E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/iMXxY2oZd2FozIi43NOlqF49di4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3505:d000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:c80:1000::-2a11:c80:2fff:ffff:ffff:ffff:ffff:ffff
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a11:af06:a000::/36
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
96:19:7f:5a:1e:f8:22:35:d5:fc:26:92:8d:7a:09:b1:85:b1:
18:39:f0:61:77:57:53:19:43:60:ad:4f:ba:fd:84:5e:06:6a:
23:05:d0:b5:a4:22:0a:56:7c:8b:91:05:d2:d7:1a:60:f3:54:
06:9e:93:0e:cf:03:6e:4a:ce:78:0d:98:b5:43:81:2c:7c:ed:
4b:2d:4d:39:c1:08:52:80:24:01:79:fa:23:82:83:eb:35:b0:
94:73:2b:97:1b:e5:63:b4:b2:e0:33:f8:4f:fd:e1:19:ee:2e:
33:ec:e4:e2:01:b4:38:4c:b3:3f:db:5b:fd:e8:93:53:0e:d9:
c0:48:f3:2b:83:df:06:94:7d:94:b8:06:e3:aa:88:bb:cb:5c:
d4:27:3f:5a:98:51:65:52:04:5a:e3:7f:79:6d:4c:8e:d5:12:
3e:b9:41:67:c1:47:55:d3:07:44:46:15:b5:3e:12:1a:1f:ca:
08:d0:58:73:b4:50:c2:6f:d9:a3:f3:52:e2:e5:47:6e:0b:2c:
06:c2:37:1c:53:50:3f:1a:37:cd:bd:36:56:e9:3b:f7:a5:56:
97:e0:d3:d3:07:76:f2:08:45:e7:52:32:18:cd:62:ae:65:e2:
55:18:3e:22:2e:03:20:7f:e8:f0:0a:16:2b:79:0a:f0:bc:d8:
b2:4e:88:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 13:51:14 2024 by rpki-client on console-fra.rpki-client.org