Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m80lPNykUzx3OkKM7aM6lhRDxD8.roa
File: m80lPNykUzx3OkKM7aM6lhRDxD8.roa (raw, json)
Hash identifier: WBXRP5KJ80x1zko3uwf3WuAhuh+bw9fg2VGI9GwnKkM=
Subject key identifier: 9B:CD:25:3C:DC:A4:53:3C:77:3A:42:8C:ED:A3:3A:96:14:43:C4:3F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0189B58681FC1A866EC3B1B17C47468BE090
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m80lPNykUzx3OkKM7aM6lhRDxD8.roa
Signing time: Wed 02 Aug 2023 09:13:58 +0000
ROA not before: Wed 02 Aug 2023 09:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 45.151.139.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
2a0f:cc87::/36 maxlen: 36
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 29
2a11:200:4000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a10:c340:7000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a06:d900::/29 maxlen: 29
2a09:3b00::/29 maxlen: 29
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 02 Aug 2023 10:21:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:86:81:fc:1a:86:6e:c3:b1:b1:7c:47:46:8b:e0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 2 09:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bcd253cdca4533c773a428ceda33a961443c43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:a7:8d:90:83:9e:63:da:24:f7:bd:0e:64:
38:57:e6:62:bb:b8:ec:b5:3c:53:16:65:b6:79:f9:
92:25:8a:de:77:b4:14:45:f1:c4:c0:97:4d:c6:8d:
fb:c6:03:55:c9:7a:66:ea:9c:51:48:b6:e6:95:d6:
ef:a2:88:ca:e7:d7:b6:be:ba:59:9b:d9:d9:7f:3d:
ae:9f:88:7e:e0:0e:de:b4:f7:c2:4d:46:fc:0b:1f:
57:d0:e2:a9:b9:af:0a:8e:b5:44:de:43:a2:f6:7b:
74:24:5e:99:e9:a1:45:e9:65:53:86:9f:4b:fc:8f:
a9:62:0f:28:b4:f3:2f:b5:64:16:7a:62:bd:0f:e6:
6e:50:7b:22:69:59:ce:c5:f1:48:8d:00:7c:f5:22:
59:f6:43:7b:26:3c:8a:06:98:4f:c2:e7:2c:40:13:
f3:e7:ec:93:d1:c5:6f:4f:26:ab:3a:4b:5f:ea:59:
43:de:a7:cf:f9:26:03:0b:3c:c3:23:c2:49:9b:1c:
42:c2:b3:23:47:e9:b9:fc:87:76:e9:d4:93:11:8a:
e1:90:2d:90:0c:fa:18:f3:d1:b8:79:72:95:12:02:
fb:70:1f:57:45:21:71:57:19:6e:0c:52:3b:b1:24:
f7:11:6e:aa:b6:2b:6f:e5:a9:59:77:0d:4b:bd:6b:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CD:25:3C:DC:A4:53:3C:77:3A:42:8C:ED:A3:3A:96:14:43:C4:3F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m80lPNykUzx3OkKM7aM6lhRDxD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3b00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec5::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340:7000::/36
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:8fff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7a:21:36:a3:87:de:c7:6e:08:8a:74:e2:fe:36:f5:be:72:75:
8a:21:aa:55:bf:85:45:b8:ab:e4:e0:3f:ae:d7:48:7b:b1:70:
e8:a9:9b:3f:64:93:a5:bd:07:5c:13:4b:1d:be:1d:ed:f6:d7:
61:4c:2f:78:c0:e2:f4:eb:d2:09:3b:4d:2f:46:cc:4c:a9:df:
cc:65:d5:b9:af:9f:06:0b:90:33:37:75:10:c0:d8:ef:2a:2e:
04:72:48:a6:f0:39:eb:24:46:c2:6b:86:21:42:69:91:00:eb:
8f:6d:91:24:8d:64:fd:e3:1f:08:1e:89:45:2d:53:5c:41:6a:
cd:0d:90:1f:4f:53:8b:39:20:26:e1:14:af:46:3a:f5:3c:f3:
7a:7a:87:47:2a:21:d3:a7:49:a2:73:1e:c8:d6:db:9c:fa:03:
a5:db:8a:87:ef:28:cb:c6:82:ca:4e:cf:60:e0:97:e5:48:4e:
ea:52:d4:a5:e8:c3:51:20:7d:28:ca:d2:b9:09:44:88:ae:5d:
3b:7a:89:69:75:e3:67:3f:03:02:9e:d1:cf:c8:11:eb:91:61:
8e:ce:40:eb:b2:85:f2:38:ed:bd:46:4f:62:a5:75:d3:2b:de:
4c:d6:c5:e2:f5:4e:17:f3:31:dc:51:3d:81:d1:67:4d:67:06:
bd:4f:6a:41
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAYm1hoH8GoZuw7GxfEdGi+CQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjMwODAyMDkxMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmNkMjUzY2RjYTQ1MzNjNzczYTQyOGNlZGEzM2E5NjE0NDNjNDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8enjZCDnmPaJPe9DmQ4V+Ziu7js
tTxTFmW2efmSJYred7QURfHEwJdNxo37xgNVyXpm6pxRSLbmldbvoojK59e2vrpZ
m9nZfz2un4h+4A7etPfCTUb8Cx9X0OKpua8KjrVE3kOi9nt0JF6Z6aFF6WVThp9L
/I+pYg8otPMvtWQWemK9D+ZuUHsiaVnOxfFIjQB89SJZ9kN7JjyKBphPwucsQBPz
5+yT0cVvTyarOktf6llD3qfP+SYDCzzDI8JJmxxCwrMjR+m5/Id26dSTEYrhkC2Q
DPoY89G4eXKVEgL7cB9XRSFxVxluDFI7sST3EW6qtitv5alZdw1LvWtQzwIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFJvNJTzcpFM8dzpCjO2jOpYUQ8Q/MB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEvbTgwbFBOeWtVengzT2tLTTdhTTZsaFJEeEQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGyBggrBgEFBQcBBwEB/wSBojCBnzAeBAIAATAYAwQALZeL
AwQCU6vwAwQAVDYkAwQAwnFpMH0EAgACMHcDBQMqBtkAAwUDKgk7ADAQAwYEKglO
ATADBgUqCU4BQAMFAyoM6MADBQAqDV7FAwYEKg/MhwADBQMqEMDAAwYEKhDDQHAD
BgQqEQIAAAMGBSoRAgBAMBADBgQqEQIAcAMGBCoRAgCAMA4DBQAqEQIBAwUAKhEC
AjANBgkqhkiG9w0BAQsFAAOCAQEAeiE2o4fex24IinTi/jb1vnJ1iiGqVb+FRbir
5OA/rtdIe7Fw6KmbP2STpb0HXBNLHb4d7fbXYUwveMDi9OvSCTtNL0bMTKnfzGXV
ua+fBguQMzd1EMDY7youBHJIpvA56yRGwmuGIUJpkQDrj22RJI1k/eMfCB6JRS1T
XEFqzQ2QH09TizkgJuEUr0Y69TzzenqHRyoh06dJonMeyNbbnPoDpduKh+8oy8aC
yk7PYOCX5UhO6lLUpejDUSB9KMrSuQlEiK5dO3qJaXXjZz8DAp7Rz8gR65Fhjs5A
67KF8jjtvUZPYqV10yveTNbF4vVOF/Mx3FE9gdFnTWcGvU9qQQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org