Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/x8bd7rU79nPzwVj8cYy8pJJOZPo.roa
File: x8bd7rU79nPzwVj8cYy8pJJOZPo.roa (raw, json)
Hash identifier: plKT6fsfIG0Bd3UajImgInBUuz+Rkn358PxcN3W7IsM=
Subject key identifier: C7:C6:DD:EE:B5:3B:F6:73:F3:C1:58:FC:71:8C:BC:A4:92:4E:64:FA
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018C438146F80DC1910D388A8812B97ED3AB
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/x8bd7rU79nPzwVj8cYy8pJJOZPo.roa
Signing time: Thu 07 Dec 2023 08:59:54 +0000
ROA not before: Thu 07 Dec 2023 08:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a09:3805::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:3800::/32 maxlen: 32
2a11:200:5000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:782::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 20 Dec 2023 06:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:81:46:f8:0d:c1:91:0d:38:8a:88:12:b9:7e:d3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Dec 7 08:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7c6ddeeb53bf673f3c158fc718cbca4924e64fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:70:4e:42:2c:79:e1:7b:c3:fa:bd:13:fd:
cf:ba:e3:f9:9d:34:7e:a4:51:38:ac:43:ed:2d:f9:
15:59:62:c9:6f:ef:82:56:a7:ab:63:2c:9d:62:cf:
72:a1:b5:a1:1f:b5:ea:88:d7:5c:2d:2a:04:14:0f:
46:6f:96:3f:6f:36:eb:21:b2:4d:49:b3:15:23:23:
f3:d1:78:17:77:f9:59:94:c0:13:8a:0f:82:dc:96:
75:a8:d7:05:73:91:5b:54:6c:cf:06:94:66:b9:39:
ce:b5:1d:cd:50:36:32:d7:d6:d7:ac:97:ec:07:44:
48:a4:7e:cd:e1:36:c0:88:93:ae:bd:2a:7f:bb:40:
8c:8c:13:ce:f5:a0:5c:3c:ed:8f:ad:61:0f:20:91:
2a:60:4e:45:78:1d:b7:16:cf:64:35:c4:eb:72:61:
df:23:19:45:04:00:a7:a6:50:9d:ce:c4:2f:06:a1:
19:2e:3e:9e:b9:75:c0:e6:13:e8:30:db:66:9c:15:
e6:f7:30:38:bb:2f:16:83:bd:19:0a:ac:fb:76:01:
42:33:9d:8c:6b:e4:ab:e3:a0:76:87:04:2e:b9:28:
95:ac:78:56:e2:c0:c0:d8:ab:ae:62:3a:82:11:76:
e0:6d:3d:43:0a:52:1c:1d:1e:8e:87:5f:22:f6:d2:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C6:DD:EE:B5:3B:F6:73:F3:C1:58:FC:71:8C:BC:A4:92:4E:64:FA
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/x8bd7rU79nPzwVj8cYy8pJJOZPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::/36
2a09:3805::-2a09:3806:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a0c:2104::/32
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
Signature Algorithm: sha256WithRSAEncryption
62:8a:ae:90:bc:14:1a:a7:87:01:d6:33:19:ac:76:9b:85:3d:
f8:8f:9f:ae:56:59:fd:74:da:18:19:80:e4:18:7c:af:8e:dd:
35:15:c8:fb:43:bf:bf:b2:98:5f:87:e5:5b:c9:c1:0b:b2:fe:
82:7c:22:52:ae:b8:0a:90:79:63:14:a9:75:c9:d3:3d:6e:37:
55:04:c1:79:a9:53:dc:22:65:b4:dd:01:3c:0d:16:6d:9e:a9:
8b:7f:bd:17:11:69:24:f8:73:1e:2b:b0:8c:1c:5a:74:71:9d:
1d:1e:b4:73:ee:51:78:c1:25:0f:ea:56:34:e3:03:cd:d4:a2:
9e:f7:6c:25:d9:6e:de:ac:15:17:55:89:d7:5a:cc:04:c0:a0:
8b:35:08:25:99:32:a7:c9:a3:d6:07:69:c2:6b:9b:fa:bf:fd:
96:53:85:b2:f0:f2:75:23:23:46:2a:d2:51:b8:e4:9f:96:28:
d2:40:ee:7a:74:92:f6:f5:4e:cd:06:e5:5b:e4:ce:48:82:b3:
26:61:40:5f:1a:40:f5:33:92:41:d6:8a:0b:b3:c1:5d:e4:db:
51:d8:3f:21:30:cb:90:6a:05:53:73:e7:c2:63:64:cb:73:6a:
ce:c4:d0:46:bc:b2:96:54:5d:65:1a:73:6a:ab:4b:7f:a7:ba:
b8:50:48:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:59 2024 by rpki-client on console-ams.rpki-client.org