Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xbld3-RhLEqeOxIxGocfpUzXyaw.roa
File: xbld3-RhLEqeOxIxGocfpUzXyaw.roa (raw, json)
Hash identifier: H6LnX+F6gp18m3axHZO2ryFun2DPQgbHiNLybkuzSwM=
Subject key identifier: C5:B9:5D:DF:E4:61:2C:4A:9E:3B:12:31:1A:87:1F:A5:4C:D7:C9:AC
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018E2C3C8F31D14E7B984EE3DE8047D4E2A4
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xbld3-RhLEqeOxIxGocfpUzXyaw.roa
Signing time: Mon 11 Mar 2024 06:39:10 +0000
ROA not before: Mon 11 Mar 2024 06:39:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3500::/32 maxlen: 32
2a09:3505:6000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3804:b000::/36 maxlen: 36
2a09:3804:c000::/36 maxlen: 36
2a09:3804:d000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:a4c7:6000::/36 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a0f:cc87:9000::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:a80::/29 maxlen: 29
2a11:a80::/32 maxlen: 32
2a11:a81::/32 maxlen: 32
2a11:a83::/32 maxlen: 32
2a11:a85::/32 maxlen: 32
2a11:a86::/32 maxlen: 32
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a11:af06:a000::/36 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a12:7c00:8000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 11 Mar 2024 11:20:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2c:3c:8f:31:d1:4e:7b:98:4e:e3:de:80:47:d4:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Mar 11 06:39:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5b95ddfe4612c4a9e3b12311a871fa54cd7c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:64:5e:0c:51:de:2d:f8:de:b4:0c:05:3d:
5d:56:25:0c:26:d1:1e:86:f8:d2:52:5d:7e:b2:4b:
d2:7f:f4:7d:4f:fb:50:3b:40:13:ab:bf:7d:b5:53:
91:9c:6a:4d:f9:b1:d2:2b:c4:be:67:22:bc:be:ff:
57:ab:42:5c:6e:ab:1d:c2:7b:b9:86:bc:84:62:12:
59:c9:ae:9c:43:56:e8:ca:20:fb:58:18:f6:f8:d6:
8b:d2:b8:6a:c6:a2:a9:7a:c2:e8:37:1b:95:56:92:
fa:a2:f0:dc:e3:99:1b:54:89:5c:21:bf:ff:16:39:
31:5b:12:53:ac:42:8a:fd:3e:96:de:ef:5e:88:ab:
21:e2:37:b8:76:55:4d:bb:83:0d:aa:76:e5:ff:da:
a0:ec:32:ea:43:62:5e:7b:73:5d:e2:10:90:92:81:
06:03:e1:09:33:c0:29:5c:bc:d2:fe:b3:c7:ef:f9:
00:8e:3f:4b:9b:20:ae:53:b4:16:e2:a4:c3:d6:18:
60:a2:83:e2:ab:bd:ca:a6:ac:b4:77:06:fa:21:89:
7c:2a:f4:9c:62:88:24:22:08:60:08:1e:43:fa:9e:
19:37:6f:fc:8e:75:87:c8:4c:76:90:eb:78:d4:18:
67:37:d4:5b:2c:b8:06:02:7f:30:48:85:d0:59:13:
5c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:5D:DF:E4:61:2C:4A:9E:3B:12:31:1A:87:1F:A5:4C:D7:C9:AC
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xbld3-RhLEqeOxIxGocfpUzXyaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3500::/32
2a09:3505:6000::/36
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:dfff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:a4c7:6000::/36
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a0f:cc87:9000::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:a80::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a11:af06:a000::/36
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
09:18:11:00:21:6a:6f:5f:a8:80:64:e0:78:f5:5e:0b:f5:c6:
e2:b0:69:8a:05:a5:04:0b:4a:55:67:e0:7b:26:cf:c0:93:cd:
fa:bf:8f:ea:a5:32:e0:a3:2f:6f:9b:e7:91:0a:0b:ec:99:06:
1a:0f:b7:88:2e:24:84:e8:b8:c3:6c:4a:b9:a4:2d:c3:0e:8f:
6c:14:ca:a3:08:1a:21:f7:a1:85:2a:35:85:a2:8b:a9:d6:5f:
67:13:62:df:f5:6b:3e:0a:61:c6:2a:85:13:fe:b7:29:98:ec:
1e:8a:47:c2:5e:13:5d:fb:82:cc:c8:ce:66:05:87:f5:12:46:
dd:eb:4c:8a:75:a2:65:a8:e7:65:1d:9e:39:fc:e5:f4:ca:87:
6c:ff:a9:99:44:ec:c3:b0:b3:09:a8:ba:2e:10:78:f5:2a:d9:
49:ae:ae:ec:db:fa:7c:ee:7c:66:bb:1c:0a:5d:fd:5c:27:f0:
9f:5f:1b:c5:0e:2e:5b:c9:97:90:0e:55:6e:b0:cf:13:d5:49:
b7:da:63:23:54:03:6c:89:4a:38:49:f5:c6:6a:98:a8:7c:f3:
bb:b8:b5:75:98:9f:9e:d0:40:af:13:1d:0f:d6:66:21:df:e8:
ad:5a:b9:96:2e:35:ba:6f:51:b7:54:5d:f9:0b:6a:98:db:05:
50:67:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org