Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xk9n6pHK3Mz7L38sq4KEWS3Mgk0.roa
File: xk9n6pHK3Mz7L38sq4KEWS3Mgk0.roa (raw, json)
Hash identifier: 1Zmxl2G6AQjFS73m2lVxgg01OW+rZnwH4ij5W3q2ZAQ=
Subject key identifier: C6:4F:67:EA:91:CA:DC:CC:FB:2F:7F:2C:AB:82:84:59:2D:CC:82:4D
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018CDF86B908DADCC4A76C49871CB65B7D22
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xk9n6pHK3Mz7L38sq4KEWS3Mgk0.roa
Signing time: Sat 06 Jan 2024 16:06:37 +0000
ROA not before: Sat 06 Jan 2024 16:06:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 95.215.109.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
194.113.105.0/24 maxlen: 24
45.142.210.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
83.171.240.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.243.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
2a09:3d00::/29 maxlen: 36
2a11:207::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c0::/29 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a10:c0c1::/32 maxlen: 32
2a09:3805::/32 maxlen: 32
2a10:c0c7:5000::/36 maxlen: 36
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c0::/32 maxlen: 32
2a0d:5ec0::/29 maxlen: 36
2a06:d900::/29 maxlen: 29
2a09:4e03::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a10:c0c6::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a11:b80::/29 maxlen: 36
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a11:200:d000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a09:3505:9000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200::/36 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:782::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a11:e82::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a12:7c00::/29 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a09:3804:1000::/36 maxlen: 36
2a09:3804::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a0c:2104::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:204::/32 maxlen: 32
2a10:c340::/29 maxlen: 36
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:86:b9:08:da:dc:c4:a7:6c:49:87:1c:b6:5b:7d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 6 16:06:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c64f67ea91cadcccfb2f7f2cab8284592dcc824d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:33:de:42:b7:dd:df:0f:5a:41:0a:27:82:
af:ae:74:1d:28:ff:8b:05:cf:55:c4:ee:cc:86:8d:
ac:11:9c:b5:c9:86:93:2b:1d:5d:8c:59:9b:dc:12:
0d:da:cd:9e:9f:c4:5b:2b:e5:5e:85:f9:84:1d:13:
8e:01:e8:fa:95:c7:ac:10:8c:0f:6b:9a:6b:c1:a8:
d9:76:11:d9:7b:3a:5e:ee:6d:55:46:09:47:b4:6d:
aa:f3:25:ca:92:56:8a:c8:6a:7f:25:1c:12:93:e7:
7d:b0:4e:40:70:ed:08:7a:b3:1b:45:03:49:bd:f6:
37:42:9e:0b:64:54:99:1d:64:82:89:73:8e:0c:f3:
6c:d3:f4:13:38:42:d7:b0:3b:4f:95:17:f7:ff:ce:
86:a7:ec:b3:04:63:bf:e4:fe:35:ff:1f:d9:0f:75:
44:d1:98:6e:5c:e5:bb:ba:2b:0c:d9:13:a5:aa:b5:
fe:eb:5c:82:6e:53:a1:db:9c:87:3d:e5:c8:db:52:
f1:37:d5:ce:3a:88:89:bf:d8:6b:6d:6a:78:3e:70:
b9:db:3c:cf:db:ab:c6:0e:b1:24:f7:c9:1f:cf:fa:
c5:45:64:a5:13:ea:06:c9:9c:8d:2a:bf:fb:68:86:
7a:1e:27:93:cf:33:6c:24:00:c8:e8:7a:b4:f3:43:
5e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4F:67:EA:91:CA:DC:CC:FB:2F:7F:2C:AB:82:84:59:2D:CC:82:4D
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xk9n6pHK3Mz7L38sq4KEWS3Mgk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
95.215.109.0/24
194.113.105.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:2fff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:b680::/29
2a09:bd80::/32
2a0c:2104::/32
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc81::/32
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:f1:aa:8a:32:2a:7f:e1:b1:c1:2e:68:d7:d3:61:19:98:f9:
68:02:ef:a7:e4:bf:c5:a9:5b:0f:53:1f:e1:3b:72:a1:50:13:
46:a8:cd:fc:76:e1:9a:f5:04:47:fe:d5:f1:55:56:0b:f3:0b:
1c:c3:05:75:72:69:66:d5:86:0d:75:6a:bf:55:bf:16:27:c4:
3c:a1:09:c1:86:7c:99:11:de:7b:06:75:79:52:8a:1a:c9:22:
5a:cb:c3:8f:8b:be:93:be:62:46:4d:dc:5f:06:4b:bd:c8:57:
fe:ae:f7:c0:cd:c7:c0:ae:e8:5c:75:42:c6:56:ba:57:a5:20:
be:49:d7:50:7c:84:7c:68:66:25:80:31:56:7a:66:27:2d:36:
c5:eb:c4:e6:3a:1b:ec:0b:d4:a5:8c:b0:37:50:af:e6:6b:37:
5f:7d:52:5c:9e:ea:b0:67:e5:cf:a6:41:d4:fa:17:a7:b7:34:
9a:eb:68:74:2a:4d:d2:a7:b2:a6:43:b1:fd:4b:7d:08:8d:e5:
4c:af:78:09:80:b6:6c:38:75:e2:45:de:22:94:ef:da:f4:bd:
fd:8a:f9:fa:ac:5f:d1:1a:73:33:a4:73:e9:ab:f4:16:80:4b:
ee:24:ec:d0:13:5d:ff:2a:c2:29:5e:77:2d:a0:db:a8:bd:4d:
05:99:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:05 2024 by rpki-client on console-fra.rpki-client.org