Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xnvhM7yqY4zOSgLS9MBmkkr1kms.roa
File: xnvhM7yqY4zOSgLS9MBmkkr1kms.roa (raw, json)
Hash identifier: q1+tDd5rBrB5f5aHrtgXWdu4usfC7S++4xIve9jqviE=
Subject key identifier: C6:7B:E1:33:BC:AA:63:8C:CE:4A:02:D2:F4:C0:66:92:4A:F5:92:6B
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018D9BCA7E63485F4A577E7139DFC672465C
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xnvhM7yqY4zOSgLS9MBmkkr1kms.roa
Signing time: Mon 12 Feb 2024 05:29:15 +0000
ROA not before: Mon 12 Feb 2024 05:29:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 45.142.210.0/24 maxlen: 24
45.151.139.0/24 maxlen: 24
83.171.240.0/22 maxlen: 22
83.171.240.0/24 maxlen: 24
83.171.242.0/24 maxlen: 24
83.171.243.0/24 maxlen: 24
84.54.36.0/24 maxlen: 24
93.183.80.0/22 maxlen: 22
95.215.109.0/24 maxlen: 24
2a06:d900::/29 maxlen: 29
2a09:3505:9000::/36 maxlen: 36
2a09:3505:b000::/36 maxlen: 36
2a09:3506::/32 maxlen: 32
2a09:3800::/32 maxlen: 32
2a09:3801::/32 maxlen: 32
2a09:3802::/32 maxlen: 32
2a09:3804::/36 maxlen: 36
2a09:3804:1000::/36 maxlen: 36
2a09:3804:2000::/36 maxlen: 36
2a09:3804:3000::/36 maxlen: 36
2a09:3804:4000::/36 maxlen: 36
2a09:3804:5000::/36 maxlen: 36
2a09:3804:6000::/36 maxlen: 36
2a09:3804:8000::/36 maxlen: 36
2a09:3804:9000::/36 maxlen: 36
2a09:3804:a000::/36 maxlen: 36
2a09:3805::/32 maxlen: 32
2a09:3806::/32 maxlen: 32
2a09:3807::/32 maxlen: 32
2a09:3b00::/29 maxlen: 29
2a09:3d00::/29 maxlen: 36
2a09:4e01:3000::/36 maxlen: 36
2a09:4e01:4000::/36 maxlen: 36
2a09:4e01:5000::/36 maxlen: 36
2a09:4e01:9000::/36 maxlen: 36
2a09:4e01:a000::/36 maxlen: 36
2a09:4e03::/32 maxlen: 32
2a09:6f00::/32 maxlen: 32
2a09:b680::/29 maxlen: 36
2a09:bd80::/32 maxlen: 32
2a0a:4784::/32 maxlen: 32
2a0c:2103::/32 maxlen: 32
2a0c:2104::/32 maxlen: 32
2a0c:e8c0::/29 maxlen: 29
2a0d:5ec0::/29 maxlen: 36
2a0d:5ec5::/32 maxlen: 32
2a0d:8b03::/32 maxlen: 32
2a0d:8b04::/32 maxlen: 32
2a0d:8b07::/32 maxlen: 32
2a0f:cc80::/32 maxlen: 32
2a0f:cc81::/32 maxlen: 32
2a0f:cc87::/36 maxlen: 36
2a10:c0c0::/29 maxlen: 32
2a10:c0c0::/32 maxlen: 32
2a10:c0c1::/32 maxlen: 32
2a10:c0c3::/32 maxlen: 32
2a10:c0c5::/32 maxlen: 32
2a10:c0c6::/32 maxlen: 32
2a10:c0c7:3000::/36 maxlen: 36
2a10:c0c7:5000::/36 maxlen: 36
2a10:c340::/29 maxlen: 36
2a11:200::/36 maxlen: 36
2a11:200:4000::/36 maxlen: 36
2a11:200:5000::/36 maxlen: 36
2a11:200:7000::/36 maxlen: 36
2a11:200:8000::/36 maxlen: 36
2a11:200:9000::/36 maxlen: 36
2a11:200:a000::/36 maxlen: 36
2a11:200:c000::/36 maxlen: 36
2a11:200:d000::/36 maxlen: 36
2a11:200:e000::/36 maxlen: 36
2a11:201::/32 maxlen: 32
2a11:202::/32 maxlen: 32
2a11:204::/32 maxlen: 32
2a11:205::/32 maxlen: 32
2a11:206::/32 maxlen: 32
2a11:207::/32 maxlen: 32
2a11:780::/29 maxlen: 36
2a11:782::/32 maxlen: 32
2a11:980::/29 maxlen: 29
2a11:b80::/29 maxlen: 36
2a11:e82::/32 maxlen: 32
2a11:e87:6000::/36 maxlen: 36
2a11:af01::/32 maxlen: 32
2a11:af02::/32 maxlen: 32
2a11:af04::/32 maxlen: 32
2a12:7c00::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 14 Feb 2024 09:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9b:ca:7e:63:48:5f:4a:57:7e:71:39:df:c6:72:46:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Feb 12 05:29:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c67be133bcaa638cce4a02d2f4c066924af5926b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fc:69:ad:e2:34:12:38:b4:d2:d4:9d:6d:0a:
79:03:64:f0:6f:c7:d9:38:fd:ac:d0:e9:d1:c1:ad:
0d:de:57:ac:3d:ce:c0:65:6e:0f:87:a2:aa:f0:f5:
4d:84:fd:5f:84:83:07:27:dc:71:ab:6d:ff:70:47:
56:75:3b:57:3e:28:91:1d:0e:36:bb:0a:b0:fa:0d:
54:72:f8:cb:b9:3b:58:54:b6:f9:8c:ec:7d:53:19:
12:9c:7a:24:05:76:20:f1:02:9b:8e:ad:4d:63:92:
48:c7:67:d1:81:db:e2:ff:7c:65:32:bd:7c:be:71:
21:dd:7c:e2:ee:75:ab:a5:18:28:ee:73:be:54:43:
bb:94:4e:7e:15:dc:17:a9:a4:0b:6f:b9:1c:63:dd:
28:d9:7d:a5:0e:46:50:29:05:e9:bc:b8:a4:86:50:
7d:f5:cd:17:9f:e1:5f:dd:8f:4e:a6:40:4f:f2:b9:
a4:3f:40:b6:39:fb:d7:9d:34:e1:4a:17:70:d0:b2:
49:f8:68:a8:3a:1d:8a:db:91:b6:e8:fb:90:79:5f:
6d:b2:9a:4c:f4:7e:f5:d6:7c:08:45:ad:e7:25:1e:
ef:f4:23:90:72:1b:1a:33:07:7c:03:73:41:45:70:
27:3f:37:b9:69:ec:0c:a0:4f:98:e2:74:6d:1c:b0:
da:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:E1:33:BC:AA:63:8C:CE:4A:02:D2:F4:C0:66:92:4A:F5:92:6B
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/xnvhM7yqY4zOSgLS9MBmkkr1kms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.210.0/24
45.151.139.0/24
83.171.240.0/22
84.54.36.0/24
93.183.80.0/22
95.215.109.0/24
IPv6:
2a06:d900::/29
2a09:3505:9000::/36
2a09:3505:b000::/36
2a09:3506::/32
2a09:3800::-2a09:3802:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3804::-2a09:3804:6fff:ffff:ffff:ffff:ffff:ffff
2a09:3804:8000::-2a09:3804:afff:ffff:ffff:ffff:ffff:ffff
2a09:3805::-2a09:3807:ffff:ffff:ffff:ffff:ffff:ffff
2a09:3b00::/29
2a09:3d00::/29
2a09:4e01:3000::-2a09:4e01:5fff:ffff:ffff:ffff:ffff:ffff
2a09:4e01:9000::-2a09:4e01:afff:ffff:ffff:ffff:ffff:ffff
2a09:4e03::/32
2a09:6f00::/32
2a09:b680::/29
2a09:bd80::/32
2a0a:4784::/32
2a0c:2103::-2a0c:2104:ffff:ffff:ffff:ffff:ffff:ffff
2a0c:e8c0::/29
2a0d:5ec0::/29
2a0d:8b03::-2a0d:8b04:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:8b07::/32
2a0f:cc80::/31
2a0f:cc87::/36
2a10:c0c0::/29
2a10:c340::/29
2a11:200::/36
2a11:200:4000::/35
2a11:200:7000::-2a11:200:afff:ffff:ffff:ffff:ffff:ffff
2a11:200:c000::-2a11:200:efff:ffff:ffff:ffff:ffff:ffff
2a11:201::-2a11:202:ffff:ffff:ffff:ffff:ffff:ffff
2a11:204::/30
2a11:780::/29
2a11:980::/29
2a11:b80::/29
2a11:e82::/32
2a11:e87:6000::/36
2a11:af01::-2a11:af02:ffff:ffff:ffff:ffff:ffff:ffff
2a11:af04::/32
2a12:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
22:cb:75:60:54:fb:22:56:9b:c1:e9:54:14:3e:2a:fb:03:25:
2b:49:2a:3a:d2:da:77:9e:d4:ed:db:f4:1e:c9:9a:ea:6f:f5:
78:d7:17:b5:b0:7c:25:43:7e:cb:07:f8:a6:3f:69:01:e1:4a:
ac:a5:e9:b0:65:cb:99:5c:fb:7e:12:6e:e6:6a:c4:7e:60:e8:
21:63:09:f9:36:4a:7f:91:36:7b:f4:32:23:d6:b0:d1:97:46:
00:ce:10:50:52:80:d2:07:6a:58:82:4e:eb:ff:d2:c5:24:a4:
94:03:ed:da:ee:e2:97:e7:f1:9c:f5:ad:41:f4:d4:cf:dd:3e:
0a:30:88:7a:b7:c0:dd:c7:bc:3c:6f:26:11:3b:3e:70:95:8b:
13:59:21:fe:8e:78:49:24:71:12:a5:70:3c:d7:3d:de:95:ac:
3a:9a:4b:e6:98:b4:ee:8c:78:81:c9:27:70:3c:eb:b2:5d:8b:
f8:3c:ab:90:f1:af:6f:9b:9d:08:a8:75:10:c8:ea:e6:50:4c:
a9:fa:b1:fe:22:39:fe:6a:d5:59:c4:81:2c:e4:96:ab:56:10:
df:3c:88:b8:80:22:4c:48:a2:16:cf:78:ca:42:a7:7b:78:9f:
76:9e:2e:f7:be:56:a8:0c:b5:64:10:7a:a8:4d:3c:9a:33:37:
ae:6c:50:1a
-----BEGIN CERTIFICATE-----
MIIGwTCCBamgAwIBAgISAY2byn5jSF9KV35xOd/GckZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3
NzliYjEwHhcNMjQwMjEyMDUyOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjdiZTEzM2JjYWE2MzhjY2U0YTAyZDJmNGMwNjY5MjRhZjU5MjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvxpreI0Eji00tSdbQp5A2Twb8fZ
OP2s0OnRwa0N3lesPc7AZW4Ph6Kq8PVNhP1fhIMHJ9xxq23/cEdWdTtXPiiRHQ42
uwqw+g1UcvjLuTtYVLb5jOx9UxkSnHokBXYg8QKbjq1NY5JIx2fRgdvi/3xlMr18
vnEh3Xzi7nWrpRgo7nO+VEO7lE5+FdwXqaQLb7kcY90o2X2lDkZQKQXpvLikhlB9
9c0Xn+Ff3Y9OpkBP8rmkP0C2OfvXnTThShdw0LJJ+GioOh2K25G26PuQeV9tsppM
9H711nwIRa3nJR7v9COQchsaMwd8A3NBRXAnPze5aewMoE+Y4nRtHLDatwIDAQAB
o4IDzTCCA8kwHQYDVR0OBBYEFMZ74TO8qmOMzkoC0vTAZpJK9ZJrMB8GA1UdIwQY
MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt
NmI0MzcyNjAyMDk2LzEveG52aE03eXFZNHpPU2dMUzlNQm1ra3Ixa21zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2
LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB4QYIKwYBBQUHAQcBAf8EggHQMIIBzDAqBAIAATAkAwQA
LY7SAwQALZeLAwQCU6vwAwQAVDYkAwQCXbdQAwQAX9dtMIIBnAQCAAIwggGUAwUD
KgbZAAMGBCoJNQWQAwYEKgk1BbADBQAqCTUGMA0DBAMqCTgDBQAqCTgCMA8DBQIq
CTgEAwYEKgk4BGAwEAMGByoJOASAAwYEKgk4BKAwDgMFACoJOAUDBQMqCTgAAwUD
Kgk7AAMFAyoJPQAwEAMGBCoJTgEwAwYFKglOAUAwEAMGBCoJTgGQAwYEKglOAaAD
BQAqCU4DAwUAKglvAAMFAyoJtoADBQAqCb2AAwUAKgpHhDAOAwUAKgwhAwMFACoM
IQQDBQMqDOjAAwUDKg1ewDAOAwUAKg2LAwMFACoNiwQDBQAqDYsHAwUBKg/MgAMG
BCoPzIcAAwUDKhDAwAMFAyoQw0ADBgQqEQIAAAMGBSoRAgBAMBADBgQqEQIAcAMG
BCoRAgCgMBADBgYqEQIAwAMGBCoRAgDgMA4DBQAqEQIBAwUAKhECAgMFAioRAgQD
BQMqEQeAAwUDKhEJgAMFAyoRC4ADBQAqEQ6CAwYEKhEOh2AwDgMFACoRrwEDBQAq
Ea8CAwUAKhGvBAMFAyoSfAAwDQYJKoZIhvcNAQELBQADggEBACLLdWBU+yJWm8Hp
VBQ+KvsDJStJKjrS2nee1O3b9B7Jmupv9XjXF7WwfCVDfssH+KY/aQHhSqyl6bBl
y5lc+34SbuZqxH5g6CFjCfk2Sn+RNnv0MiPWsNGXRgDOEFBSgNIHaliCTuv/0sUk
pJQD7dru4pfn8Zz1rUH01M/dPgowiHq3wN3HvDxvJhE7PnCVixNZIf6OeEkkcRKl
cDzXPd6VrDqaS+aYtO6MeIHJJ3A867Jdi/g8q5Dxr2+bnQiodRDI6uZQTKn6sf4i
Of5q1VnEgSzklqtWEN88iLiAIkxIohbPeMpCp3t4n3aeLve+VqgMtWQQeqhNPJoz
N65sUBo=
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:20 2025 by rpki-client