Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yETh3zbcMqSiv2pvXuPYbmzkNgw.roa
File: yETh3zbcMqSiv2pvXuPYbmzkNgw.roa (raw, json)
Hash identifier: f2CRocESgv/xCeGGsPOYwzXtr1IJx0XlGr/44ohfsEM=
Subject key identifier: C8:44:E1:DF:36:DC:32:A4:A2:BF:6A:6F:5E:E3:D8:6E:6C:E4:36:0C
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 018A4561B00E321107E37DBA12F424846A7F
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yETh3zbcMqSiv2pvXuPYbmzkNgw.roa
Signing time: Wed 30 Aug 2023 07:39:04 +0000
ROA not before: Wed 30 Aug 2023 07:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59504
IP address blocks: 194.113.104.114/32 maxlen: 32
95.215.110.0/23 maxlen: 23
95.215.108.0/23 maxlen: 23
45.151.137.0/24 maxlen: 24
45.151.136.0/22 maxlen: 22
45.151.136.0/24 maxlen: 24
185.197.73.0/24 maxlen: 24
185.197.72.0/24 maxlen: 24
80.76.40.0/24 maxlen: 24
185.156.179.0/24 maxlen: 24
185.156.178.0/24 maxlen: 24
185.156.178.0/23 maxlen: 23
185.156.177.0/24 maxlen: 24
185.156.176.0/24 maxlen: 24
185.156.176.0/22 maxlen: 22
193.38.232.0/23 maxlen: 23
193.38.234.0/24 maxlen: 24
185.254.190.0/24 maxlen: 24
185.254.189.0/24 maxlen: 24
185.254.188.0/24 maxlen: 24
194.113.104.0/24 maxlen: 24
194.113.107.0/24 maxlen: 24
185.177.115.0/24 maxlen: 24
185.177.113.0/24 maxlen: 24
185.220.35.0/24 maxlen: 24
185.220.34.0/24 maxlen: 24
185.220.33.0/24 maxlen: 24
185.220.32.0/24 maxlen: 24
185.230.142.0/24 maxlen: 24
185.230.140.0/23 maxlen: 23
45.142.208.0/24 maxlen: 24
84.54.37.0/24 maxlen: 24
84.54.39.0/24 maxlen: 24
185.118.64.0/24 maxlen: 24
185.118.64.0/22 maxlen: 22
185.118.67.0/24 maxlen: 24
185.118.66.0/24 maxlen: 24
185.118.66.0/23 maxlen: 23
185.118.65.0/24 maxlen: 24
185.246.117.0/24 maxlen: 24
185.246.116.0/24 maxlen: 24
185.246.119.0/24 maxlen: 24
2a05:fb41::/32 maxlen: 32
2a07:14c0:1::/48 maxlen: 48
2a0d:60c1::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a0d:7747::/32 maxlen: 32
2a05:fb42::/32 maxlen: 32
2a0a:4780::/32 maxlen: 32
2a0d:60c3::/32 maxlen: 32
2a07:14c1::/32 maxlen: 32
2a0d:60c0::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a07:14c7::/32 maxlen: 32
2a05:fb44::/32 maxlen: 32
2a07:14c6::/32 maxlen: 32
2a07:14c0:6000::/36 maxlen: 36
2a07:14c0:d000::/36 maxlen: 36
2a07:14c0:1000::/36 maxlen: 36
2a07:14c0:5000::/36 maxlen: 36
2a07:14c0:4000::/36 maxlen: 36
2a07:14c0:3000::/36 maxlen: 36
2a0c:5241::/32 maxlen: 32
2a0d:7740::/32 maxlen: 32
2a0c:5247:7000::/36 maxlen: 36
2a0c:5247:c000::/36 maxlen: 36
2a0c:5247:d000::/36 maxlen: 36
2a0c:5247:e000::/36 maxlen: 36
2a0c:5247:f000::/36 maxlen: 36
2a0c:5245::/32 maxlen: 32
2a0a:4785::/32 maxlen: 32
2a07:14c0::/48 maxlen: 48
2a05:fb45::/32 maxlen: 32
2a07:14c2::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:61:b0:0e:32:11:07:e3:7d:ba:12:f4:24:84:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Aug 30 07:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c844e1df36dc32a4a2bf6a6f5ee3d86e6ce4360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:6a:86:eb:52:b2:78:dd:20:0c:a8:de:81:
82:50:1c:e4:78:45:3b:d6:97:f2:35:25:49:61:db:
b8:de:93:47:c2:80:47:1f:f6:b5:53:ec:d3:89:57:
91:7b:00:24:52:65:4b:c6:e5:60:a5:5d:3f:d9:c6:
29:40:47:26:37:b0:d2:e1:b9:e2:1d:97:1d:90:63:
6a:44:db:7e:7d:53:f6:81:dd:96:0f:da:89:54:7e:
7d:37:01:5f:35:73:43:21:b3:da:1d:e2:b8:8e:5c:
46:50:c8:e1:96:5b:01:b0:1e:52:a1:d2:97:8b:14:
69:fa:7b:40:46:d5:21:65:e9:a1:25:cf:17:a8:2b:
10:59:e4:cc:08:ff:47:ad:6c:da:2d:f2:da:c0:1c:
92:60:c6:49:3e:06:f3:27:b9:bc:51:6a:c2:30:92:
50:09:27:6b:5e:08:b9:57:f7:bb:46:f7:2c:47:d1:
2b:a1:66:e4:0c:0d:6c:37:ad:8a:36:40:11:28:75:
f0:68:1d:a4:25:15:5a:eb:80:28:88:71:36:33:da:
44:9f:7d:82:14:5c:42:d4:17:80:4f:79:c0:9a:de:
cc:43:12:90:ca:a9:45:89:9f:cc:87:a1:25:fd:2b:
69:a3:0f:89:71:cd:cd:5c:11:64:39:1d:49:c9:a8:
bb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:E1:DF:36:DC:32:A4:A2:BF:6A:6F:5E:E3:D8:6E:6C:E4:36:0C
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/yETh3zbcMqSiv2pvXuPYbmzkNgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.208.0/24
45.151.136.0/22
80.76.40.0/24
84.54.37.0/24
84.54.39.0/24
95.215.108.0/22
185.118.64.0/22
185.156.176.0/22
185.177.113.0/24
185.177.115.0/24
185.197.72.0/23
185.220.32.0/22
185.230.140.0-185.230.142.255
185.246.116.0/23
185.246.119.0/24
185.254.188.0-185.254.190.255
193.38.232.0-193.38.234.255
194.113.104.0/24
194.113.107.0/24
IPv6:
2a05:fb41::-2a05:fb42:ffff:ffff:ffff:ffff:ffff:ffff
2a05:fb44::/31
2a07:14c0::/47
2a07:14c0:1000::/36
2a07:14c0:3000::-2a07:14c0:6fff:ffff:ffff:ffff:ffff:ffff
2a07:14c0:d000::/36
2a07:14c1::-2a07:14c2:ffff:ffff:ffff:ffff:ffff:ffff
2a07:14c6::/31
2a0a:4780::/30
2a0a:4785::/32
2a0c:5241::/32
2a0c:5245::/32
2a0c:5247:7000::/36
2a0c:5247:c000::/34
2a0d:60c0::/31
2a0d:60c3::/32
2a0d:7740::/32
2a0d:7747::/32
Signature Algorithm: sha256WithRSAEncryption
07:6f:9e:5e:17:4f:4b:ab:89:bb:d9:eb:21:75:44:fb:ab:6b:
ce:52:c9:16:4f:d3:f3:20:80:e2:fd:d4:2c:d9:db:05:53:2b:
aa:18:72:76:8d:6b:d9:64:ce:19:1d:d5:78:6e:81:3a:89:1f:
ca:87:5b:7b:ba:12:e9:77:c4:f7:fe:34:fb:db:19:dc:3a:4f:
5c:9f:e0:fa:ca:b1:c2:1b:88:2e:77:20:9d:5c:88:84:66:39:
c0:c6:c1:32:70:0f:54:60:97:7c:cf:d5:a6:c0:66:b1:b4:4b:
24:93:2f:75:b5:14:64:4f:ee:81:44:fd:90:cc:65:77:c5:02:
e1:57:de:16:1a:95:a8:c8:a4:33:88:78:ce:16:8f:33:91:b8:
52:1d:c1:99:6f:26:bf:17:3f:0f:08:e1:59:22:bc:9d:a3:d3:
9f:3f:03:84:53:49:dd:d0:6f:18:69:7d:80:f3:f7:5d:f2:12:
61:f9:d6:ad:ca:e3:03:e5:e1:df:5c:e0:6d:5c:c6:cc:7d:99:
0e:7c:37:8d:c5:52:47:d6:1d:70:e2:31:11:d7:f2:dc:45:91:
48:0f:cd:68:1c:8c:73:71:73:96:c8:ea:01:0c:9b:b7:ff:ac:
7f:dc:cd:8d:8e:6d:60:05:33:a3:aa:2f:8f:65:29:41:c8:58:
27:d8:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 06:26:15 2023 by rpki-client on console-fra.rpki-client.org