Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/6EMGwm6q22ODk6jWPJuIDAnJbys.roa
File: 6EMGwm6q22ODk6jWPJuIDAnJbys.roa (raw, json)
Hash identifier: hCNpYYIMtXjQehTJ+GmSVE2YEEpccawx7CSslR50sZU=
Subject key identifier: E8:43:06:C2:6E:AA:DB:63:83:93:A8:D6:3C:9B:88:0C:09:C9:6F:2B
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 0191DD48EA49F2D0EB02557D71D158E423B1
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/6EMGwm6q22ODk6jWPJuIDAnJbys.roa
Signing time: Tue 10 Sep 2024 18:53:48 +0000
ROA not before: Tue 10 Sep 2024 18:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203
IP address blocks: 149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
195.203.156.0/22 maxlen: 22
217.27.4.0/24 maxlen: 24
217.27.6.0/24 maxlen: 24
217.27.7.0/24 maxlen: 24
2a03:5000:1::/48 maxlen: 48
2a03:5000:2::/48 maxlen: 48
2a03:5000:11::/48 maxlen: 48
2a03:5000:12::/48 maxlen: 48
2a03:5000:20::/48 maxlen: 48
2a03:5000:21::/48 maxlen: 48
2a03:5000:22::/48 maxlen: 48
2a03:5000:30::/48 maxlen: 48
2a03:5000:31::/48 maxlen: 48
2a03:5000:32::/48 maxlen: 48
2a03:5000:41::/48 maxlen: 48
2a03:5000:42::/48 maxlen: 48
2a03:5000:51::/48 maxlen: 48
2a03:5000:52::/48 maxlen: 48
2a03:5000:61::/48 maxlen: 48
2a03:5000:62::/48 maxlen: 48
2a03:5000:71::/48 maxlen: 48
2a03:5000:72::/48 maxlen: 48
2a03:5000:81::/48 maxlen: 48
2a03:5000:82::/48 maxlen: 48
2a03:5000:91::/48 maxlen: 48
2a03:5000:92::/48 maxlen: 48
2a03:5000:101::/48 maxlen: 48
2a03:5000:102::/48 maxlen: 48
2a03:5000:111::/48 maxlen: 48
2a03:5000:112::/48 maxlen: 48
2a03:5000:121::/48 maxlen: 48
2a03:5000:122::/48 maxlen: 48
2a03:5000:131::/48 maxlen: 48
2a03:5000:132::/48 maxlen: 48
2a03:5000:141::/48 maxlen: 48
2a03:5000:142::/48 maxlen: 48
2a03:5000:151::/48 maxlen: 48
2a03:5000:152::/48 maxlen: 48
2a03:5000:161::/48 maxlen: 48
2a03:5000:162::/48 maxlen: 48
2a03:5000:171::/48 maxlen: 48
2a03:5000:172::/48 maxlen: 48
2a03:5000:181::/48 maxlen: 48
2a03:5000:182::/48 maxlen: 48
2a03:5000:191::/48 maxlen: 48
2a03:5000:192::/48 maxlen: 48
2a03:5000:201::/48 maxlen: 48
2a03:5000:202::/48 maxlen: 48
2a03:5000:211::/48 maxlen: 48
2a03:5000:212::/48 maxlen: 48
2a03:5000:221::/48 maxlen: 48
2a03:5000:222::/48 maxlen: 48
2a03:5000:231::/48 maxlen: 48
2a03:5000:232::/48 maxlen: 48
2a03:5000:241::/48 maxlen: 48
2a03:5000:242::/48 maxlen: 48
2a03:5000:251::/48 maxlen: 48
2a03:5000:252::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 11 Sep 2024 13:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:dd:48:ea:49:f2:d0:eb:02:55:7d:71:d1:58:e4:23:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Sep 10 18:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84306c26eaadb638393a8d63c9b880c09c96f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:15:39:db:eb:6e:80:95:4a:b5:b0:e7:81:
31:42:ff:33:77:3a:1a:dd:97:73:4e:65:63:93:0b:
b6:1a:a2:24:f8:f3:88:3e:a4:2d:1c:7d:c6:4d:53:
4d:56:05:ac:3d:bf:d4:6d:bf:f5:67:a3:e3:9a:f5:
ab:5f:55:9e:4f:ab:62:ab:11:a7:19:28:b8:f9:ae:
7d:3b:13:f7:a1:dd:1e:35:3c:ef:42:88:39:42:4d:
35:b2:62:f4:98:a9:f6:7e:ad:2c:c2:e0:ec:71:e9:
cc:14:07:4b:f0:60:ac:f7:30:f5:22:41:a8:95:c8:
d3:af:f5:60:9e:84:66:16:69:58:85:f6:d3:c7:03:
b6:ec:f5:3f:29:c7:bd:55:6d:e7:58:15:23:35:53:
0e:b6:3d:b1:52:83:3a:93:51:59:80:7b:2b:c6:43:
4e:1d:e8:f4:67:30:1a:04:8a:8d:2c:09:55:fc:eb:
0b:49:2a:70:37:b3:6f:a9:6b:45:d8:ff:c5:67:c9:
cb:7d:58:1f:a2:5c:1b:9b:17:38:63:df:b3:f2:cc:
db:7b:e1:96:a1:79:12:2e:27:13:91:4b:fd:60:fe:
6b:e7:7c:3d:ec:92:f7:dc:07:0b:94:bf:b5:2a:3a:
3e:e7:b8:7f:86:43:05:d6:d3:22:09:58:ed:27:72:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:43:06:C2:6E:AA:DB:63:83:93:A8:D6:3C:9B:88:0C:09:C9:6F:2B
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/6EMGwm6q22ODk6jWPJuIDAnJbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.156.0/22
217.27.4.0/24
217.27.6.0/23
IPv6:
2a03:5000:1::-2a03:5000:2:ffff:ffff:ffff:ffff:ffff
2a03:5000:11::-2a03:5000:12:ffff:ffff:ffff:ffff:ffff
2a03:5000:20::-2a03:5000:22:ffff:ffff:ffff:ffff:ffff
2a03:5000:30::-2a03:5000:32:ffff:ffff:ffff:ffff:ffff
2a03:5000:41::-2a03:5000:42:ffff:ffff:ffff:ffff:ffff
2a03:5000:51::-2a03:5000:52:ffff:ffff:ffff:ffff:ffff
2a03:5000:61::-2a03:5000:62:ffff:ffff:ffff:ffff:ffff
2a03:5000:71::-2a03:5000:72:ffff:ffff:ffff:ffff:ffff
2a03:5000:81::-2a03:5000:82:ffff:ffff:ffff:ffff:ffff
2a03:5000:91::-2a03:5000:92:ffff:ffff:ffff:ffff:ffff
2a03:5000:101::-2a03:5000:102:ffff:ffff:ffff:ffff:ffff
2a03:5000:111::-2a03:5000:112:ffff:ffff:ffff:ffff:ffff
2a03:5000:121::-2a03:5000:122:ffff:ffff:ffff:ffff:ffff
2a03:5000:131::-2a03:5000:132:ffff:ffff:ffff:ffff:ffff
2a03:5000:141::-2a03:5000:142:ffff:ffff:ffff:ffff:ffff
2a03:5000:151::-2a03:5000:152:ffff:ffff:ffff:ffff:ffff
2a03:5000:161::-2a03:5000:162:ffff:ffff:ffff:ffff:ffff
2a03:5000:171::-2a03:5000:172:ffff:ffff:ffff:ffff:ffff
2a03:5000:181::-2a03:5000:182:ffff:ffff:ffff:ffff:ffff
2a03:5000:191::-2a03:5000:192:ffff:ffff:ffff:ffff:ffff
2a03:5000:201::-2a03:5000:202:ffff:ffff:ffff:ffff:ffff
2a03:5000:211::-2a03:5000:212:ffff:ffff:ffff:ffff:ffff
2a03:5000:221::-2a03:5000:222:ffff:ffff:ffff:ffff:ffff
2a03:5000:231::-2a03:5000:232:ffff:ffff:ffff:ffff:ffff
2a03:5000:241::-2a03:5000:242:ffff:ffff:ffff:ffff:ffff
2a03:5000:251::-2a03:5000:252:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4a:fe:16:0e:87:9d:84:45:a4:59:6d:33:c0:db:29:26:bc:71:
0b:8e:69:b5:a1:85:8b:b4:ed:35:a0:a6:b6:83:d9:7a:03:50:
f3:cd:8f:9b:a7:27:19:f5:a6:c1:a5:9c:94:a9:5c:fd:bd:9f:
3f:31:e1:f5:26:b8:42:7f:84:5d:41:2a:c0:af:af:89:23:5b:
14:d7:ee:20:10:74:13:dd:44:09:79:c6:87:02:12:d5:08:44:
69:34:92:6b:53:f3:5f:1c:b1:01:f2:03:94:9b:7b:55:ff:6f:
eb:a7:e9:2c:cb:61:d4:c7:bb:08:96:23:8d:9a:e9:8e:b8:e7:
38:d7:5d:27:97:a0:05:97:f2:39:ca:13:53:88:41:ff:09:0d:
60:b6:6a:48:1a:92:12:11:8e:30:d5:d0:68:0c:96:48:0f:2d:
61:7d:42:dc:0a:41:31:73:16:5d:63:0e:ad:f3:d2:26:2d:9e:
9a:be:38:8a:45:30:e3:74:fe:b1:2e:d7:0c:6e:f6:21:e7:48:
de:54:e4:a8:ea:0a:a7:01:79:3e:37:2c:78:a4:e3:4b:73:e5:
ef:23:f7:d4:0f:1f:dc:98:8a:41:b5:b0:62:ab:66:35:46:1a:
10:dd:79:05:a7:45:c9:f7:d3:c1:ee:94:e1:dd:14:52:91:b7:
e8:d7:03:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 15:34:14 2024 by rpki-client on console-fra.rpki-client.org