Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/6YAn-OtLUMEjzBk9LDAJFYeGdCE.roa
File: 6YAn-OtLUMEjzBk9LDAJFYeGdCE.roa (raw, json)
Hash identifier: DimtutbKgSlv8+vRzMuXLMast0Qyx8g+7POAqymP/4I=
Subject key identifier: E9:80:27:F8:EB:4B:50:C1:23:CC:19:3D:2C:30:09:15:87:86:74:21
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 018CC424802A3B0524EFB54B62F3D07C883C
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/6YAn-OtLUMEjzBk9LDAJFYeGdCE.roa
Signing time: Mon 01 Jan 2024 08:29:35 +0000
ROA not before: Mon 01 Jan 2024 08:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39010
IP address blocks: 85.112.64.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.3.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
2a00:1580::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580::/29 maxlen: 29
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate revoked on Sat 14 Sep 2024 18:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:80:2a:3b:05:24:ef:b5:4b:62:f3:d0:7c:88:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 08:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e98027f8eb4b50c123cc193d2c30091587867421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:87:a8:77:30:45:f5:c1:a4:55:ce:5f:6e:
ee:3f:86:eb:ad:89:2f:5a:4e:f1:3e:9a:f8:7c:ea:
51:6f:92:40:b7:0b:ac:66:95:06:6f:f7:e0:6c:ad:
4f:21:f2:fe:06:6f:93:34:34:8b:5a:5f:fe:54:83:
ec:72:b7:cc:55:2c:fc:18:ef:94:34:7f:7b:fc:ac:
39:eb:21:21:ad:ba:12:da:db:e5:f0:b8:f7:4a:a3:
a2:28:92:7c:b4:5e:e7:1f:0b:2b:88:96:1d:c8:69:
bf:fb:12:59:53:26:14:95:c6:bc:2c:6d:7a:69:a7:
6a:3d:2b:28:0e:ab:f9:90:26:3b:c7:81:29:c4:1f:
6c:9b:4e:55:a3:e3:4e:0b:5a:a2:d4:27:69:4a:78:
6e:dc:95:ad:18:56:7d:63:c1:1c:ed:a1:a2:13:8c:
bb:85:65:33:ab:29:66:4e:08:a5:7a:98:26:2c:d6:
7f:74:f8:16:56:be:2d:22:af:26:3b:1c:5e:7a:04:
d3:3d:cd:20:e6:3b:c5:3a:2c:54:ce:bb:37:dc:86:
af:eb:9e:64:7e:40:b3:2a:3b:3c:95:56:bd:ea:e4:
1d:35:bf:e1:ce:e5:b5:77:cc:2b:b9:f2:20:02:28:
ae:96:32:f8:1e:bc:6b:e7:a9:56:d5:b1:d6:5a:19:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:80:27:F8:EB:4B:50:C1:23:CC:19:3D:2C:30:09:15:87:86:74:21
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/6YAn-OtLUMEjzBk9LDAJFYeGdCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
5e:71:37:9f:28:16:b2:4b:69:8b:fb:55:11:bf:f7:06:65:2c:
2d:ea:f0:37:eb:02:ee:3f:10:2b:79:b1:b8:96:2a:40:cf:31:
dd:08:2f:9f:21:6d:7f:d4:35:13:7e:24:dc:c9:4a:dd:ac:e7:
97:90:94:5c:77:cc:2e:c4:93:3a:b8:be:7c:ae:44:66:89:38:
95:4f:75:75:99:3c:b6:15:75:80:1f:d4:60:af:e6:8b:23:79:
9e:9f:84:48:33:de:0a:5c:38:f9:00:9f:ea:5f:3b:c5:d2:ad:
e8:cf:5c:0d:f3:49:a1:77:b5:38:c7:2a:ee:ff:ad:f6:89:24:
05:d9:f6:16:3c:5f:c0:4a:f8:70:78:46:53:bc:1a:d4:56:c3:
ef:0a:4a:29:96:ee:0d:95:29:23:54:8e:a9:bf:ed:ad:6e:04:
74:39:e0:7a:e6:fd:a2:06:db:db:b1:28:0f:42:80:89:2c:6b:
b3:a9:f9:a8:17:33:05:59:d4:ad:0c:cb:57:7e:ce:40:3b:00:
d6:e6:cd:70:3d:e2:16:41:4a:00:29:36:3a:4c:54:24:b2:a4:
6f:31:1d:2c:99:e4:66:bf:e1:ec:69:bb:e2:28:3a:d6:7b:dd:
94:d9:1c:2a:f3:f2:72:79:fa:16:e1:9c:6f:9d:10:d7:97:91:
96:76:8e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 21:01:30 2024 by rpki-client on console-ams.rpki-client.org