Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/mxnr6At-Yd60Y6esdMQLnVhtLVY.roa
File: mxnr6At-Yd60Y6esdMQLnVhtLVY.roa (raw, json)
Hash identifier: o4A9RAc0kg/8ktMDbp3D4v/7qRUno2XIAmg/M0ybzFA=
Subject key identifier: 9B:19:EB:E8:0B:7E:61:DE:B4:63:A7:AC:74:C4:0B:9D:58:6D:2D:56
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 0191F1B2BDAE696B55130EE554438249854E
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/mxnr6At-Yd60Y6esdMQLnVhtLVY.roa
Signing time: Sat 14 Sep 2024 18:01:48 +0000
ROA not before: Sat 14 Sep 2024 18:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39010
IP address blocks: 5.57.3.0/24 maxlen: 24
5.57.4.0/24 maxlen: 24
5.57.5.0/24 maxlen: 24
5.57.6.0/24 maxlen: 24
5.57.7.0/24 maxlen: 24
78.108.160.0/24 maxlen: 24
78.108.161.0/24 maxlen: 24
78.108.162.0/24 maxlen: 24
78.108.163.0/24 maxlen: 24
78.108.164.0/24 maxlen: 24
78.108.165.0/24 maxlen: 24
78.108.166.0/24 maxlen: 24
78.108.167.0/24 maxlen: 24
78.108.169.0/24 maxlen: 24
78.108.170.0/24 maxlen: 24
78.108.171.0/24 maxlen: 24
78.108.172.0/24 maxlen: 24
78.108.174.0/24 maxlen: 24
78.108.175.0/24 maxlen: 24
85.112.64.0/24 maxlen: 24
85.112.65.0/24 maxlen: 24
85.112.66.0/24 maxlen: 24
85.112.67.0/24 maxlen: 24
85.112.69.0/24 maxlen: 24
85.112.70.0/24 maxlen: 24
85.112.71.0/24 maxlen: 24
85.112.72.0/24 maxlen: 24
85.112.74.0/24 maxlen: 24
85.112.75.0/24 maxlen: 24
85.112.76.0/24 maxlen: 24
85.112.77.0/24 maxlen: 24
85.112.78.0/24 maxlen: 24
85.112.82.0/24 maxlen: 24
85.112.83.0/24 maxlen: 24
85.112.84.0/24 maxlen: 24
85.112.85.0/24 maxlen: 24
85.112.86.0/24 maxlen: 24
85.112.87.0/24 maxlen: 24
85.112.88.0/24 maxlen: 24
85.112.89.0/24 maxlen: 24
85.112.90.0/24 maxlen: 24
85.112.91.0/24 maxlen: 24
85.112.92.0/24 maxlen: 24
85.112.93.0/24 maxlen: 24
85.112.94.0/24 maxlen: 24
85.112.95.0/24 maxlen: 24
146.185.32.0/24 maxlen: 24
146.185.33.0/24 maxlen: 24
185.54.60.0/24 maxlen: 24
185.54.61.0/24 maxlen: 24
185.54.62.0/24 maxlen: 24
185.54.63.0/24 maxlen: 24
212.98.129.0/24 maxlen: 24
212.98.130.0/24 maxlen: 24
212.98.131.0/24 maxlen: 24
212.98.132.0/24 maxlen: 24
212.98.133.0/24 maxlen: 24
212.98.135.0/24 maxlen: 24
212.98.136.0/24 maxlen: 24
212.98.137.0/24 maxlen: 24
212.98.138.0/24 maxlen: 24
212.98.139.0/24 maxlen: 24
212.98.140.0/24 maxlen: 24
212.98.141.0/24 maxlen: 24
212.98.142.0/24 maxlen: 24
212.98.143.0/24 maxlen: 24
212.98.144.0/24 maxlen: 24
212.98.145.0/24 maxlen: 24
212.98.146.0/24 maxlen: 24
212.98.147.0/24 maxlen: 24
212.98.148.0/24 maxlen: 24
212.98.149.0/24 maxlen: 24
212.98.150.0/24 maxlen: 24
212.98.151.0/24 maxlen: 24
212.98.152.0/24 maxlen: 24
212.98.153.0/24 maxlen: 24
212.98.154.0/24 maxlen: 24
212.98.155.0/24 maxlen: 24
212.98.156.0/24 maxlen: 24
212.98.157.0/24 maxlen: 24
212.98.158.0/24 maxlen: 24
212.98.159.0/24 maxlen: 24
213.204.64.0/24 maxlen: 24
213.204.65.0/24 maxlen: 24
213.204.66.0/24 maxlen: 24
213.204.67.0/24 maxlen: 24
213.204.68.0/24 maxlen: 24
213.204.69.0/24 maxlen: 24
213.204.70.0/24 maxlen: 24
213.204.71.0/24 maxlen: 24
213.204.72.0/24 maxlen: 24
213.204.73.0/24 maxlen: 24
213.204.74.0/24 maxlen: 24
213.204.75.0/24 maxlen: 24
213.204.76.0/23 maxlen: 23
213.204.76.0/24 maxlen: 24
213.204.77.0/24 maxlen: 24
213.204.78.0/24 maxlen: 24
213.204.79.0/24 maxlen: 24
213.204.80.0/24 maxlen: 24
213.204.81.0/24 maxlen: 24
213.204.82.0/24 maxlen: 24
213.204.83.0/24 maxlen: 24
213.204.84.0/24 maxlen: 24
213.204.85.0/24 maxlen: 24
213.204.86.0/24 maxlen: 24
213.204.87.0/24 maxlen: 24
213.204.88.0/24 maxlen: 24
213.204.89.0/24 maxlen: 24
213.204.90.0/24 maxlen: 24
213.204.91.0/24 maxlen: 24
213.204.92.0/24 maxlen: 24
213.204.93.0/24 maxlen: 24
213.204.94.0/24 maxlen: 24
213.204.95.0/24 maxlen: 24
213.204.97.0/24 maxlen: 24
213.204.98.0/24 maxlen: 24
213.204.99.0/24 maxlen: 24
213.204.100.0/24 maxlen: 24
213.204.101.0/24 maxlen: 24
213.204.102.0/24 maxlen: 24
213.204.103.0/24 maxlen: 24
213.204.104.0/24 maxlen: 24
213.204.105.0/24 maxlen: 24
213.204.106.0/24 maxlen: 24
213.204.107.0/24 maxlen: 24
213.204.108.0/24 maxlen: 24
213.204.109.0/24 maxlen: 24
213.204.110.0/24 maxlen: 24
213.204.111.0/24 maxlen: 24
213.204.112.0/24 maxlen: 24
213.204.113.0/24 maxlen: 24
213.204.114.0/24 maxlen: 24
213.204.115.0/24 maxlen: 24
213.204.116.0/24 maxlen: 24
213.204.117.0/24 maxlen: 24
213.204.118.0/24 maxlen: 24
213.204.119.0/24 maxlen: 24
213.204.120.0/24 maxlen: 24
213.204.121.0/24 maxlen: 24
213.204.122.0/24 maxlen: 24
213.204.123.0/24 maxlen: 24
213.204.124.0/24 maxlen: 24
213.204.125.0/24 maxlen: 24
213.204.126.0/24 maxlen: 24
213.204.127.0/24 maxlen: 24
2a00:1580::/29 maxlen: 29
2a00:1580::/48 maxlen: 48
2a00:1580:2::/48 maxlen: 48
2a00:1580:4::/48 maxlen: 48
2a00:1580:5::/48 maxlen: 48
2a00:1582::/48 maxlen: 48
2a00:1582:2::/48 maxlen: 48
2a00:1582:3007::/48 maxlen: 48
2a00:1582:300e::/48 maxlen: 48
2a00:1582:300f:f::/64 maxlen: 64
Validation: Failed, certificate revoked on Wed 25 Sep 2024 12:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f1:b2:bd:ae:69:6b:55:13:0e:e5:54:43:82:49:85:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Sep 14 18:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b19ebe80b7e61deb463a7ac74c40b9d586d2d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:87:18:1a:de:de:a1:6c:84:4b:92:19:2c:
f2:47:b5:ee:02:43:33:25:cf:71:9e:ae:8e:13:83:
2f:dc:6e:61:0d:1c:45:07:bd:43:5c:35:ca:99:98:
b0:38:32:0f:25:1e:10:c3:80:02:ba:83:6c:f8:4c:
49:a0:e4:9b:3f:68:09:01:c9:c9:7a:8d:ff:54:4d:
e0:8b:a0:ef:01:35:94:4f:ae:33:cb:6d:c2:2e:62:
47:27:f6:72:57:54:95:cb:50:66:2e:70:59:ce:57:
a3:4a:81:b9:dc:c2:70:4d:fb:d5:1c:5f:43:59:d8:
40:f7:49:a3:d9:e4:3e:d9:dd:5b:21:97:af:00:5d:
84:1a:2c:fb:ec:b9:69:c6:90:c9:98:bb:d5:13:26:
ab:4f:c0:32:5c:f6:17:0f:ad:ee:58:63:2d:60:e2:
c2:03:db:c8:aa:c6:d8:40:41:6b:1c:51:bc:1d:78:
f2:6a:a7:c2:86:35:60:41:01:c6:81:2c:01:ae:ce:
89:77:6c:8b:36:e4:58:e0:d2:79:e7:20:53:5c:7f:
47:5a:31:63:47:75:d9:bb:2e:88:52:51:6c:01:e9:
89:e0:86:41:00:8b:6a:4a:9a:f9:6d:25:e5:0c:4c:
fd:95:44:88:af:5f:1e:72:31:1d:41:42:f6:c3:1b:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:19:EB:E8:0B:7E:61:DE:B4:63:A7:AC:74:C4:0B:9D:58:6D:2D:56
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/mxnr6At-Yd60Y6esdMQLnVhtLVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.3.0-5.57.7.255
78.108.160.0/21
78.108.169.0-78.108.172.255
78.108.174.0/23
85.112.64.0/22
85.112.69.0-85.112.72.255
85.112.74.0-85.112.78.255
85.112.82.0-85.112.95.255
146.185.32.0/23
185.54.60.0/22
212.98.129.0-212.98.133.255
212.98.135.0-212.98.159.255
213.204.64.0/19
213.204.97.0-213.204.127.255
IPv6:
2a00:1580::/29
Signature Algorithm: sha256WithRSAEncryption
06:14:38:7b:a0:c1:48:83:90:f2:5c:7d:cd:4b:b9:0a:27:7d:
61:31:7b:c0:c5:80:b4:37:65:d6:63:9b:d2:1b:25:b7:15:ed:
d3:d9:61:8f:e1:2e:a1:90:8d:9f:4f:c5:da:8c:b9:e4:5c:76:
29:8b:e8:25:cd:65:dd:2a:6c:9b:81:8e:5c:0f:16:2e:54:4d:
a5:1b:63:53:18:e5:55:c6:aa:27:37:a3:e8:96:e1:bb:30:b6:
a9:3d:0e:20:00:61:55:7f:6b:33:cc:e6:b1:3f:ba:df:32:91:
84:6c:88:9b:fd:a1:fa:26:a7:0c:0b:a0:1d:7f:ca:6e:5b:e9:
17:e5:cf:00:a8:1d:65:95:de:c5:77:e6:df:04:51:24:9f:3a:
2e:02:4a:ed:6e:20:7d:8d:94:a6:ac:5a:21:73:57:15:e0:1e:
e4:8f:fc:b2:22:21:a3:0b:14:d5:f1:ec:80:82:dd:57:fd:e5:
60:45:f3:34:a9:98:9f:55:bf:c3:da:3f:e7:0c:64:0b:88:63:
c3:f2:41:75:79:7b:77:ab:0c:d7:49:69:20:be:e3:d2:d6:3a:
dd:b8:be:f3:a3:1d:db:fe:07:00:ba:da:53:d3:44:c3:37:51:
42:c4:3e:22:81:fe:0e:c9:d1:24:8d:1d:13:36:dc:93:07:e6:
2d:2e:18:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 15:26:31 2024 by rpki-client on console-fra.rpki-client.org