Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/6WdQto6w5ArTqGfhJh3mrlEvhg8.roa
File: 6WdQto6w5ArTqGfhJh3mrlEvhg8.roa (raw, json)
Hash identifier: znX68QGhPtTakzeLZ0lovPMvMcC6TaQlH0mRYeLuKjA=
Subject key identifier: E9:67:50:B6:8E:B0:E4:0A:D3:A8:67:E1:26:1D:E6:AE:51:2F:86:0F
Certificate issuer: /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial: 0191F195721DE1CDD990514915DED97B7773
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/6WdQto6w5ArTqGfhJh3mrlEvhg8.roa
Signing time: Sat 14 Sep 2024 17:29:48 +0000
ROA not before: Sat 14 Sep 2024 17:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49453
IP address blocks: 37.123.208.0/24 maxlen: 24
37.123.210.0/24 maxlen: 24
45.133.250.0/24 maxlen: 24
109.202.97.0/24 maxlen: 24
109.202.98.0/24 maxlen: 24
109.202.99.0/24 maxlen: 24
109.202.100.0/24 maxlen: 24
109.202.101.0/24 maxlen: 24
109.202.102.0/24 maxlen: 24
109.202.103.0/24 maxlen: 24
109.202.104.0/24 maxlen: 24
109.202.106.0/24 maxlen: 24
109.202.107.0/24 maxlen: 24
109.202.108.0/24 maxlen: 24
109.202.109.0/24 maxlen: 24
109.202.110.0/24 maxlen: 24
109.202.111.0/24 maxlen: 24
109.232.224.0/24 maxlen: 24
109.232.225.0/24 maxlen: 24
109.232.226.0/24 maxlen: 24
109.232.227.0/24 maxlen: 24
109.232.228.0/24 maxlen: 24
109.232.229.0/24 maxlen: 24
109.232.230.0/24 maxlen: 24
109.232.231.0/24 maxlen: 24
134.19.176.0/24 maxlen: 24
134.19.177.0/24 maxlen: 24
134.19.178.0/24 maxlen: 24
134.19.179.0/24 maxlen: 24
134.19.180.0/24 maxlen: 24
134.19.181.0/24 maxlen: 24
134.19.182.0/24 maxlen: 24
134.19.183.0/24 maxlen: 24
134.19.184.0/24 maxlen: 24
134.19.185.0/24 maxlen: 24
134.19.186.0/24 maxlen: 24
134.19.187.0/24 maxlen: 24
134.19.188.0/24 maxlen: 24
134.19.189.0/24 maxlen: 24
134.19.190.0/23 maxlen: 23
185.23.212.0/22 maxlen: 22
185.23.214.0/24 maxlen: 24
188.95.49.0/24 maxlen: 24
188.95.50.0/24 maxlen: 24
188.95.51.0/24 maxlen: 24
188.95.52.0/24 maxlen: 24
188.95.53.0/24 maxlen: 24
213.152.160.0/24 maxlen: 24
213.152.161.0/24 maxlen: 24
213.152.162.0/24 maxlen: 24
213.152.163.0/24 maxlen: 24
213.152.164.0/24 maxlen: 24
213.152.165.0/24 maxlen: 24
213.152.166.0/24 maxlen: 24
213.152.167.0/24 maxlen: 24
213.152.168.0/24 maxlen: 24
213.152.169.0/24 maxlen: 24
213.152.170.0/24 maxlen: 24
213.152.171.0/24 maxlen: 24
213.152.172.0/24 maxlen: 24
213.152.173.0/24 maxlen: 24
213.152.174.0/24 maxlen: 24
213.152.176.0/24 maxlen: 24
213.152.177.0/24 maxlen: 24
213.152.180.0/24 maxlen: 24
213.152.181.0/24 maxlen: 24
213.152.182.0/24 maxlen: 24
213.152.183.0/24 maxlen: 24
213.152.184.0/24 maxlen: 24
213.152.185.0/24 maxlen: 24
213.152.186.0/24 maxlen: 24
213.152.187.0/24 maxlen: 24
213.152.188.0/22 maxlen: 22
213.152.188.0/24 maxlen: 24
213.152.189.0/24 maxlen: 24
2a00:1678:1337::/48 maxlen: 48
2a00:1678:2470::/48 maxlen: 48
2a00:1678:3cc0::/48 maxlen: 48
2a00:1678:5afe::/48 maxlen: 48
2a00:1678:b00b::/48 maxlen: 48
2a00:1678:baba::/48 maxlen: 48
2a00:1678:da7a::/48 maxlen: 48
2a00:1678:dea1::/48 maxlen: 48
2a00:1678:efa5::/48 maxlen: 48
2a00:1678:fa11::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Sep 2024 09:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f1:95:72:1d:e1:cd:d9:90:51:49:15:de:d9:7b:77:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
Validity
Not Before: Sep 14 17:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e96750b68eb0e40ad3a867e1261de6ae512f860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:b4:ab:b5:17:9a:cc:85:f9:30:5d:a2:51:
52:7d:88:a1:74:7f:63:c7:ee:d1:29:d9:45:bd:3e:
3e:b8:b7:4b:70:40:b8:8e:8d:67:aa:e4:09:f8:5b:
9b:88:bd:45:37:11:32:7e:1b:5a:8e:60:7b:1f:0e:
df:e8:c3:46:c6:7a:74:35:f8:9a:3f:d7:11:e0:92:
ec:1e:e2:b5:d7:41:8a:ae:76:b1:84:cc:39:17:d4:
8d:2f:21:f0:c2:a8:ff:29:72:87:1b:87:cf:8b:f5:
c5:5b:a4:61:50:10:0f:b6:84:8e:65:69:40:e0:74:
1c:7c:23:a6:a2:b7:97:d5:80:44:f8:17:b8:f7:98:
50:2b:19:c2:8c:e8:81:3f:3a:39:a4:c7:12:5d:ca:
31:95:a3:d9:46:48:0c:00:f4:c9:44:71:13:bc:e7:
83:55:be:e0:38:1c:f0:31:a5:45:3b:8c:bb:23:be:
04:35:fd:e5:f3:5f:53:b1:d7:82:e5:bc:d4:69:52:
25:9f:a4:75:5b:3a:f3:42:5f:89:7e:ab:3b:2e:b4:
a1:32:22:dc:89:dc:49:c7:49:87:66:f5:8c:15:b2:
cb:62:f6:27:e2:e7:eb:df:35:4f:59:b3:7c:de:0d:
40:ad:63:f0:ac:dd:58:ad:58:ac:a1:37:a5:87:3a:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:67:50:B6:8E:B0:E4:0A:D3:A8:67:E1:26:1D:E6:AE:51:2F:86:0F
X509v3 Authority Key Identifier:
keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/6WdQto6w5ArTqGfhJh3mrlEvhg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.208.0/24
37.123.210.0/24
45.133.250.0/24
109.202.97.0-109.202.104.255
109.202.106.0-109.202.111.255
109.232.224.0/21
134.19.176.0/20
185.23.212.0/22
188.95.49.0-188.95.53.255
213.152.160.0-213.152.174.255
213.152.176.0/23
213.152.180.0-213.152.191.255
IPv6:
2a00:1678:1337::/48
2a00:1678:2470::/48
2a00:1678:3cc0::/48
2a00:1678:5afe::/48
2a00:1678:b00b::/48
2a00:1678:baba::/48
2a00:1678:da7a::/48
2a00:1678:dea1::/48
2a00:1678:efa5::/48
2a00:1678:fa11::/48
Signature Algorithm: sha256WithRSAEncryption
17:a2:ae:ff:2d:af:d9:6a:4a:1f:3e:0b:76:80:3d:19:f9:f6:
0c:19:e4:67:13:fa:8e:80:8a:f2:77:35:0e:d7:9a:ee:57:e8:
e9:20:51:a2:8e:a0:a4:aa:bf:78:d8:70:fd:27:67:e8:b5:ab:
6f:0c:7f:6d:3b:87:35:7f:77:d3:32:69:b7:79:ab:1b:62:9f:
fb:8d:09:78:46:68:94:eb:1f:62:0e:0e:b9:64:cf:eb:2a:85:
7a:f0:3a:9a:44:70:10:06:c3:5e:ac:34:38:23:37:c7:01:b9:
29:03:10:42:fb:3a:3e:72:8c:23:ef:5b:59:c7:dd:55:9e:38:
c7:fc:8c:5d:55:69:0c:eb:99:da:78:3f:02:ac:fc:1b:94:8f:
4e:1d:67:0d:52:c6:fe:8e:2b:42:18:0c:0c:8b:b4:4a:75:c4:
4f:7a:b1:a6:3e:55:f0:51:2e:24:99:7e:cc:79:9e:e8:63:aa:
c2:a6:cc:a5:96:ab:ac:76:ec:52:59:06:77:3e:ec:eb:01:07:
5a:95:45:b3:28:2a:bb:81:a8:d0:83:82:a6:a6:d4:a6:c5:de:
81:72:83:b2:e5:73:3c:ea:65:72:5f:4f:5b:11:c7:46:59:40:
8e:84:a5:25:22:c7:10:1a:8e:b4:57:44:55:50:c3:9e:06:47:
c5:a8:cb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 11:48:48 2024 by rpki-client on console-fra.rpki-client.org