Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6Aj_bB-huj2DZm2X2aR8zJC_Mdg.roa
File: 6Aj_bB-huj2DZm2X2aR8zJC_Mdg.roa (raw, json)
Hash identifier: C7aT+gugCXdHqTWUoJksCPgKtTFFiVZm5ARxxBmmGN4=
Subject key identifier: E8:08:FF:6C:1F:A1:BA:3D:83:66:6D:97:D9:A4:7C:CC:90:BF:31:D8
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 0194C5D2FDCEAEDC0732035E8ACCFDCC1EC6
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6Aj_bB-huj2DZm2X2aR8zJC_Mdg.roa
Signing time: Sun 02 Feb 2025 08:42:06 +0000
ROA not before: Sun 02 Feb 2025 08:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8895
IP address blocks: 45.94.15.0/24 maxlen: 24
91.229.52.0/22 maxlen: 22
212.26.0.0/17 maxlen: 17
212.26.6.0/23 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.8.0/22 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.19.20/30 maxlen: 30
212.26.20.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.26.26.0/23 maxlen: 24
212.26.28.0/23 maxlen: 24
212.26.32.0/24 maxlen: 24
212.26.36.0/24 maxlen: 25
212.26.37.0/24 maxlen: 25
212.26.38.0/24 maxlen: 25
212.26.39.0/24 maxlen: 25
212.26.40.0/24 maxlen: 24
212.26.41.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.44.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.46.0/23 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.50.0/23 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.72.0/24 maxlen: 25
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
212.138.41.0/24 maxlen: 25
212.138.42.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.82.0/24 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.84.0/23 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.92.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.96.0/21 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.98.0/23 maxlen: 23
212.138.104.0/24 maxlen: 24
212.138.108.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.127.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.130.0/24 maxlen: 24
212.138.132.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.147.0/24 maxlen: 24
212.138.150.0/24 maxlen: 24
212.138.153.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.157.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.162.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.166.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.172.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.177.0/24 maxlen: 24
212.138.180.0/24 maxlen: 24
212.138.181.0/24 maxlen: 25
212.138.183.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.190.0/24 maxlen: 24
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.202.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.210.0/24 maxlen: 24
212.138.210.0/28 maxlen: 28
212.138.250.0/24 maxlen: 24
2001:1490::/32 maxlen: 32
2001:1490::/48 maxlen: 48
2001:1490:0:800::/64 maxlen: 64
2001:1490:0:a00::/64 maxlen: 64
2001:1490:0:c00::/64 maxlen: 64
2001:1490:0:1000::/64 maxlen: 64
2001:1490:1::/48 maxlen: 48
2001:1490:1:800::/64 maxlen: 64
2001:1490:1:a00::/64 maxlen: 64
2001:1490:1:c00::/64 maxlen: 64
2001:1490:1:e00::/64 maxlen: 64
2001:1490:1:1000::/64 maxlen: 64
2001:1490:1:1200::/64 maxlen: 64
2001:1490:1:1600::/64 maxlen: 64
2001:1490:1:1a00::/64 maxlen: 64
2001:1490:1:2000::/64 maxlen: 64
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490:110:8000::/49 maxlen: 49
2001:1490:111::/48 maxlen: 48
2001:1490:112::/48 maxlen: 48
2001:1490:113::/48 maxlen: 48
2001:1490:114::/48 maxlen: 48
2001:1490:115::/48 maxlen: 50
Validation: Failed, certificate revoked on Tue 11 Mar 2025 00:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c5:d2:fd:ce:ae:dc:07:32:03:5e:8a:cc:fd:cc:1e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Feb 2 08:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e808ff6c1fa1ba3d83666d97d9a47ccc90bf31d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cb:80:d2:1d:41:16:93:92:f2:9b:9b:eb:39:
34:21:2a:ae:a4:e9:8b:5e:00:33:6f:3e:71:28:5a:
62:52:d8:86:29:25:89:08:4a:c9:5e:4b:24:bd:09:
56:b3:32:e0:c0:da:73:e1:17:b1:e1:36:cd:e7:41:
90:ca:ac:e4:8b:49:ee:50:36:16:bf:99:88:cb:01:
4a:27:02:c8:60:cd:63:2b:b1:a2:d8:1b:37:ae:63:
b5:79:b6:f5:d9:95:5e:d5:ea:f5:58:23:4c:36:1b:
a7:c3:72:45:cb:37:1c:b1:83:0f:f9:82:1b:9b:af:
76:29:01:a2:ad:b9:aa:07:23:e0:8e:33:73:12:b0:
65:a0:79:f8:89:9e:d8:79:f0:71:07:03:8c:c1:19:
e0:08:06:17:55:3e:7a:0e:ce:1c:d5:0e:bd:94:dc:
4a:13:a5:36:8d:02:09:37:34:11:a0:22:bc:09:93:
45:50:33:96:7b:5f:36:c2:a0:f2:cf:46:2b:95:ff:
ba:2b:6a:c1:26:31:93:0c:ef:38:e6:fb:ad:9a:b5:
7b:98:99:2e:85:61:54:28:d3:76:22:48:b8:96:8e:
ca:40:9c:90:5b:a8:9c:b0:0c:df:52:2b:db:e1:30:
a3:1b:48:91:d0:1c:2b:df:73:2c:cb:53:bd:de:91:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:FF:6C:1F:A1:BA:3D:83:66:6D:97:D9:A4:7C:CC:90:BF:31:D8
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6Aj_bB-huj2DZm2X2aR8zJC_Mdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.15.0/24
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
35:54:34:bf:d6:ab:a4:2f:f9:ba:1f:00:58:8e:5b:fc:7f:c9:
eb:a7:a8:65:38:8b:f7:31:9a:d8:0d:45:f7:b5:03:2d:d4:92:
c4:ca:e4:56:09:98:ed:07:12:46:8e:ff:58:0d:e2:92:08:fd:
d2:bb:55:5d:14:3a:a0:83:58:5b:10:1e:af:00:58:23:e4:7e:
3b:92:89:3f:91:5e:31:c5:94:a2:e2:6b:8d:1c:31:62:f7:81:
8e:02:cb:3d:ae:34:6e:b1:cb:ed:cf:1e:5f:85:4e:46:d7:ae:
c9:d6:10:44:bc:e7:78:0d:16:f1:1e:67:17:60:69:4b:b4:3e:
9a:28:3d:8b:40:f3:e3:aa:98:b9:7a:3c:f7:1e:e2:2d:fa:db:
7b:26:cc:4c:59:e0:67:13:88:b0:f3:a5:b5:71:56:04:b0:95:
8d:e9:3a:90:8f:54:f2:d0:9b:7e:32:c1:a8:c3:26:4f:95:10:
30:3e:a0:05:49:8b:66:b6:12:52:2e:63:52:a0:f5:d2:10:a1:
c9:71:9f:57:d9:25:4b:40:bb:a5:a9:95:88:e7:3d:02:e8:7b:
25:4a:ec:fa:0b:00:47:27:71:35:b1:95:cd:05:79:90:27:db:
a0:92:42:bf:02:59:68:71:9f:72:3d:6b:a0:9c:25:ee:e1:21:
81:7f:ae:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:55:00 2025 by rpki-client