Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RMYmb_7_PfGxFNCsmQupvm5xsn4.roa
File: RMYmb_7_PfGxFNCsmQupvm5xsn4.roa (raw, json)
Hash identifier: a1j8YxSXo3A59bkmz5Xeo5lakttJSHd4AhJ/0RXMTmY=
Subject key identifier: 44:C6:26:6F:FE:FF:3D:F1:B1:14:D0:AC:99:0B:A9:BE:6E:71:B2:7E
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CA9970E17CD17B5B99C1D93153F400D49
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RMYmb_7_PfGxFNCsmQupvm5xsn4.roa
Signing time: Wed 27 Dec 2023 04:44:58 +0000
ROA not before: Wed 27 Dec 2023 04:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8895
IP address blocks: 212.26.37.0/24 maxlen: 24
212.26.36.0/24 maxlen: 24
212.26.38.0/24 maxlen: 25
212.26.41.0/24 maxlen: 24
212.26.40.0/24 maxlen: 24
212.26.39.0/24 maxlen: 25
212.26.44.0/24 maxlen: 24
212.26.43.0/24 maxlen: 24
212.26.42.0/24 maxlen: 24
212.26.48.0/24 maxlen: 24
212.26.46.0/24 maxlen: 24
212.26.45.0/24 maxlen: 24
212.26.51.0/24 maxlen: 24
212.26.50.0/24 maxlen: 24
212.26.54.0/24 maxlen: 24
212.26.53.0/24 maxlen: 24
212.26.52.0/24 maxlen: 24
212.26.58.0/24 maxlen: 24
212.26.56.0/24 maxlen: 24
212.26.60.0/24 maxlen: 24
212.26.64.0/24 maxlen: 24
212.26.63.0/24 maxlen: 24
212.26.68.0/23 maxlen: 24
212.26.65.0/24 maxlen: 24
212.26.71.0/24 maxlen: 24
212.26.74.0/24 maxlen: 25
212.26.78.0/24 maxlen: 24
212.26.72.0/24 maxlen: 24
212.26.0.0/17 maxlen: 17
212.26.8.0/24 maxlen: 24
212.26.7.0/24 maxlen: 24
212.26.6.0/23 maxlen: 24
212.26.17.0/24 maxlen: 24
212.26.16.0/24 maxlen: 24
212.26.20.0/24 maxlen: 24
212.26.19.0/24 maxlen: 24
212.26.18.0/24 maxlen: 24
212.26.23.0/24 maxlen: 24
212.26.22.0/24 maxlen: 24
212.26.21.0/24 maxlen: 24
212.26.24.0/21 maxlen: 24
212.138.250.0/24 maxlen: 24
212.138.80.0/23 maxlen: 23
212.138.84.0/23 maxlen: 24
212.138.83.0/24 maxlen: 24
212.138.82.0/24 maxlen: 24
212.138.86.0/24 maxlen: 24
212.138.88.0/24 maxlen: 25
212.138.98.0/23 maxlen: 23
212.138.92.0/24 maxlen: 24
212.138.96.0/24 maxlen: 24
212.138.94.0/24 maxlen: 24
212.138.97.0/24 maxlen: 24
212.138.104.0/24 maxlen: 25
212.138.108.0/24 maxlen: 24
212.138.117.0/24 maxlen: 24
212.138.116.0/24 maxlen: 24
212.138.115.0/24 maxlen: 24
212.138.118.0/24 maxlen: 24
212.138.121.0/24 maxlen: 24
212.138.120.0/24 maxlen: 24
212.138.119.0/24 maxlen: 24
212.138.125.0/24 maxlen: 25
212.138.128.0/24 maxlen: 24
212.138.127.0/24 maxlen: 25
212.138.126.0/24 maxlen: 25
212.138.130.0/24 maxlen: 24
212.138.41.0/24 maxlen: 25
212.138.43.0/24 maxlen: 24
212.138.42.0/24 maxlen: 25
212.138.52.0/22 maxlen: 24
212.138.56.0/21 maxlen: 24
212.138.64.0/22 maxlen: 24
212.138.71.0/24 maxlen: 24
212.138.70.0/24 maxlen: 24
212.138.72.0/22 maxlen: 24
212.138.76.0/22 maxlen: 24
212.138.187.0/24 maxlen: 24
212.138.190.0/24 maxlen: 24
212.138.188.0/24 maxlen: 25
212.138.194.0/24 maxlen: 24
212.138.196.0/24 maxlen: 24
212.138.201.0/24 maxlen: 24
212.138.203.0/24 maxlen: 24
212.138.206.0/24 maxlen: 24
212.138.139.0/24 maxlen: 24
212.138.134.0/24 maxlen: 24
212.138.140.0/24 maxlen: 24
212.138.155.0/24 maxlen: 25
212.138.153.0/24 maxlen: 24
212.138.157.0/24 maxlen: 24
212.138.166.0/24 maxlen: 24
212.138.164.0/24 maxlen: 25
212.138.162.0/24 maxlen: 24
212.138.160.0/24 maxlen: 24
212.138.168.0/24 maxlen: 24
212.138.172.0/24 maxlen: 24
212.138.170.0/24 maxlen: 25
212.138.176.0/24 maxlen: 24
212.138.175.0/24 maxlen: 25
212.138.177.0/24 maxlen: 24
212.138.183.0/24 maxlen: 25
212.138.181.0/24 maxlen: 25
212.138.185.0/24 maxlen: 24
212.138.0.0/16 maxlen: 16
91.229.52.0/22 maxlen: 22
2001:1490:1::/48 maxlen: 48
2001:1490:107::/48 maxlen: 48
2001:1490:103::/48 maxlen: 48
2001:1490:106::/48 maxlen: 48
2001:1490:110:8000::/49 maxlen: 49
2001:1490::/48 maxlen: 48
2001:1490:111::/48 maxlen: 48
2001:1490:110::/48 maxlen: 49
2001:1490::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a9:97:0e:17:cd:17:b5:b9:9c:1d:93:15:3f:40:0d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Dec 27 04:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44c6266ffeff3df1b114d0ac990ba9be6e71b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:10:ca:e1:ba:03:c5:7c:a1:b1:a1:42:28:c0:
cd:cb:0d:5d:64:a0:8a:e3:4f:08:8f:47:9e:84:a6:
e4:2c:f1:c1:44:44:ea:35:89:2b:f8:b5:f4:7b:aa:
f0:30:bc:c0:e6:42:76:fb:d7:2d:c0:dc:ca:76:4a:
5f:81:d4:73:a3:26:0b:88:e8:af:ee:40:40:27:15:
4c:7d:8a:df:ad:7f:23:82:7b:9b:09:a7:49:98:31:
1a:a8:ca:2d:7d:42:40:c3:06:9e:db:ed:be:ae:c9:
ef:8c:0a:e1:e5:3d:21:61:48:cf:4b:7e:ef:d6:ec:
ef:c8:1a:69:98:f7:32:57:62:6c:7f:4f:d8:9b:79:
ea:82:36:50:c6:bb:6e:79:25:40:36:57:b7:37:1c:
34:6f:fe:25:18:2c:d5:93:97:48:91:63:f9:bb:dd:
b8:31:75:e8:30:71:27:a0:d2:91:cb:03:9f:dc:19:
25:32:d6:0f:a4:49:c1:06:fb:80:c2:d3:3d:c4:65:
8f:e5:20:8a:68:d0:55:c7:13:2f:a0:11:33:07:26:
34:b2:e2:19:22:85:1f:89:7d:60:ef:8f:70:40:f1:
7f:d9:3c:b4:14:60:83:ab:aa:01:c2:3a:c0:5d:42:
81:c8:a3:99:8a:e6:9a:e5:d8:1c:70:34:8e:65:54:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C6:26:6F:FE:FF:3D:F1:B1:14:D0:AC:99:0B:A9:BE:6E:71:B2:7E
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/RMYmb_7_PfGxFNCsmQupvm5xsn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.52.0/22
212.26.0.0/17
212.138.0.0/16
IPv6:
2001:1490::/32
Signature Algorithm: sha256WithRSAEncryption
79:5b:44:4b:9c:13:ee:bb:29:75:a0:c6:f3:fd:98:ca:28:be:
d9:ac:47:4f:2b:f8:8f:e3:36:9f:48:c9:20:49:89:e4:f9:fc:
ac:f0:37:52:09:c7:2c:7e:1e:d6:5c:a0:70:24:1e:3b:03:91:
0b:18:54:fe:2b:e5:ee:4c:4f:03:78:db:c8:9a:34:ce:6c:cd:
00:41:40:6b:b1:2b:c1:65:ef:a8:6e:89:66:4f:d4:7b:a1:ab:
b6:71:3f:27:48:cb:ca:76:1f:23:69:37:6c:f6:de:06:a1:25:
26:5e:d7:fd:12:ff:e6:2c:d2:93:94:c9:f4:30:2a:c7:75:e9:
e4:e7:cf:fe:0e:a2:ea:07:04:73:d6:63:20:26:68:02:06:20:
0b:8d:1d:91:9b:a4:a5:8d:2b:bc:e4:95:ce:a4:eb:36:ae:5a:
75:c3:40:91:6b:f5:50:e6:18:5d:85:ed:9d:8c:6a:98:06:fa:
9b:e1:d6:f6:1a:5e:44:cc:ee:e5:1d:35:cb:c8:11:2d:1f:fc:
53:24:b0:7d:91:78:e8:aa:4a:5d:ac:43:fd:56:b6:74:97:48:
61:75:e0:cb:3a:1c:2e:2d:44:06:40:08:1a:57:da:61:49:e8:
62:ca:ee:02:c4:41:81:bc:fb:72:00:11:fa:6f:16:d3:c7:40:
77:f5:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:31:04 2024 by rpki-client on console-ams.rpki-client.org