Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0AkzLfMydWpzcQt7R5PdGAT5O8o.roa
File: 0AkzLfMydWpzcQt7R5PdGAT5O8o.roa (raw, json)
Hash identifier: CfCdbFqAprWxoMUkSQnRy9UQF2eD/wercjIEipCSCm0=
Subject key identifier: D0:09:33:2D:F3:32:75:6A:73:71:0B:7B:47:93:DD:18:04:F9:3B:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01934ACCB67E3D2EEB140CF55B4A34F7F169
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0AkzLfMydWpzcQt7R5PdGAT5O8o.roa
Signing time: Wed 20 Nov 2024 18:19:10 +0000
ROA not before: Wed 20 Nov 2024 18:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 21 Nov 2024 05:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4a:cc:b6:7e:3d:2e:eb:14:0c:f5:5b:4a:34:f7:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 20 18:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d009332df332756a73710b7b4793dd1804f93bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:90:62:39:a2:c2:11:0d:25:62:3e:c4:2b:a7:
0b:7a:5c:c5:d1:ae:e5:e1:d9:7e:ec:3c:30:33:f7:
21:f8:d7:38:97:59:77:be:47:7e:1c:65:89:79:bc:
08:84:e8:71:f6:e9:32:2a:3e:b9:4d:d7:b6:17:81:
c4:b6:0f:ea:e0:7a:27:9b:7a:51:6e:f3:e5:90:bd:
0c:9e:db:04:bd:39:2a:bf:1f:a6:0d:90:f3:8e:2e:
90:fe:21:80:88:9a:63:0e:db:e1:4e:49:04:d7:9a:
2b:f6:fb:8b:fc:0f:65:50:08:83:bd:33:97:88:a8:
38:9c:2e:8b:86:d9:d4:54:68:32:8b:bd:80:82:68:
8b:09:74:6a:75:b7:33:12:12:04:2a:ae:79:34:cd:
b2:d7:04:59:99:5a:f4:74:52:17:a8:3c:bf:5b:64:
6c:56:63:d6:8a:95:45:f9:9d:1c:79:cb:94:69:56:
7f:31:7f:49:ac:1a:10:bc:b2:dc:61:ff:f4:4c:d0:
93:58:48:83:44:0f:d3:73:24:17:b7:85:76:64:36:
4a:f9:92:70:ef:86:06:33:36:f7:cb:1d:12:2d:7b:
01:aa:33:42:c1:17:27:f9:d0:bf:d2:a2:e6:e7:2c:
aa:07:ed:b0:24:58:dd:3d:8b:47:02:be:7b:08:3f:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:09:33:2D:F3:32:75:6A:73:71:0B:7B:47:93:DD:18:04:F9:3B:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0AkzLfMydWpzcQt7R5PdGAT5O8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
91:53:ff:72:3e:5e:10:68:fc:7e:80:b3:63:77:4e:6e:bf:42:
44:81:be:31:a0:64:20:1b:85:16:41:8f:d3:3f:6e:1d:d0:d0:
60:71:a7:8a:d9:f0:94:d3:94:42:59:c4:af:e6:1a:ba:08:e0:
6c:66:28:69:11:08:67:58:e6:4d:25:48:88:64:90:f9:e8:07:
f7:f8:13:35:2e:34:ea:10:66:7a:7b:38:a0:c6:3a:f4:c5:bf:
42:96:1d:b9:4c:12:c0:5a:46:56:6a:cb:a9:5c:8a:12:18:7f:
15:df:63:e7:a6:70:b2:21:ac:32:6a:ab:17:29:39:32:51:d5:
76:8b:32:50:4c:db:35:4a:7f:fa:68:da:87:d4:82:b7:8d:40:
8c:3f:cd:ba:ea:20:05:82:ad:cf:c7:c3:98:da:58:ab:6f:16:
d1:22:7d:4f:a9:ca:4b:84:86:36:c3:bb:ab:ae:99:74:2f:be:
bd:2a:40:df:09:aa:f2:ac:61:b6:3a:a9:b0:bd:d6:f4:1e:6a:
9c:5e:55:49:06:79:72:91:2d:fd:6b:03:b7:89:73:02:63:3c:
4d:de:18:9d:8b:cd:a7:81:e8:ad:b8:c4:85:5e:ed:52:c7:5f:
a4:44:f7:14:66:c7:a2:79:43:45:ae:37:28:cc:15:5a:e5:5a:
63:e4:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:58:29 2024 by rpki-client on console-fra.rpki-client.org