Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Auy0c8lT50SMn9EuAg0g4KVxkc.roa
File: 0Auy0c8lT50SMn9EuAg0g4KVxkc.roa (raw, json)
Hash identifier: IfcT3e4/dsWtDVWyTjQ01UH0iAPasajiTW7U5RYODJI=
Subject key identifier: D0:0B:B2:D1:CF:25:4F:9D:12:32:7F:44:B8:08:34:83:82:95:C6:47
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E498E960ADE29A95D421AD82725539DA9
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Auy0c8lT50SMn9EuAg0g4KVxkc.roa
Signing time: Sat 16 Mar 2024 23:17:45 +0000
ROA not before: Sat 16 Mar 2024 23:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 20 Mar 2024 12:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:49:8e:96:0a:de:29:a9:5d:42:1a:d8:27:25:53:9d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 16 23:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d00bb2d1cf254f9d12327f44b80834838295c647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:d1:5e:ff:fe:d8:2a:99:4f:9d:45:ed:b3:
80:48:a1:c5:0f:5c:1a:e9:7d:a7:cb:57:61:ea:e6:
71:af:42:57:25:ef:b7:88:01:c2:21:aa:ae:7e:a8:
de:22:71:e1:ed:5e:79:a3:3d:8d:c7:55:7f:6d:a3:
b5:0d:46:dd:65:91:39:af:4d:8f:63:03:4c:bf:5b:
29:04:66:d1:7f:14:bb:f6:fc:24:57:a2:57:64:1d:
b8:cb:66:6c:99:87:72:89:da:68:7f:4b:b0:39:31:
c8:4a:47:c7:bd:60:1f:dd:c4:e3:1e:77:5b:73:f1:
49:35:8a:1e:2e:33:16:69:f8:d1:c2:d4:f5:7d:b6:
d5:8b:9a:1b:21:fa:12:2c:82:9f:60:a1:9a:0a:c5:
94:d2:95:85:d2:6e:b6:98:cc:5c:1d:d3:6b:5a:11:
c3:e7:e0:fd:79:2c:4d:2d:5b:bb:cd:a1:e8:52:ce:
71:cf:00:46:2d:4c:69:e2:de:e0:dc:54:1f:42:f9:
36:2a:91:d6:99:eb:74:1c:cb:da:4c:7f:75:e2:a3:
f1:27:aa:33:9e:1f:fb:a6:44:5d:cb:a6:84:84:72:
23:48:ed:fb:78:a6:5e:6f:05:5b:fd:cd:d7:bd:2a:
5a:eb:31:78:8e:a9:ab:f9:3d:35:26:e0:ae:86:03:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0B:B2:D1:CF:25:4F:9D:12:32:7F:44:B8:08:34:83:82:95:C6:47
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0Auy0c8lT50SMn9EuAg0g4KVxkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
d1:ed:05:c7:df:fc:6d:0f:1c:b9:33:7d:d5:f9:c6:50:c5:c2:
2c:21:2f:ee:80:d8:39:a2:2b:c1:5d:22:4e:35:00:0a:47:82:
9d:25:93:d0:b6:67:e2:50:8a:2b:6a:e2:32:7a:0c:28:1a:0e:
b8:0e:90:7b:06:f1:e7:ed:0e:a3:74:0d:cf:05:f2:83:bf:42:
ef:09:fe:f2:7f:b9:be:ca:23:55:6e:29:00:24:1a:8b:d6:a3:
02:e0:64:2c:c0:87:d8:9d:da:9b:1a:f6:e6:0f:46:55:bd:4b:
69:be:58:16:a7:31:fa:10:b1:f6:fe:e2:e2:89:5e:59:8c:28:
5e:b7:97:26:d9:cc:de:79:0d:fe:fd:96:e7:32:3c:33:92:1a:
5e:11:1e:da:0e:c4:43:e4:d0:4a:4e:02:20:20:7b:fe:b2:5c:
3f:78:a9:d4:f0:9b:f1:58:86:aa:3f:9f:e6:75:4f:44:d9:7e:
62:5b:63:5d:42:04:7c:44:ec:1f:96:c6:2c:b3:78:1f:f5:f1:
68:b5:c3:32:71:b7:db:2f:b8:0b:56:32:cc:a6:4b:63:81:44:
16:ae:eb:a2:e0:0b:68:1c:2a:1e:b4:22:d0:1f:0b:2d:ed:83:
ab:e8:63:2c:e8:d2:db:1f:99:2b:bf:26:66:ee:34:02:dc:61:
2e:f1:ea:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org