Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0tNwzQXLWym1p4XdBVDN8P9yBFQ.roa
File: 0tNwzQXLWym1p4XdBVDN8P9yBFQ.roa (raw, json)
Hash identifier: 4lilMg/qb25but/qxF6hWOLLqu4x26EUasQRShWxMQs=
Subject key identifier: D2:D3:70:CD:05:CB:5B:29:B5:A7:85:DD:05:50:CD:F0:FF:72:04:54
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019311EC08BE8F1CA22DF6843C3221C12FE8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0tNwzQXLWym1p4XdBVDN8P9yBFQ.roa
Signing time: Sat 09 Nov 2024 17:15:01 +0000
ROA not before: Sat 09 Nov 2024 17:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Nov 2024 17:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:11:ec:08:be:8f:1c:a2:2d:f6:84:3c:32:21:c1:2f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 9 17:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2d370cd05cb5b29b5a785dd0550cdf0ff720454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:4c:4c:52:44:ed:96:66:98:12:c7:0a:53:
15:3d:21:ee:7e:01:bc:56:e8:87:17:d7:4c:73:54:
a3:e9:34:16:f8:9f:41:63:5a:8a:5f:47:b6:79:83:
69:08:45:aa:3e:33:e7:50:b5:c1:01:63:0c:30:17:
e0:a6:9d:71:e5:90:87:e0:59:4d:ea:8a:8d:f8:56:
c1:a9:5b:ec:85:3e:c2:bf:8b:7c:c0:af:27:61:7b:
52:bd:5d:de:18:00:d7:17:ae:97:b9:2a:37:8f:7f:
88:83:04:72:24:3e:88:7c:9e:4e:e7:20:c1:6a:75:
c1:73:52:b8:4f:fc:9a:af:95:d9:2d:cb:4c:a0:d0:
d2:50:82:bf:59:ec:47:35:42:70:27:20:00:07:30:
e6:3e:b7:98:91:9d:38:76:ea:34:94:7f:58:22:9f:
ad:f0:84:67:63:e1:e1:c0:01:d3:26:bc:3c:a9:16:
15:9a:81:f4:2e:3d:5c:cb:08:a9:24:4f:ba:fe:b3:
b3:70:44:b7:9a:2d:84:d0:22:82:5e:c5:1a:60:f6:
85:67:42:a5:b6:c9:37:fd:00:c2:94:60:3d:79:20:
76:ff:6b:2e:8d:d9:39:e4:5e:d9:7e:a6:0d:01:97:
8f:ab:b9:70:85:2e:3a:de:01:85:47:65:1c:c1:28:
06:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D3:70:CD:05:CB:5B:29:B5:A7:85:DD:05:50:CD:F0:FF:72:04:54
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/0tNwzQXLWym1p4XdBVDN8P9yBFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
af:c8:35:f3:41:42:ef:b2:40:53:d0:b8:f6:02:30:3e:5c:b3:
05:95:39:40:5e:f4:ab:da:a0:0b:c7:91:11:fa:62:d2:6d:ab:
f6:2d:03:26:f3:1b:fe:4c:59:bd:bf:9f:fb:8e:a5:61:cd:a8:
44:66:99:53:4b:48:54:f0:73:62:51:21:60:4d:04:a2:29:25:
cb:0c:33:84:d5:61:f8:fb:77:4c:06:fb:c1:1c:0a:c1:7b:13:
72:76:60:61:22:0f:6b:2a:a3:5f:b9:7e:0e:06:a1:fb:10:b4:
8b:50:bf:de:1c:df:8e:0d:51:34:17:b7:65:34:3b:b5:4e:bc:
4c:fd:a7:ff:6e:61:43:20:08:48:77:75:56:88:4b:ac:03:fd:
e5:04:05:90:6b:49:56:c6:cc:82:97:7b:5b:5a:1b:0f:cc:5e:
8c:e1:d1:8d:c7:3f:5b:ed:24:90:7c:79:3a:bb:b3:07:9c:c8:
3c:6f:77:3c:21:54:ba:aa:13:a4:d5:1d:5e:3c:75:1c:0b:61:
cf:01:73:ed:df:fc:75:87:16:08:32:49:07:26:70:f2:18:25:
b9:2b:cf:4f:70:f7:3c:6b:fd:5d:92:51:96:d7:7f:cd:ea:a0:
45:16:40:0e:aa:6a:d7:58:22:e6:69:d9:05:49:7b:07:d2:97:
d0:3d:d3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:30:01 2024 by rpki-client on console-fra.rpki-client.org