Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1E8OVSnbTDxe4VBqAvSmAivhuBs.roa
File: 1E8OVSnbTDxe4VBqAvSmAivhuBs.roa (raw, json)
Hash identifier: m0Bdlc8k36d0NkyAxUu1QAdchum+zKe9ktGh+AkYweQ=
Subject key identifier: D4:4F:0E:55:29:DB:4C:3C:5E:E1:50:6A:02:F4:A6:02:2B:E1:B8:1B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193D767C6BFB6B0C653D201465A5DD916AD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1E8OVSnbTDxe4VBqAvSmAivhuBs.roa
Signing time: Wed 18 Dec 2024 01:35:22 +0000
ROA not before: Wed 18 Dec 2024 01:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
5.231.252.0/24 maxlen: 24
5.231.253.0/24 maxlen: 24
77.90.0.0/18 maxlen: 32
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.130.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.103.163.0/24 maxlen: 24
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 18 Dec 2024 02:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d7:67:c6:bf:b6:b0:c6:53:d2:01:46:5a:5d:d9:16:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Dec 18 01:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d44f0e5529db4c3c5ee1506a02f4a6022be1b81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:12:3e:81:b4:68:2d:cf:0c:43:96:38:1d:
13:b4:d9:07:c4:0c:83:21:a9:16:bc:0e:85:a3:b4:
93:94:ac:c3:54:f3:72:c0:63:44:79:27:c4:90:68:
50:8d:3a:29:88:01:5d:ba:0d:80:bb:48:11:36:00:
e6:91:81:59:39:a3:0c:91:e3:c3:38:73:75:52:95:
fa:bb:ef:72:79:10:e9:c4:61:3d:e1:ed:04:ca:36:
43:57:62:f9:0b:87:04:6c:4f:d1:e4:f2:69:6b:d2:
13:7a:c3:53:75:86:7f:bc:b9:82:b3:a2:7b:88:7e:
cc:a2:2b:90:3d:c7:19:10:b2:0a:3f:2d:43:4f:00:
5a:ef:90:9c:8f:f2:6a:c1:73:ef:59:d0:3f:27:5c:
b7:8f:0d:5e:ee:ff:ef:49:db:e8:08:b3:02:b4:15:
0b:d5:80:85:6b:26:b0:2d:a7:fa:27:43:7e:a1:72:
fb:e8:96:a3:33:90:0c:08:65:78:be:55:c3:92:3d:
1b:24:cd:4e:61:c7:1f:00:aa:d2:d5:ae:b1:37:a2:
26:1d:67:fa:24:72:cc:28:7c:16:ad:df:eb:95:e7:
ae:a7:95:4e:fe:21:12:48:cb:53:62:1a:45:e7:92:
12:b9:23:19:f6:b7:0f:cd:72:44:34:6c:41:41:d3:
4c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4F:0E:55:29:DB:4C:3C:5E:E1:50:6A:02:F4:A6:02:2B:E1:B8:1B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1E8OVSnbTDxe4VBqAvSmAivhuBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
64:d5:c3:f0:22:e5:98:fc:77:b4:0a:b0:ac:bd:80:a2:dd:26:
e7:24:af:c5:3c:f1:83:08:ad:5e:09:71:38:db:01:b3:98:99:
d6:56:7d:e1:a9:95:de:09:64:24:45:9c:96:21:d4:f0:db:1a:
f0:5d:08:ff:4f:05:f0:d3:85:2c:b9:a8:62:40:49:1e:2f:5b:
0b:14:cf:ec:f9:08:11:33:c3:99:de:11:ec:af:05:2e:c5:16:
54:73:7d:07:ee:7b:cc:dc:e3:a2:63:59:e0:6a:a3:9e:aa:4b:
31:f4:67:62:c7:33:be:82:d9:a8:5c:85:99:13:96:85:01:15:
a1:d2:0e:ac:46:a8:5d:c7:2b:b9:89:4e:64:f2:15:03:0e:17:
fd:35:0f:5f:04:32:87:63:4b:d6:46:a8:1d:c7:60:55:9d:08:
cc:21:48:c8:68:14:da:42:f8:45:73:6f:3c:c9:bd:19:74:95:
8a:06:0f:82:a3:c5:d4:c3:ab:7c:d9:61:f0:54:37:81:41:8b:
8e:03:c8:37:66:30:6a:bb:ba:8d:62:ae:7b:80:0d:37:99:37:
f8:c9:4e:37:36:19:d6:45:94:c5:a6:d9:bf:54:8e:af:34:e7:
9e:83:72:b9:af:fa:39:3e:fc:0b:6d:a5:94:f5:ea:6b:16:fa:
7c:a9:9a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:59 2025 by rpki-client