Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1whDB56hqCPxJ_PlWDlLo10tn6E.roa
File: 1whDB56hqCPxJ_PlWDlLo10tn6E.roa (raw, json)
Hash identifier: B//onr/+vkPlIeHSgom6M9SIoCvh5gksDSrtXhUA8pg=
Subject key identifier: D7:08:43:07:9E:A1:A8:23:F1:27:F3:E5:58:39:4B:A3:5D:2D:9F:A1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191194D57496A749597C7B83E18A89EC893
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1whDB56hqCPxJ_PlWDlLo10tn6E.roa
Signing time: Sat 03 Aug 2024 17:33:04 +0000
ROA not before: Sat 03 Aug 2024 17:33:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.22.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 03 Aug 2024 23:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:19:4d:57:49:6a:74:95:97:c7:b8:3e:18:a8:9e:c8:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 3 17:33:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d70843079ea1a823f127f3e558394ba35d2d9fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:a2:b6:47:7f:c0:55:b3:32:ee:bb:7a:8f:
da:85:a6:25:61:f0:3b:98:6d:51:34:95:80:9f:03:
f0:cf:59:bc:3c:94:64:26:cc:5d:6e:cb:5c:f2:7c:
ff:be:94:e6:a7:45:1c:8a:ba:8c:22:6f:46:5a:9f:
33:c7:b7:21:cf:d0:d8:b8:b9:c1:c3:8c:91:31:29:
3c:0a:02:ca:2a:e8:bf:dc:be:a8:a9:6c:54:9c:b5:
f8:aa:fa:0d:10:8c:97:3c:3c:1b:0c:fe:25:d8:83:
d1:b8:9b:4b:c2:70:b7:f2:d2:19:a1:46:ea:a5:f1:
d0:e5:2d:11:3d:dd:97:13:95:ed:65:c4:e8:10:bc:
4a:75:45:d9:96:54:8e:62:70:7f:55:e3:bc:93:80:
62:a8:2a:df:7a:a2:c1:74:89:e6:e2:19:ae:fd:dc:
ee:d2:77:06:13:38:e7:ec:7b:77:c9:6a:1a:71:a1:
86:cf:83:e8:32:07:53:94:39:5d:6a:69:9f:53:b7:
73:df:55:41:9e:70:be:20:b0:f7:e7:d9:33:d6:67:
de:eb:b1:6d:35:79:93:07:0a:ff:5f:ba:bd:76:82:
7d:51:52:f1:30:d0:65:bb:8f:1b:1e:77:67:f7:2c:
11:5b:25:2f:8f:5c:b7:f2:f6:d0:34:ba:22:c6:49:
43:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:08:43:07:9E:A1:A8:23:F1:27:F3:E5:58:39:4B:A3:5D:2D:9F:A1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/1whDB56hqCPxJ_PlWDlLo10tn6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
68:ff:d6:38:e7:a0:f2:20:27:82:5c:69:25:08:d7:b3:25:f7:
a1:59:b5:9a:08:a4:f5:b6:5f:e2:c4:dc:35:74:5d:5d:bf:e3:
51:80:a5:02:af:76:c2:0a:03:aa:11:e4:9f:2d:d4:6e:a1:c2:
bf:3e:21:41:13:59:91:d7:1f:ac:b1:25:d5:dc:79:37:1f:5c:
e0:a5:40:7c:56:e0:ba:e9:fd:b8:a8:f5:63:27:75:7e:e9:72:
ea:c9:36:11:43:ae:b4:bf:aa:de:dd:d4:7a:d1:c4:2b:bd:78:
76:ac:0d:e1:6a:a3:89:88:e2:fb:d7:82:24:b0:a1:f1:d0:d4:
42:6b:72:c5:a5:b2:b7:84:02:a1:c3:98:3f:1a:6a:c8:d2:fd:
c2:de:3d:51:c6:62:b2:e5:17:a5:34:5a:cf:14:0a:af:d6:df:
82:7e:01:ad:7f:59:f9:97:28:54:64:2a:58:74:7a:af:fd:b3:
14:66:74:c2:bc:61:28:e6:27:9b:66:98:90:1e:82:ba:04:f7:
94:7e:90:35:8f:e4:9c:d3:fc:7c:db:3c:31:fc:d5:ef:14:26:
87:79:8a:5b:50:db:80:ed:0a:0c:dd:c9:8f:63:42:a0:08:5c:
5c:57:e6:a8:5e:2c:28:bc:ec:85:2f:33:56:39:d3:ea:e7:93:
58:7c:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 00:57:24 2024 by rpki-client on console-ams.rpki-client.org