Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2CsNbEGlmCDfex_pSEIdxuh2opc.roa
File: 2CsNbEGlmCDfex_pSEIdxuh2opc.roa (raw, json)
Hash identifier: /Aa9ypm7lGLWFjVUvA5W66vskuzISkaLJWEozm8pCsI=
Subject key identifier: D8:2B:0D:6C:41:A5:98:20:DF:7B:1F:E9:48:42:1D:C6:E8:76:A2:97
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191BFC2D637BF60B1E0D1994537BAB16270
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2CsNbEGlmCDfex_pSEIdxuh2opc.roa
Signing time: Thu 05 Sep 2024 01:18:22 +0000
ROA not before: Thu 05 Sep 2024 01:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 02:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bf:c2:d6:37:bf:60:b1:e0:d1:99:45:37:ba:b1:62:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 5 01:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d82b0d6c41a59820df7b1fe948421dc6e876a297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:a5:64:69:2d:20:a6:ae:bf:2f:19:c3:76:
d0:01:21:4a:5e:ce:a0:af:aa:12:41:70:86:b3:7f:
ee:f1:26:8b:ac:0e:3d:83:9c:9a:2a:5d:6d:c6:4a:
a1:49:e9:91:01:ef:72:90:d3:d2:69:41:3f:82:ec:
bf:89:45:13:6d:74:30:5d:3f:15:80:5f:5f:ef:cf:
3b:e6:95:87:db:cd:3c:64:ff:a4:12:51:cb:6a:97:
49:e6:67:e5:29:b3:83:3e:92:ad:2a:45:c8:11:76:
39:68:fb:9e:8c:72:27:fd:2d:44:5b:5c:13:0e:22:
01:ab:42:1a:b5:92:de:d6:2d:17:91:d9:f9:c1:78:
0b:74:23:05:ec:6f:81:d9:94:e1:f9:e4:4d:a9:bc:
60:90:04:41:b9:9f:4b:b6:7b:cd:92:16:bb:21:8d:
07:05:73:11:9c:b2:a7:88:8f:61:db:f5:dc:fa:b1:
c8:23:e6:45:91:9c:77:89:53:a4:cf:30:65:a0:05:
02:d5:66:11:44:d9:ac:3d:79:7f:e6:b1:fc:bc:a9:
ed:ed:db:06:2d:5e:33:56:a7:ba:fe:1d:65:4a:9a:
de:b7:a9:19:af:1c:0b:f2:f6:33:22:2b:58:82:49:
bb:5b:e6:33:10:e1:67:57:d3:b1:a7:bf:e3:2f:fa:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2B:0D:6C:41:A5:98:20:DF:7B:1F:E9:48:42:1D:C6:E8:76:A2:97
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/2CsNbEGlmCDfex_pSEIdxuh2opc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
07:b9:84:87:d3:d2:86:3b:76:22:65:7e:e8:96:31:32:2b:ec:
77:dd:9d:7d:9f:48:42:0f:35:56:b9:9c:e3:78:c0:b6:bf:74:
d7:c4:3a:c0:62:52:35:96:e8:04:09:21:29:48:2e:d7:86:02:
36:52:25:63:8f:43:eb:f9:a9:de:d9:84:de:9e:df:18:9d:84:
7c:ee:4f:a1:a8:37:e1:96:57:04:f0:9d:8c:36:49:b3:48:9b:
06:fa:49:1c:a7:b3:06:2d:9c:db:28:c2:40:ee:f5:31:4a:f9:
b3:7e:ac:4a:c7:15:25:4b:f9:ea:2d:f9:00:12:15:ab:fc:60:
d3:aa:b0:ef:3a:e2:69:14:3f:de:4f:0f:88:4c:c6:b4:8a:72:
c1:2a:54:eb:22:76:e5:8e:bd:55:82:c0:26:1c:c5:50:b3:40:
fb:6e:03:3a:55:83:cc:98:c5:c4:21:3a:98:c9:0f:7a:29:8b:
10:e8:48:a8:a9:2a:13:6c:94:e8:e7:b6:cb:22:f2:61:8f:82:
59:a2:4c:9f:44:8a:c6:3e:39:aa:e4:30:3e:4b:86:54:42:7e:
ad:5d:49:32:f1:11:82:8d:ed:34:c7:7c:f2:c7:d7:2d:db:fd:
8b:e6:8a:0e:ee:6e:4a:bd:6d:90:6d:bb:00:64:f0:81:e1:9d:
54:d1:e1:63
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZG/wtY3v2Cx4NGZRTe6sWJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwOTA1MDExODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODJiMGQ2YzQxYTU5ODIwZGY3YjFmZTk0ODQyMWRjNmU4NzZhMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWilZGktIKauvy8Zw3bQASFKXs6g
r6oSQXCGs3/u8SaLrA49g5yaKl1txkqhSemRAe9ykNPSaUE/guy/iUUTbXQwXT8V
gF9f78875pWH2808ZP+kElHLapdJ5mflKbODPpKtKkXIEXY5aPuejHIn/S1EW1wT
DiIBq0IatZLe1i0Xkdn5wXgLdCMF7G+B2ZTh+eRNqbxgkARBuZ9LtnvNkha7IY0H
BXMRnLKniI9h2/Xc+rHII+ZFkZx3iVOkzzBloAUC1WYRRNmsPXl/5rH8vKnt7dsG
LV4zVqe6/h1lSpret6kZrxwL8vYzIitYgkm7W+YzEOFnV9Oxp7/jL/qptwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFNgrDWxBpZgg33sf6UhCHcbodqKXMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvMkNzTmJFR2xtQ0RmZXhfcFNFSWR4dWgyb3BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAB7mEh9PShjt2
ImV+6JYxMivsd92dfZ9IQg81Vrmc43jAtr9018Q6wGJSNZboBAkhKUgu14YCNlIl
Y49D6/mp3tmE3p7fGJ2EfO5Poag34ZZXBPCdjDZJs0ibBvpJHKezBi2c2yjCQO71
MUr5s36sSscVJUv56i35ABIVq/xg06qw7zriaRQ/3k8PiEzGtIpywSpU6yJ25Y69
VYLAJhzFULNA+24DOlWDzJjFxCE6mMkPeimLEOhIqKkqE2yU6Oe2yyLyYY+CWaJM
n0SKxj45quQwPkuGVEJ+rV1JMvERgo3tNMd88sfXLdv9i+aKDu5uSr1tkG27AGTw
geGdVNHhYw==
-----END CERTIFICATE-----
Generated at Thu Sep 5 04:33:43 2024 by rpki-client on console-ams.rpki-client.org