Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3QjInG9-dSu4I4mrtULc8l243IE.roa
File: 3QjInG9-dSu4I4mrtULc8l243IE.roa (raw, json)
Hash identifier: hTYtVAqd1TdTaJ9H29gISsGiY7uS8RJ7SNZ/c6b7DIg=
Subject key identifier: DD:08:C8:9C:6F:7E:75:2B:B8:23:89:AB:B5:42:DC:F2:5D:B8:DC:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019123C42E64B61A9E2E7891E4661BC47529
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3QjInG9-dSu4I4mrtULc8l243IE.roa
Signing time: Mon 05 Aug 2024 18:19:05 +0000
ROA not before: Mon 05 Aug 2024 18:19:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 06 Aug 2024 04:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:c4:2e:64:b6:1a:9e:2e:78:91:e4:66:1b:c4:75:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 5 18:19:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd08c89c6f7e752bb82389abb542dcf25db8dc81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:44:d6:ce:f1:b1:eb:63:e9:cc:6e:6f:ba:
25:26:14:08:bd:2a:aa:7f:58:0f:58:b5:9f:43:54:
c6:6d:53:32:66:a9:a9:99:c9:ca:e6:0b:a7:f6:d1:
85:b1:81:56:aa:33:aa:e4:22:50:e4:17:4d:16:d2:
3e:51:cc:17:90:7a:66:56:bc:95:47:c2:d4:16:74:
63:80:19:6b:d0:e0:e6:2f:f7:bc:3c:54:4c:d5:50:
06:3c:61:a7:b1:71:26:54:9d:46:c1:f6:2d:65:6d:
d4:45:30:50:f9:29:2f:2e:eb:9a:61:46:f6:75:3e:
3b:9a:67:a9:b5:a4:36:57:f7:da:9e:c4:df:9e:c3:
69:8a:5e:7e:7c:0e:ed:3c:62:af:5f:82:9c:20:e0:
4c:d6:dd:17:9b:08:5f:6c:0c:7b:98:9d:0e:cb:ff:
02:31:3a:ce:4c:ab:f6:26:3f:0f:59:6e:06:a1:ed:
14:c1:66:ce:dd:9d:5c:e3:20:c5:07:37:05:38:35:
5b:19:2b:36:7e:a6:56:29:bf:19:ee:93:4c:87:4d:
d2:9b:7f:ff:0b:61:d8:56:0e:1a:d0:70:9e:00:27:
0a:ba:5f:33:20:b5:ca:6c:ea:dd:b5:41:38:ca:84:
08:d8:3f:03:9b:d4:ef:cf:00:37:d7:a3:8b:38:4f:
7e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:C8:9C:6F:7E:75:2B:B8:23:89:AB:B5:42:DC:F2:5D:B8:DC:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/3QjInG9-dSu4I4mrtULc8l243IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
20:f4:93:83:1b:6f:9b:b9:ed:f0:a6:f2:bf:44:69:20:a0:3a:
14:dc:d5:b1:22:ec:97:d8:04:b6:4e:eb:43:87:f1:0f:02:97:
6b:ba:61:d8:76:c5:5f:f5:80:a1:bb:a5:fa:f4:94:88:3a:35:
72:11:ed:07:f5:2d:ea:d7:94:2f:06:a2:94:76:5f:1f:16:ef:
f2:a0:1e:2b:f5:0f:8b:bf:62:0b:35:80:8e:32:12:eb:f3:94:
3f:d5:51:59:66:db:aa:c5:7d:96:15:17:4b:a3:c0:fc:d4:e5:
d7:01:19:29:42:37:43:bd:f1:7a:91:81:8c:cf:df:9b:3c:7e:
8c:9e:80:cc:30:82:1e:b6:de:bb:08:64:60:53:b3:5a:24:44:
af:23:f6:d1:e6:4d:79:70:bf:ea:74:ce:b8:84:49:07:57:d2:
65:bc:5e:ea:e4:a7:b7:30:6f:99:22:49:27:10:1a:51:30:53:
9d:cb:ae:cc:22:21:62:ce:58:64:04:d8:63:4b:09:7c:71:f2:
b8:63:13:99:8f:24:a6:52:61:69:15:c5:6f:29:0a:c6:c1:d5:
0b:a9:07:aa:0b:60:a4:01:ea:70:1b:38:c5:43:87:5a:7f:66:
d3:0c:78:e3:c4:8d:d2:96:6a:e9:d7:26:53:d2:c2:7f:58:25:
cb:a8:24:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 05:14:52 2024 by rpki-client on console-fra.rpki-client.org