Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ya1sZvBSL8HjiRQ3VqV8PAI4g4.roa
File: 4ya1sZvBSL8HjiRQ3VqV8PAI4g4.roa (raw, json)
Hash identifier: 6Qu0OdeWhzOBmYprtUyDCbP7wBVUfFa098IuQCGOjZk=
Subject key identifier: E3:26:B5:B1:9B:C1:48:BF:07:8E:24:50:DD:5A:95:F0:F0:08:E2:0E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191032DE45017281CB5D158BE19820F6FDF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ya1sZvBSL8HjiRQ3VqV8PAI4g4.roa
Signing time: Tue 30 Jul 2024 10:27:04 +0000
ROA not before: Tue 30 Jul 2024 10:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 31 Jul 2024 15:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:2d:e4:50:17:28:1c:b5:d1:58:be:19:82:0f:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 30 10:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e326b5b19bc148bf078e2450dd5a95f0f008e20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:e1:db:cb:b4:89:63:14:87:a6:76:ff:20:
1f:50:11:b5:cf:f7:b6:e2:12:4c:c7:96:f1:18:43:
80:73:a7:fb:24:92:38:ad:a4:2d:97:03:4c:44:92:
bc:d9:6f:4a:86:3c:fd:16:37:61:d4:45:b2:b8:74:
ff:1a:0d:70:35:fc:84:29:72:99:bc:bc:c5:06:bc:
87:0c:c1:4a:ee:a0:f6:df:0c:6c:d2:73:36:21:e8:
ba:02:87:04:6c:0e:a1:f1:76:e9:94:8f:8b:fc:fd:
f7:ce:15:b9:ee:c7:c4:9f:ee:93:5c:ab:df:ee:b3:
1e:de:be:1d:4f:fb:cb:74:de:a9:f4:26:b6:0c:45:
4d:45:2f:7d:f6:c0:de:76:e2:5d:ce:92:8e:33:3c:
72:3c:a2:3a:78:d7:df:8a:83:38:07:76:42:68:63:
10:cf:8a:84:13:79:d5:5a:bf:43:2a:fc:15:41:33:
a7:8d:22:18:83:eb:07:50:4a:38:04:b5:71:4d:79:
61:b8:18:ec:3b:b8:c6:5f:24:4b:44:b6:f4:30:7e:
1a:7c:35:91:78:ce:85:cb:27:2f:79:da:09:9c:fe:
f0:1e:a4:b9:25:50:ad:81:7e:ff:4e:c1:c2:8b:e6:
be:6e:3f:13:4c:59:1d:ac:b0:63:08:db:be:fa:22:
9b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:26:B5:B1:9B:C1:48:BF:07:8E:24:50:DD:5A:95:F0:F0:08:E2:0E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4ya1sZvBSL8HjiRQ3VqV8PAI4g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:44:3c:ec:b3:5c:46:97:5a:b7:70:07:ef:dc:48:6f:f5:f4:
fc:2e:af:d4:35:bd:74:70:6f:dc:94:d0:75:f1:58:48:0e:4b:
c9:54:b1:c7:3b:8f:b5:f8:aa:17:87:f0:92:0d:43:36:16:2f:
bf:6d:39:29:87:1e:06:29:77:62:6b:83:5f:90:2e:ca:35:ea:
68:15:5f:0e:c4:49:a7:42:37:6d:38:79:e7:b5:1c:0c:0e:36:
1a:f3:f3:ad:72:04:60:a3:35:6a:07:e3:d0:9f:95:29:8a:d9:
e0:52:ef:4b:b9:54:42:77:ae:8d:1a:5e:38:47:95:63:a5:a4:
ed:dd:2e:9b:d5:8d:08:27:43:43:3b:4b:f1:60:65:2b:01:ab:
e0:d0:9d:2d:2d:b8:9c:57:f9:1f:5c:8a:48:75:2f:4a:6c:10:
d6:32:d6:ef:fa:5b:f7:0f:04:aa:0c:3d:46:ea:fa:f8:85:59:
5b:c7:98:d3:6d:ab:34:53:1a:fa:fb:d2:d6:5d:e3:29:1d:93:
1a:9f:76:fa:74:ac:57:a6:b9:b4:ca:56:ae:ef:48:86:ab:84:
73:26:f9:5b:18:52:47:38:2c:1c:c9:8e:2c:31:d3:d2:dd:3c:
0b:8c:69:4f:0f:8c:6c:eb:e9:c2:ae:b8:23:4b:6a:93:0d:db:
11:29:f8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 18:24:55 2024 by rpki-client on console-fra.rpki-client.org