Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5lRNwbWB87FxTlvv8IpQ_5B3_m4.roa
File: 5lRNwbWB87FxTlvv8IpQ_5B3_m4.roa (raw, json)
Hash identifier: ty/63PFmpVacm0w8BzXVlCFLoXTqsTzQUUkk3XC3WNo=
Subject key identifier: E6:54:4D:C1:B5:81:F3:B1:71:4E:5B:EF:F0:8A:50:FF:90:77:FE:6E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B0EF10B0C02AEBB83591BEF290AA5B67
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5lRNwbWB87FxTlvv8IpQ_5B3_m4.roa
Signing time: Mon 02 Sep 2024 04:12:22 +0000
ROA not before: Mon 02 Sep 2024 04:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
77.90.50.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 02 Sep 2024 11:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b0:ef:10:b0:c0:2a:eb:b8:35:91:be:f2:90:aa:5b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 04:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6544dc1b581f3b1714e5beff08a50ff9077fe6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:73:cb:40:25:27:9b:cc:72:55:1b:f8:35:
8b:10:24:59:e2:95:a9:f8:9c:e0:df:4a:00:19:1c:
9a:d9:7a:69:95:33:9f:bf:90:23:81:d1:56:3f:fb:
5f:48:2c:d3:a7:16:84:11:7e:62:62:f4:4d:66:ad:
07:69:35:81:cd:f5:61:c7:43:f0:ac:0c:93:4d:91:
0a:51:78:92:ca:00:26:ef:1d:80:b4:ec:0f:d6:ff:
07:0b:82:50:6c:08:4f:0a:71:29:fd:9f:df:27:bf:
23:f7:d0:5b:eb:da:66:a4:ef:ce:43:b5:07:39:34:
90:7f:b7:83:3a:d1:11:7f:7e:c0:8d:a5:c5:c6:eb:
22:0d:41:fd:91:c2:a5:35:c6:0b:53:69:38:2f:61:
db:43:ee:8a:d0:72:eb:89:77:11:c0:56:72:d3:3c:
4c:1f:96:79:9f:4f:df:2a:32:2e:f1:30:47:5e:e7:
c6:b9:ad:c8:87:bb:fc:6a:f9:21:7c:a6:c7:3d:02:
0c:05:ee:6a:46:bc:68:82:37:92:50:f2:ea:59:a9:
5f:78:b3:b9:aa:b4:72:c7:19:f3:ac:31:d1:f9:dc:
bb:cf:f4:f4:0d:28:dc:09:64:f7:63:58:33:6f:fc:
ad:ff:52:fe:88:30:28:33:86:2b:f2:5c:42:35:50:
8b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:54:4D:C1:B5:81:F3:B1:71:4E:5B:EF:F0:8A:50:FF:90:77:FE:6E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/5lRNwbWB87FxTlvv8IpQ_5B3_m4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:5b:32:8a:41:5c:4f:5f:57:6b:b6:c7:bb:7e:5c:4f:6c:b9:
1f:18:f4:f6:57:a5:a0:9d:85:9a:70:fa:15:5c:55:7e:86:86:
33:db:31:c9:92:72:c9:0d:ca:a7:6c:5c:d0:4b:9c:eb:fe:62:
87:7e:70:26:c7:0a:ed:b8:3c:11:91:1b:fe:85:b1:7f:04:55:
cc:07:94:98:ba:c2:51:b8:6f:f2:f1:e3:ff:7e:37:1d:1a:a1:
b8:fb:27:6d:87:fc:10:31:5c:ad:8c:63:4e:28:b8:95:dd:38:
28:11:a5:a4:eb:a9:b7:6d:e7:54:b2:b0:93:47:55:fa:79:57:
44:fb:f9:39:41:37:a4:74:f1:a7:bb:3d:6a:a1:8a:fb:9d:9b:
cd:29:d0:5f:b7:29:ce:14:b2:e5:d8:cf:82:38:ca:14:45:94:
02:98:ca:58:76:35:af:5a:d3:94:14:c1:4b:10:2d:e3:db:1a:
88:64:1a:ee:96:39:f7:51:1f:c8:37:fc:b3:41:24:70:d3:d4:
b1:d6:ff:47:56:11:7b:30:bf:06:74:1f:64:77:8e:b7:5b:d3:
6a:f2:26:69:5b:c3:7a:32:bf:46:d7:83:c0:8c:8a:fe:39:57:
75:5a:03:32:01:f4:a0:08:78:28:b3:77:89:17:df:12:26:c0:
10:7c:94:0a
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZGw7xCwwCrruDWRvvKQqltnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwOTAyMDQxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjU0NGRjMWI1ODFmM2IxNzE0ZTViZWZmMDhhNTBmZjkwNzdmZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrBzy0AlJ5vMclUb+DWLECRZ4pWp
+Jzg30oAGRya2XpplTOfv5AjgdFWP/tfSCzTpxaEEX5iYvRNZq0HaTWBzfVhx0Pw
rAyTTZEKUXiSygAm7x2AtOwP1v8HC4JQbAhPCnEp/Z/fJ78j99Bb69pmpO/OQ7UH
OTSQf7eDOtERf37AjaXFxusiDUH9kcKlNcYLU2k4L2HbQ+6K0HLriXcRwFZy0zxM
H5Z5n0/fKjIu8TBHXufGua3Ih7v8avkhfKbHPQIMBe5qRrxogjeSUPLqWalfeLO5
qrRyxxnzrDHR+dy7z/T0DSjcCWT3Y1gzb/yt/1L+iDAoM4Yr8lxCNVCLiQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFOZUTcG1gfOxcU5b7/CKUP+Qd/5uMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNWxSTndiV0I4N0Z4VGx2djhJcFFfNUIzX200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAtVsyikFcT19X
a7bHu35cT2y5Hxj09leloJ2FmnD6FVxVfoaGM9sxyZJyyQ3Kp2xc0Euc6/5ih35w
JscK7bg8EZEb/oWxfwRVzAeUmLrCUbhv8vHj/343HRqhuPsnbYf8EDFcrYxjTii4
ld04KBGlpOupt23nVLKwk0dV+nlXRPv5OUE3pHTxp7s9aqGK+52bzSnQX7cpzhSy
5djPgjjKFEWUApjKWHY1r1rTlBTBSxAt49saiGQa7pY591EfyDf8s0EkcNPUsdb/
R1YRezC/BnQfZHeOt1vTavImaVvDejK/RteDwIyK/jlXdVoDMgH0oAh4KLN3iRff
EibAEHyUCg==
-----END CERTIFICATE-----
Generated at Mon Sep 2 15:35:04 2024 by rpki-client on console-ams.rpki-client.org