Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6SS37hImmbPv50JvmQis7c-9Ckk.roa
File: 6SS37hImmbPv50JvmQis7c-9Ckk.roa (raw, json)
Hash identifier: Nax/+jiK1vgLxV3UUoK3NpZuFg6M2F2dCS4KlPa89No=
Subject key identifier: E9:24:B7:EE:12:26:99:B3:EF:E7:42:6F:99:08:AC:ED:CF:BD:0A:49
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192765F551A527C22EC4A54265626C3A098
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6SS37hImmbPv50JvmQis7c-9Ckk.roa
Signing time: Thu 10 Oct 2024 12:20:12 +0000
ROA not before: Thu 10 Oct 2024 12:20:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 11 Oct 2024 04:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:5f:55:1a:52:7c:22:ec:4a:54:26:56:26:c3:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 10 12:20:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e924b7ee122699b3efe7426f9908acedcfbd0a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ad:2b:46:c8:04:56:7d:ff:18:fa:01:11:fa:
81:59:d9:76:d4:e6:5a:f0:41:81:f5:9e:df:38:5c:
8d:2b:89:36:8b:b9:d8:f5:07:00:6a:e8:ec:5c:35:
ac:31:21:47:91:d6:5f:34:c4:9d:ae:a7:b0:c5:07:
33:b4:40:83:87:99:9b:7a:4b:80:0f:2b:f6:db:89:
43:cd:69:96:14:3f:6a:b0:45:ce:b1:f9:5a:00:62:
62:45:d8:e8:b4:9b:87:5e:05:e3:28:0a:8d:d3:13:
17:f3:a1:55:7f:0f:d8:0f:36:d5:e0:cc:97:8a:15:
2b:56:77:7a:e0:c4:53:80:dd:56:b7:bb:7c:a4:50:
f9:17:14:f5:5e:7c:41:ec:3d:5a:17:0e:83:1e:4b:
18:1c:4d:a6:ea:85:fd:5a:21:2e:a0:08:cb:ae:21:
25:73:1f:65:34:5a:40:4d:c6:8c:70:4c:8c:01:4a:
f0:3e:64:a8:4e:9e:15:55:bf:11:e0:c5:eb:02:df:
7a:db:78:af:4a:8d:d0:c2:cc:77:3e:0d:80:18:96:
de:23:e4:c0:d1:ea:6e:53:8f:03:3f:0c:a5:b8:0f:
1b:c8:9e:a6:1f:d3:7e:be:6f:0d:3f:c2:23:07:67:
26:ff:ab:62:83:fc:08:96:2a:c7:a9:28:2a:88:b1:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:24:B7:EE:12:26:99:B3:EF:E7:42:6F:99:08:AC:ED:CF:BD:0A:49
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/6SS37hImmbPv50JvmQis7c-9Ckk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:1d:4d:c5:91:b8:38:63:ed:76:cf:bf:51:b7:f2:ba:13:b2:
dd:01:ef:31:36:f4:11:fa:66:98:7b:56:d1:55:1f:20:38:7f:
ee:ab:33:d1:95:d9:0b:27:38:d9:64:c4:cc:7a:3e:d5:a1:f4:
a0:54:81:68:16:ac:66:75:99:d6:6f:04:31:9b:ee:da:b8:9e:
32:e2:73:16:35:c4:be:60:77:8a:8e:8f:da:28:a4:62:9e:49:
58:71:3a:33:59:e0:ae:ce:73:4d:48:f1:55:70:fb:0b:a3:5f:
05:83:89:c4:90:29:53:ca:ac:54:88:85:1d:d2:ae:1f:14:33:
5f:9c:fc:60:4c:d2:d5:6d:fb:0f:55:24:4c:5c:88:ef:cb:6c:
2c:7a:5b:8f:1c:b2:e3:6a:6c:02:b8:cd:14:f5:e5:75:cc:b2:
09:14:f3:56:bb:83:f1:51:72:ec:37:84:29:26:3f:43:16:66:
f4:0f:55:bc:67:7a:ea:94:32:bb:a9:36:1b:2f:ab:ec:45:bc:
0a:c7:db:04:bc:c2:e6:04:37:6d:e7:4c:70:8b:d9:0f:43:6c:
25:25:3b:2f:c5:e2:57:d6:83:61:96:13:1b:fc:24:18:ed:9b:
f8:e4:23:ec:43:30:3c:dc:18:7f:9e:5e:74:24:6c:15:13:3d:
ed:1d:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 07:28:40 2024 by rpki-client on console-fra.rpki-client.org