Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8azdxrzx44hmk6FuhPg0Wgj5Fkg.roa
File: 8azdxrzx44hmk6FuhPg0Wgj5Fkg.roa (raw, json)
Hash identifier: xmm5Xvft2lsDZHd2d5jfJCZJ4jcDO6eVT2e/lK3zjJs=
Subject key identifier: F1:AC:DD:C6:BC:F1:E3:88:66:93:A1:6E:84:F8:34:5A:08:F9:16:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191EA789E2072418D40680FC80AFCA5E11B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8azdxrzx44hmk6FuhPg0Wgj5Fkg.roa
Signing time: Fri 13 Sep 2024 08:20:58 +0000
ROA not before: Fri 13 Sep 2024 08:20:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sun 15 Sep 2024 09:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:78:9e:20:72:41:8d:40:68:0f:c8:0a:fc:a5:e1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 13 08:20:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1acddc6bcf1e3886693a16e84f8345a08f91648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b9:ea:a1:cf:08:b6:cf:d5:e9:1e:34:85:ae:
cf:a2:f5:34:b5:71:5b:d0:cd:fe:c6:fd:08:61:ed:
40:79:3a:58:5e:06:07:76:15:79:2f:ae:a5:e8:3f:
fc:8d:f4:a3:68:cc:0c:18:ff:cd:7b:10:a7:53:32:
24:45:ba:74:d9:45:cf:c2:79:40:11:a1:71:db:94:
7f:9d:87:7f:07:20:bf:d4:b6:8f:4b:82:26:84:d0:
f4:39:d3:64:1e:05:67:3d:c2:9f:61:f1:53:4e:1c:
20:bb:84:1a:a0:30:c4:4f:44:94:06:a5:63:83:fc:
e5:f4:5e:46:c2:8a:c7:58:de:4b:a5:98:9f:06:b3:
99:2b:94:db:83:af:28:bd:8b:1c:b5:6e:36:ae:d0:
39:a8:5b:9b:ca:30:9a:39:84:4c:34:14:c9:d3:2f:
a7:57:5e:23:83:fc:93:55:1f:48:a6:9e:da:86:6a:
ce:55:d0:31:87:33:8a:f9:9e:09:ef:18:3a:90:68:
da:9b:f2:38:07:46:8b:65:5b:d6:4a:f4:86:90:dd:
6b:d0:c1:a1:63:79:7a:df:78:1f:70:62:e3:e8:0d:
89:a4:30:4e:ff:43:77:86:36:26:21:f6:e5:9e:36:
33:ab:1c:14:f5:82:31:dc:de:da:42:ff:1a:42:2d:
0b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AC:DD:C6:BC:F1:E3:88:66:93:A1:6E:84:F8:34:5A:08:F9:16:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/8azdxrzx44hmk6FuhPg0Wgj5Fkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
44:eb:d8:9c:56:c2:8c:32:a9:9a:84:9e:01:f8:cd:68:b1:a8:
bb:21:4d:3b:40:61:8a:fd:2d:b2:ae:98:07:8c:5a:54:ab:06:
7a:78:b4:b3:bd:7f:0e:ae:36:a4:5e:e5:99:f0:7c:c7:3c:bb:
01:63:1c:b7:72:b3:c6:1d:45:66:6a:8c:97:19:9b:d3:fb:00:
38:44:51:76:3d:da:0b:c5:5c:34:10:d1:2a:7b:16:18:0e:03:
ff:ef:70:41:80:b4:96:a8:e8:89:24:64:15:b6:93:33:5b:e7:
0e:c0:4d:44:97:c4:7f:9b:c6:f8:78:69:7a:a0:12:4f:15:e4:
0f:d1:6b:c5:09:a3:14:a4:a4:21:bf:d7:8a:5f:8b:a2:8c:f4:
be:19:10:ae:b5:f6:ee:87:04:f1:6c:6e:ef:c9:97:53:d3:d0:
e4:e2:80:c9:32:df:18:5b:e5:37:c2:6d:60:10:e0:b2:19:59:
21:f9:7b:e4:2d:a3:31:de:8c:0d:fc:0d:18:ec:8b:ef:a8:ae:
b2:79:ad:e7:2b:c6:0b:1a:5a:71:09:c7:d2:ad:b6:ac:d8:60:
53:74:91:1f:85:e2:a0:d4:b0:c4:db:05:4c:90:3e:5b:a5:5b:
91:dc:cb:ce:a8:f7:4a:9f:4c:30:0c:b4:16:bf:79:c7:eb:6e:
04:be:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 11:19:27 2024 by rpki-client on console-ams.rpki-client.org