Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9wq9S1FQ6W9fvX0fcz04n-vnpFc.roa
File: 9wq9S1FQ6W9fvX0fcz04n-vnpFc.roa (raw, json)
Hash identifier: WiRdPfW6HKC6KF/pLz8edZMN/0FOTr7Lb7JAx0GfJUA=
Subject key identifier: F7:0A:BD:4B:51:50:E9:6F:5F:BD:7D:1F:73:3D:38:9F:EB:E7:A4:57
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01924F5D51E47FE8C490C8EDE25D4324E29C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9wq9S1FQ6W9fvX0fcz04n-vnpFc.roa
Signing time: Wed 02 Oct 2024 22:32:48 +0000
ROA not before: Wed 02 Oct 2024 22:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 03 Oct 2024 01:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4f:5d:51:e4:7f:e8:c4:90:c8:ed:e2:5d:43:24:e2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 2 22:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f70abd4b5150e96f5fbd7d1f733d389febe7a457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:fb:37:c2:8a:7f:1d:62:3f:58:1f:c5:87:
3f:1b:39:7c:b4:40:5a:fa:33:aa:c1:12:8f:74:a3:
f3:a2:65:ca:70:e7:f2:db:ba:72:37:86:b9:5e:92:
c9:c7:46:98:45:ce:26:9a:49:f1:1d:cc:29:16:19:
fd:a7:93:7e:6c:c0:3c:d8:0b:e4:1e:1f:3a:8a:32:
ce:6c:83:38:a4:9f:4d:32:04:63:3d:31:ff:cc:dd:
37:06:bb:7c:b3:9a:bd:2e:ee:33:2d:63:97:af:5e:
0c:74:3c:af:02:15:06:c6:ac:4f:4d:86:55:54:db:
2e:87:09:f3:40:c7:44:d0:5d:55:2a:a2:77:cc:a3:
19:d4:40:06:0a:66:d5:4b:4a:93:c6:15:ba:c2:bc:
b6:fa:b4:e6:e9:da:96:01:3b:69:86:b8:44:87:fe:
43:45:82:af:85:95:4f:6c:cd:35:04:93:a2:59:ce:
d2:a7:4b:23:a1:44:ac:32:f6:8b:1b:50:a6:47:20:
db:c6:88:90:72:8d:96:4f:8b:25:3e:7d:f9:6c:0e:
07:57:bf:e2:7a:a9:3c:85:da:5d:76:3a:7d:50:33:
36:a1:4d:c5:2e:9b:e3:53:bf:f4:51:37:2d:2f:06:
1d:ce:34:62:23:b4:99:29:b0:b1:c6:66:84:87:1b:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0A:BD:4B:51:50:E9:6F:5F:BD:7D:1F:73:3D:38:9F:EB:E7:A4:57
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/9wq9S1FQ6W9fvX0fcz04n-vnpFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
50:90:6b:51:30:22:22:b4:7c:05:ba:14:97:7a:ab:b0:dd:8c:
b4:84:ff:9c:66:ac:61:71:af:8d:d5:2a:ab:e3:b7:e0:93:d0:
be:63:ea:55:a8:8b:4c:ba:63:ce:f9:61:ce:e8:df:43:d5:82:
2c:55:4c:b7:e5:54:9e:af:ce:b0:ca:2a:f8:39:bc:b7:2d:74:
e8:95:00:04:a3:5c:71:2f:43:5b:fb:1a:7e:98:e2:33:83:56:
f6:e4:3b:d9:dd:03:00:83:2e:ec:5e:56:79:e4:52:db:7b:88:
62:35:34:d4:87:a0:22:6e:6f:60:40:86:2e:f3:11:ea:6d:8e:
d5:82:a1:8c:68:06:65:5d:27:45:7f:63:14:c6:a8:80:30:02:
cf:30:25:7f:cc:a6:80:ce:4b:79:bc:66:3a:20:77:9e:c9:cc:
bd:fd:b3:74:28:08:c0:e2:0a:0d:2b:de:a1:78:14:f2:ac:20:
a9:46:6b:f9:af:97:be:e4:2f:49:59:a6:a6:0b:80:b2:2a:3a:
2d:87:35:69:f5:e3:c4:83:7b:e4:35:2b:f2:b0:1d:f5:98:54:
66:5b:17:86:9a:bb:7b:c0:d8:e7:61:fc:95:49:af:57:82:ff:
0d:98:bb:fd:ef:bc:fc:50:5c:a5:33:ae:2a:c9:5b:fe:7e:b4:
b5:86:59:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 04:47:37 2024 by rpki-client on console-ams.rpki-client.org