Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ADEs0gsQPBk5GtUjsE26YAY58a4.roa
File: ADEs0gsQPBk5GtUjsE26YAY58a4.roa (raw, json)
Hash identifier: DyJDKyiVP3wYqG2ZH1gqlnK1XBBKjcjhXJhpn80m880=
Subject key identifier: 00:31:2C:D2:0B:10:3C:19:39:1A:D5:23:B0:4D:BA:60:06:39:F1:AE
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01929268C2C19D267C24E7B7B5F991EE3E1A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ADEs0gsQPBk5GtUjsE26YAY58a4.roa
Signing time: Tue 15 Oct 2024 22:59:51 +0000
ROA not before: Tue 15 Oct 2024 22:59:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.52.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 16 Oct 2024 18:41:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:92:68:c2:c1:9d:26:7c:24:e7:b7:b5:f9:91:ee:3e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 15 22:59:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00312cd20b103c19391ad523b04dba600639f1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:10:29:a4:75:72:d5:cc:9c:06:82:3d:20:
54:5b:91:75:9f:a4:ed:6a:eb:2b:c9:7d:74:d0:19:
a3:71:cd:58:ce:92:ce:16:92:e1:c4:09:81:a4:b3:
af:4c:a9:f1:12:3f:bd:f0:a9:9e:1a:4c:ee:7e:31:
66:65:3f:7f:b9:93:1c:52:b6:13:9a:65:04:41:25:
aa:9b:de:91:31:f2:38:82:4d:3c:0b:c5:e6:e4:6c:
41:71:49:2f:c8:d7:05:68:11:ec:82:1a:e6:33:1d:
1c:7c:7c:cf:78:b7:a0:d8:08:3b:dc:45:0a:e9:f3:
4e:a2:81:fb:eb:14:26:ab:ae:60:5d:0e:23:df:48:
24:c0:f6:c1:cc:b8:03:6a:f5:16:9b:34:51:d9:10:
af:1f:97:70:32:4e:90:6f:41:d3:c2:62:ff:ba:c5:
4e:b3:36:5b:d7:c2:28:cb:9e:7b:85:91:b4:9b:db:
77:1a:57:88:bf:6b:c6:fd:9c:75:a6:09:45:16:11:
de:1b:3a:b9:13:42:08:f0:e0:2c:98:9e:23:0a:9c:
aa:57:70:25:c4:16:08:84:b5:a9:60:ee:69:7d:de:
83:83:8b:6d:e5:e5:8b:55:bd:3f:ee:3c:30:05:3d:
8c:c8:45:8a:78:16:8a:eb:d8:7a:9a:fb:ac:94:45:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:31:2C:D2:0B:10:3C:19:39:1A:D5:23:B0:4D:BA:60:06:39:F1:AE
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ADEs0gsQPBk5GtUjsE26YAY58a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:0e:f1:b9:9c:c6:51:c4:62:53:21:79:6c:25:dc:fe:95:b5:
5c:85:13:19:f2:bb:89:b1:62:9f:85:fe:73:38:ff:48:6e:82:
c8:45:f2:f7:e2:cd:24:59:f4:9a:8d:73:10:cc:fc:22:8c:b4:
c5:b2:a5:0c:33:ea:d2:af:8d:68:3f:9b:bd:47:4f:50:c1:65:
37:0b:1c:5f:2e:5a:a6:9e:ba:6d:b5:41:60:38:f6:f4:b2:9b:
4e:00:f7:dc:02:1c:c2:69:5f:2e:f7:f6:5f:83:99:f3:24:fb:
f1:69:26:94:da:d9:de:5b:87:25:d7:85:f1:ed:f0:19:e6:c2:
9b:eb:ed:ab:1e:ec:a3:ec:aa:cb:1c:28:11:68:d2:a1:7f:7e:
45:3c:b4:05:13:a2:5f:81:a5:3e:02:cc:b3:84:3a:41:1c:c5:
0f:f7:ad:a0:30:2d:ad:af:cd:d5:66:da:1c:a9:d9:36:39:94:
15:4d:b7:cf:fa:9b:d2:ec:d0:14:46:46:b4:c4:62:ad:11:33:
79:2b:8a:e4:53:a5:7d:d8:60:5a:50:60:87:d4:5f:f2:2f:f7:
37:71:bb:dc:99:28:82:8c:ab:92:fa:cb:eb:21:1a:84:6f:95:
d7:5e:29:5e:22:ad:2e:48:77:e1:b7:8a:80:4b:c5:ae:2d:69:
e7:cb:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 21:17:35 2024 by rpki-client on console-ams.rpki-client.org