Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Assk6t1oFuwfREM07BdHVaB0VKE.roa
File: Assk6t1oFuwfREM07BdHVaB0VKE.roa (raw, json)
Hash identifier: Xz8sG8eiR8xM7hdve1JAaZyZ0v5iN8jDAm1saJX3eAQ=
Subject key identifier: 02:CB:24:EA:DD:68:16:EC:1F:44:43:34:EC:17:47:55:A0:74:54:A1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192FFE21DFB770A11BB412C8A1A9016DD48
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Assk6t1oFuwfREM07BdHVaB0VKE.roa
Signing time: Wed 06 Nov 2024 05:11:01 +0000
ROA not before: Wed 06 Nov 2024 05:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 10:35:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ff:e2:1d:fb:77:0a:11:bb:41:2c:8a:1a:90:16:dd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 6 05:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02cb24eadd6816ec1f444334ec174755a07454a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:b7:ce:cd:e0:c3:17:00:a7:86:c4:66:61:
01:e9:7a:3b:2e:9f:1a:9b:80:ad:04:84:a1:00:e6:
b6:fe:e4:82:72:06:47:2f:63:e9:5b:2b:d4:aa:8e:
23:16:43:f0:4f:28:8b:0e:e8:91:aa:8c:76:c6:15:
aa:3f:ba:d3:b1:09:fa:a1:0b:8b:c7:a0:c4:a1:96:
67:0c:1b:f7:5c:64:3c:4b:f8:9f:67:27:19:5a:d0:
6e:eb:55:3f:d7:d2:1d:14:b7:4f:8c:4f:23:c6:3d:
7f:c8:33:b3:82:67:94:7f:b6:c3:cb:0b:e0:22:78:
96:67:e5:98:4f:6e:f8:8f:66:ef:7b:fe:cd:38:b2:
c4:9f:06:84:11:16:31:32:09:a9:7d:97:4b:5a:90:
9b:d7:26:88:f1:e0:82:bd:6d:43:02:24:7b:23:f0:
db:f3:3f:7e:6c:47:0c:fa:a3:c4:55:b0:92:3e:11:
c9:fa:1f:2e:59:60:90:44:70:a8:09:85:9d:8f:d3:
c8:d0:1c:c0:18:42:f9:64:b0:6c:0f:6d:8b:db:ec:
20:e8:88:25:37:81:87:fe:86:2d:85:c9:60:6c:bd:
1f:77:b0:e2:3c:84:97:e4:00:c2:49:57:60:61:62:
a3:a8:fc:f8:d3:6d:37:a1:a1:0a:2d:22:c6:b2:10:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:CB:24:EA:DD:68:16:EC:1F:44:43:34:EC:17:47:55:A0:74:54:A1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Assk6t1oFuwfREM07BdHVaB0VKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
5.231.70.0/24
77.90.42.0/24
77.90.54.0/23
87.239.131.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:c3:2b:4c:c4:d2:00:1f:87:01:5b:3c:53:d7:22:1a:bf:
bf:4a:3e:c4:63:c8:2d:a6:12:b0:81:65:d9:b4:ff:e8:45:49:
2a:2e:a3:58:66:fb:84:af:d4:fb:d5:fe:68:dc:7e:ab:86:33:
ce:d9:ee:a1:15:5d:b3:24:e5:f0:6e:c9:e2:bd:25:a4:68:29:
fb:70:e8:3a:2d:83:b9:cd:98:46:80:4a:b0:b9:08:15:f7:24:
d3:29:c8:9e:7c:ac:d5:61:67:8f:c0:21:91:a5:4e:f1:21:66:
4c:5b:47:92:8c:60:22:f7:da:55:17:8c:f1:ac:75:b9:e9:6a:
64:a1:b0:16:b2:f4:4b:04:b1:69:2c:74:4e:2f:fd:c5:51:06:
d2:ee:9a:e3:74:76:2a:16:66:7b:52:c2:1e:20:3d:f1:29:3e:
39:7d:04:83:c6:c7:7f:85:f3:91:17:35:51:24:b4:36:4e:be:
19:46:cd:3b:ba:e7:9e:25:c1:ab:1f:5a:af:ff:2d:de:8b:b8:
f0:89:8c:1d:bd:d1:62:6b:ca:5d:ac:eb:0b:62:ff:41:4b:1c:
ba:8e:7b:c4:c3:ff:2f:b3:fe:ef:0d:25:5b:34:f2:5a:e6:67:
00:d6:fe:c2:84:98:65:77:d5:3f:ff:90:ec:b4:40:d6:7d:a7:
42:30:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 15:01:50 2024 by rpki-client on console-fra.rpki-client.org