Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B8JdRykg9ufhSkCF8pypPPVaG-U.roa
File: B8JdRykg9ufhSkCF8pypPPVaG-U.roa (raw, json)
Hash identifier: djPlA8xGjNLJTXDmTKJ7bS5BdGw6zOkcmwFaxWk2dgY=
Subject key identifier: 07:C2:5D:47:29:20:F6:E7:E1:4A:40:85:F2:9C:A9:3C:F5:5A:1B:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018F09F566B7BB3C8A30D7D971895ED2CB8E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B8JdRykg9ufhSkCF8pypPPVaG-U.roa
Signing time: Tue 23 Apr 2024 07:57:08 +0000
ROA not before: Tue 23 Apr 2024 07:57:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.14.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 30 Apr 2024 04:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:f5:66:b7:bb:3c:8a:30:d7:d9:71:89:5e:d2:cb:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 23 07:57:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07c25d472920f6e7e14a4085f29ca93cf55a1be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4e:44:72:53:9d:06:62:01:5e:78:8c:c9:4c:
8c:c5:15:ed:19:cf:2a:92:b0:9d:a4:86:4c:6c:9a:
14:1a:42:68:07:a1:7c:58:cd:b7:af:db:51:02:32:
b3:8a:5f:b3:71:95:60:82:5e:41:f3:f3:4c:f1:10:
06:d0:cc:18:ca:a3:74:86:03:1f:b9:2e:88:2d:10:
5f:64:42:4e:eb:7a:e6:a0:17:0e:95:bf:f5:5b:a8:
52:51:50:7f:66:8d:57:11:6a:ec:3e:d8:34:cc:93:
47:27:36:ab:1e:1b:d0:44:17:50:71:96:a6:7c:73:
d0:89:f0:0c:18:38:3b:90:77:e0:e2:0f:9a:90:1e:
ad:43:18:e1:f8:2f:98:66:d6:cc:d8:ac:ff:24:73:
29:bf:d7:38:8e:dc:42:09:ab:fa:2e:52:b0:44:d0:
31:38:cd:d4:f3:7c:c3:0c:61:82:a6:92:83:79:51:
66:d1:8f:f4:14:5e:d0:a6:3b:99:60:8a:59:f5:fd:
99:76:80:70:a9:43:0b:63:ec:d0:b9:ef:75:85:cd:
72:41:da:66:f5:cc:f9:e9:a8:e2:de:a6:40:ec:ca:
47:01:33:83:08:13:07:1a:18:59:cc:56:db:80:40:
27:5f:6c:7a:ed:64:2c:f9:3c:26:b3:6e:78:cd:d2:
06:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:5D:47:29:20:F6:E7:E1:4A:40:85:F2:9C:A9:3C:F5:5A:1B:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/B8JdRykg9ufhSkCF8pypPPVaG-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
81:99:eb:d1:b2:b9:08:b6:3b:fc:0c:1d:8c:df:05:0f:60:ac:
3a:78:5b:de:de:9d:b0:50:90:3c:b3:ea:69:21:06:0c:85:89:
2d:04:d4:eb:3d:b1:d9:2f:44:fe:78:19:83:43:8d:38:9c:28:
8a:dc:70:6f:ed:8f:0b:e0:78:30:f1:23:c4:7a:cc:81:42:30:
12:23:1d:86:1a:7f:aa:b3:4d:94:8e:8e:1f:9f:76:58:fe:98:
20:d3:26:1d:e2:2b:ef:50:bb:ff:93:07:08:f5:16:94:05:7e:
57:b3:ad:49:36:08:c6:1f:5c:40:d9:7d:e0:5a:b7:12:09:62:
6c:e5:4d:f2:f9:ed:4c:13:d9:f7:f8:29:d0:8e:19:0e:36:2d:
c6:0a:59:e4:71:1e:90:9c:a9:5a:54:9b:92:a2:b9:07:fb:05:
5c:94:ee:82:65:31:d5:8e:44:26:a7:e5:5f:9b:a6:e4:f1:41:
58:0b:b5:8e:48:ce:27:a7:48:a3:67:d6:25:e9:14:84:34:c9:
61:c9:22:99:5d:19:5e:08:ff:8c:1b:b0:ed:1f:a9:35:75:4a:
32:9f:f3:39:51:20:30:51:65:7a:76:73:70:df:34:30:a4:d4:
c5:35:43:fa:ca:cb:30:84:b1:90:05:bb:b0:b9:f8:50:f1:88:
61:63:ca:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org