Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ByjurrzA7nukSR_Fo46reSbXya8.roa
File: ByjurrzA7nukSR_Fo46reSbXya8.roa (raw, json)
Hash identifier: MvixpwF4pE9bBMJfBEGB8AXWSwBsca7P0FPhEyn3YWw=
Subject key identifier: 07:28:EE:AE:BC:C0:EE:7B:A4:49:1F:C5:A3:8E:AB:79:26:D7:C9:AF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192740FE7522674E1AC9A5D78A82EB9999E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ByjurrzA7nukSR_Fo46reSbXya8.roa
Signing time: Thu 10 Oct 2024 01:34:12 +0000
ROA not before: Thu 10 Oct 2024 01:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 04:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:74:0f:e7:52:26:74:e1:ac:9a:5d:78:a8:2e:b9:99:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 10 01:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0728eeaebcc0ee7ba4491fc5a38eab7926d7c9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:f2:18:3c:79:bf:60:4c:2a:eb:7a:95:45:
07:96:ef:3b:40:6b:fc:5c:1c:e4:1e:c2:3c:73:bd:
c1:56:65:25:01:3b:62:22:c6:ba:59:93:03:b5:88:
4b:91:69:aa:09:b1:b0:ae:8a:33:46:26:4f:09:c5:
8a:a8:b9:00:e1:82:e1:eb:9c:03:9e:36:77:6e:ca:
ca:ee:31:8c:e5:8a:de:3f:e2:13:73:f6:67:57:b6:
a1:b4:7b:23:87:96:6b:8a:f8:58:64:30:0c:fd:23:
f7:b4:53:3c:17:f4:84:1b:f7:6f:0b:e2:96:c6:f1:
a2:e1:bf:b9:26:b0:24:54:1c:d5:bf:81:01:f5:df:
fa:f2:96:21:06:d1:de:d1:e3:5f:89:02:cf:9a:39:
a3:4a:29:a9:42:58:b9:78:07:f4:0c:d0:cf:dd:ea:
4a:79:ca:1f:51:bb:d9:3e:e1:2e:68:e2:fa:5b:95:
a8:47:49:e1:21:b2:e0:2b:72:ce:c9:82:1a:d1:18:
7a:1b:24:fa:79:01:f3:bd:5a:c6:92:87:03:aa:9c:
fd:b4:5b:23:8b:3a:74:cd:be:9d:b2:c9:fe:5f:ad:
5a:19:11:81:18:f9:87:57:dc:6d:f1:28:07:f8:55:
7e:d7:6f:8d:15:fc:3a:e1:2a:02:7d:a2:0f:37:f9:
d8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:28:EE:AE:BC:C0:EE:7B:A4:49:1F:C5:A3:8E:AB:79:26:D7:C9:AF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ByjurrzA7nukSR_Fo46reSbXya8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
5.231.70.0/24
77.90.42.0/24
77.90.54.0/23
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:81:52:a6:c1:79:68:94:03:dc:fe:f3:53:1a:ea:0b:7f:f0:
53:4a:22:32:a2:6b:5d:86:50:3f:be:59:0c:e3:a9:9f:d4:f5:
7a:44:57:f7:a6:28:d8:34:f2:9f:0b:f4:ee:64:93:1f:9f:b7:
e6:7f:0f:8a:96:e5:36:69:b0:18:bf:a2:db:b2:10:e7:51:8b:
8e:ba:e7:fe:6e:eb:fa:73:98:5f:4e:00:ab:55:63:f8:40:14:
09:1e:16:ec:ad:30:d7:cc:49:66:a3:f7:69:e6:54:04:4e:2a:
98:6a:91:b8:3b:e4:e7:a0:c8:b9:a4:91:98:c5:2b:db:81:57:
4a:48:f5:42:f1:42:1d:53:83:ef:44:55:ad:ad:c6:32:0a:84:
65:85:4b:27:2c:52:bb:31:60:b8:af:50:4b:3c:90:ee:7a:14:
85:04:ec:60:a7:a6:97:78:d3:a1:09:3c:4f:7f:9c:4e:6f:08:
d0:14:f0:88:f8:29:75:47:07:4b:7d:a0:cd:4c:69:1d:2b:f7:
dd:35:d4:57:fc:20:64:16:a2:3b:b9:3e:f2:f2:56:60:32:90:
39:a8:eb:ad:f0:48:84:cf:09:ec:f6:0d:aa:8a:55:7f:24:19:
1a:af:19:e5:6f:fe:7e:17:1e:55:6a:14:34:80:93:df:ea:84:
84:42:f2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 06:32:35 2024 by rpki-client on console-ams.rpki-client.org