Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D5H1IS98V-Sa2oILTxR8Oe28ZK0.roa
File: D5H1IS98V-Sa2oILTxR8Oe28ZK0.roa (raw, json)
Hash identifier: nLKWBILOIYl+YxCC4zGyFQNthZazcX8VDfKze5xN2Vw=
Subject key identifier: 0F:91:F5:21:2F:7C:57:E4:9A:DA:82:0B:4F:14:7C:39:ED:BC:64:AD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018F9953EBC4CCB84D6EA3FD59E88A09EA5E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D5H1IS98V-Sa2oILTxR8Oe28ZK0.roa
Signing time: Tue 21 May 2024 04:06:04 +0000
ROA not before: Tue 21 May 2024 04:06:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.15.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 22 May 2024 04:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:99:53:eb:c4:cc:b8:4d:6e:a3:fd:59:e8:8a:09:ea:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: May 21 04:06:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f91f5212f7c57e49ada820b4f147c39edbc64ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:27:f6:7e:8d:e2:31:a3:ff:b3:ed:bd:42:03:
0b:5f:44:ef:67:08:e9:4e:5e:94:ef:55:94:2b:ef:
8f:0c:65:6f:fe:8f:4a:3c:b5:1d:31:e6:b3:5e:65:
e1:58:2e:6f:62:5b:ef:4e:d9:28:b7:7c:a1:0f:f8:
f1:c1:6e:3c:fb:bd:3d:6b:8b:1b:21:b4:5d:9a:38:
6a:a9:ff:9d:8d:80:0c:d2:c8:01:a1:b9:0a:ef:c8:
13:95:b8:c3:90:f8:01:ba:dd:61:02:c9:7d:15:a7:
80:aa:b6:1a:fe:8d:a9:80:38:ce:0e:20:28:07:f8:
33:c5:59:87:26:d8:42:b7:fb:08:88:42:36:34:5d:
95:be:f4:9c:8d:83:b1:c5:7b:82:0c:52:a2:da:70:
1b:2c:df:94:5e:b0:c9:85:cc:5b:ef:b2:fc:05:83:
37:10:5b:02:69:1a:89:53:44:7b:b1:cc:ed:3e:b9:
e4:f2:02:3c:5d:5f:00:be:da:1e:2d:2f:c0:1c:25:
3c:ee:9f:32:9f:d3:e5:46:48:92:7d:d0:58:a9:26:
5d:12:f3:4c:bb:5f:1a:74:27:0d:02:6c:41:f7:4a:
63:c3:85:39:c7:05:bd:64:00:a3:9c:7d:de:03:cb:
7e:17:2f:43:ba:13:ed:e2:00:c6:ed:6f:e1:f3:e9:
8d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:F5:21:2F:7C:57:E4:9A:DA:82:0B:4F:14:7C:39:ED:BC:64:AD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D5H1IS98V-Sa2oILTxR8Oe28ZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
56:c4:40:3a:a8:8d:60:fb:fd:3f:14:ce:06:9a:f0:f3:4e:09:
aa:d9:1d:3b:f1:ba:7a:08:14:a8:3b:13:e4:bf:3e:0f:7d:55:
7e:45:93:db:2b:38:76:98:f5:39:e2:1b:ea:5d:6f:0d:89:cd:
d5:38:c8:f9:84:5b:26:2c:ca:a7:37:78:cd:b0:c6:4b:77:32:
58:3f:86:ec:07:6d:d2:c9:2a:40:fe:71:4f:7b:2d:d8:1b:22:
fe:04:4d:f5:b7:e4:3c:26:d3:27:36:13:89:2c:c5:25:9a:cd:
ae:06:17:8c:08:66:ba:17:2a:e9:1f:c5:71:87:03:18:d9:3b:
e6:66:ab:36:60:c5:0f:20:2c:ce:58:71:00:4c:81:bb:5e:32:
f0:33:00:35:14:e7:af:f3:b9:a6:46:b5:8f:31:3f:d7:86:24:
00:ea:f0:51:2f:c1:8e:3e:ca:46:bb:47:ed:32:00:22:1f:c6:
14:b0:95:f1:e4:d1:a3:00:0e:a3:67:dd:8c:48:c2:b2:9a:b8:
10:16:b8:ff:d0:a2:99:a9:be:11:ac:af:ea:6a:54:e8:50:c8:
ca:73:5d:aa:9f:81:a8:88:85:43:21:64:0a:c2:c1:72:96:65:
46:ec:3c:ca:95:f5:e6:6d:8c:3f:87:6b:dd:50:93:49:b9:10:
50:85:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org