Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D6xm4ghHOQPlit4u10qDKb2cm24.roa
File: D6xm4ghHOQPlit4u10qDKb2cm24.roa (raw, json)
Hash identifier: 6bzPu7YLtL6i5LOa4eJmlJA0kf0q13sVS7plixephcg=
Subject key identifier: 0F:AC:66:E2:08:47:39:03:E5:8A:DE:2E:D7:4A:83:29:BD:9C:9B:6E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192CC2655507794EF59CA66A59A1C758DAF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D6xm4ghHOQPlit4u10qDKb2cm24.roa
Signing time: Sun 27 Oct 2024 04:05:17 +0000
ROA not before: Sun 27 Oct 2024 04:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.129.0/24 maxlen: 24
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.136.0/24 maxlen: 24
5.175.139.0/24 maxlen: 24
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.45.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 28 Oct 2024 01:58:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cc:26:55:50:77:94:ef:59:ca:66:a5:9a:1c:75:8d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 27 04:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fac66e208473903e58ade2ed74a8329bd9c9b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:df:75:b2:7b:b7:10:cd:f3:dc:30:33:94:36:
b3:c6:30:67:b0:db:15:b8:cd:c4:80:73:df:f5:d8:
1d:b2:4e:fa:81:f4:d3:70:e5:68:85:dd:e1:a4:2a:
ab:83:93:d2:5c:e4:a7:8c:b8:51:29:a8:4a:28:a4:
b0:8b:c0:f6:a2:b8:28:e1:4e:0d:79:af:67:01:6a:
ed:2b:c4:51:e1:42:54:47:b5:09:ee:11:70:57:f9:
82:67:df:45:7d:5c:77:32:f0:a0:ce:c5:ed:fc:d2:
f5:2b:fc:f4:36:e2:0a:2c:26:4a:e1:c5:a8:05:6a:
5c:26:0c:5f:33:de:af:d6:15:bc:d6:5e:db:c7:d0:
30:12:c2:61:45:e3:1f:59:7f:b8:22:28:e7:8d:89:
0e:5c:0f:11:5f:a9:04:15:c8:31:8c:fb:fe:97:11:
21:7e:3e:d0:61:20:d1:54:79:f6:87:b1:cb:82:9f:
7b:b0:45:99:82:9a:1c:aa:3a:a5:53:f0:22:29:a6:
25:c2:50:b9:77:e8:53:d3:b0:f3:10:7e:c7:29:38:
33:51:01:5c:bc:d0:50:5d:73:8a:cb:f6:6d:ad:61:
19:ec:33:61:a1:23:45:85:23:b9:49:41:b3:bf:3e:
7d:3a:5f:08:6e:7d:d3:27:c4:bc:66:b2:26:2e:6e:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AC:66:E2:08:47:39:03:E5:8A:DE:2E:D7:4A:83:29:BD:9C:9B:6E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/D6xm4ghHOQPlit4u10qDKb2cm24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
00:24:db:8f:d0:9e:0a:4e:f4:03:64:78:e9:a2:6e:82:a9:51:
5c:9f:ce:5c:e8:bf:2b:5b:cd:3a:d2:a5:bc:7c:ff:90:7b:38:
cc:9e:fd:aa:f6:88:ca:f7:ba:7a:ba:ee:f1:81:76:d5:72:d4:
33:83:28:cf:79:f1:cb:83:13:a5:14:c7:e8:6f:15:5a:c3:eb:
f8:42:57:06:f4:ec:85:e7:91:f6:f1:a9:55:37:1c:0c:0e:8d:
83:75:e7:a1:30:e6:b1:49:61:f0:35:73:fa:d3:9a:b1:88:ec:
44:fc:d7:ac:9a:c1:f3:39:6d:d6:51:e6:a1:e1:f3:e6:03:73:
62:5d:c5:5d:f5:ff:07:02:ff:82:59:8b:be:bb:2a:55:13:12:
2b:23:65:04:6c:99:e1:ea:4a:a0:fe:54:23:6d:5f:65:be:ba:
99:1c:df:54:25:e1:61:e7:03:d4:06:70:ac:b6:db:b7:8f:a4:
d0:8a:2e:f2:39:a7:5e:49:a0:da:78:56:b5:8d:a2:33:14:3d:
76:5d:75:52:67:e2:a0:4b:60:3a:bf:2e:2b:f2:f7:ff:be:9f:
1a:02:2e:5c:25:34:22:c4:ed:7d:b2:27:6c:cf:12:d5:3e:39:
34:b7:3a:3d:0a:46:c1:6e:39:9a:8a:b1:29:65:1f:b9:12:dc:
d6:50:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 05:17:55 2024 by rpki-client on console-ams.rpki-client.org