Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHKRu_TDgzbH3MfaB-DpKytl1rY.roa
File: DHKRu_TDgzbH3MfaB-DpKytl1rY.roa (raw, json)
Hash identifier: N7+epC25upjWnW3mib6I7GRu9pj9Np6ZQ8EFoQQ5ntY=
Subject key identifier: 0C:72:91:BB:F4:C3:83:36:C7:DC:C7:DA:07:E0:E9:2B:2B:65:D6:B6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01919C510BD312E91281FD81AF47B71A67B2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHKRu_TDgzbH3MfaB-DpKytl1rY.roa
Signing time: Thu 29 Aug 2024 04:07:22 +0000
ROA not before: Thu 29 Aug 2024 04:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.28.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 29 Aug 2024 16:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:51:0b:d3:12:e9:12:81:fd:81:af:47:b7:1a:67:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 29 04:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c7291bbf4c38336c7dcc7da07e0e92b2b65d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:13:c9:b7:7f:33:1c:f9:ae:0f:68:99:21:
17:4b:ed:be:31:f4:8a:c3:45:d4:3f:a9:13:05:c8:
f1:e5:e7:bb:44:7d:e9:f6:4e:12:29:9e:6d:69:d4:
0e:6f:91:70:6b:09:b7:7d:32:c8:10:7d:0e:49:61:
f8:62:f9:a5:11:62:26:4f:f5:ff:ed:c1:88:dc:36:
4a:05:17:87:64:ed:be:21:d4:db:51:eb:81:dd:67:
83:1d:1a:71:97:a3:44:c4:78:79:2d:b9:42:71:52:
32:35:21:b4:98:2d:5e:96:83:4e:50:22:eb:df:55:
f1:81:4e:d0:64:de:f9:ec:3f:e5:d8:df:c8:14:fb:
bf:3f:f6:a9:67:e9:2b:77:93:32:eb:5f:9d:8e:b5:
66:1e:c4:19:de:95:84:0b:15:fb:88:02:03:31:69:
9a:cb:d8:b4:d3:82:95:7e:2e:d1:bb:2f:18:8e:d1:
11:5f:98:f7:bf:f8:a4:98:dc:ec:33:3d:50:1a:bb:
16:85:a1:8a:13:d0:13:a7:7c:05:73:d1:96:b6:90:
da:32:81:df:2b:59:65:17:d6:06:25:78:73:c8:e5:
99:f8:8c:88:7e:ec:09:3b:2a:98:b6:b3:af:e1:b9:
db:13:0a:a2:64:72:3d:b4:f3:e3:51:ad:a7:f8:3b:
3e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:72:91:BB:F4:C3:83:36:C7:DC:C7:DA:07:E0:E9:2B:2B:65:D6:B6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DHKRu_TDgzbH3MfaB-DpKytl1rY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
df:be:78:3f:5d:69:22:2d:90:61:ab:a4:cd:d2:de:27:83:64:
01:d5:58:fe:d7:e7:05:5e:fd:aa:7f:0c:c2:b4:5c:be:e2:8d:
41:40:dd:a1:a8:59:99:5a:e8:15:6b:4c:95:eb:fe:85:8a:3d:
c5:f1:d1:95:09:8d:bc:0b:d0:8f:9d:14:aa:65:58:5b:6f:dd:
43:eb:c0:5e:1b:b3:3d:90:6d:b7:7d:b9:c0:1d:7e:0a:dd:f7:
e9:08:98:cd:c0:24:20:7d:f0:79:81:b7:3e:6f:b7:4b:7b:d8:
0a:29:20:b2:03:88:d0:36:d3:95:47:af:04:28:e2:2e:e7:cd:
15:47:bf:98:3f:7e:84:cd:95:07:ab:8b:96:13:22:dd:08:de:
d8:83:0b:02:4b:9d:18:38:f7:45:4f:a4:6e:48:33:68:3b:ca:
b0:e0:a7:b8:b4:6d:f9:fc:1d:92:78:0f:e4:9a:c6:b4:78:ec:
9e:c7:a4:53:43:98:69:63:33:40:cf:58:ab:22:b5:c3:6c:08:
b8:c4:d5:33:d8:76:07:85:c8:aa:43:b4:4e:a8:d0:50:be:e6:
72:92:eb:26:67:f0:82:8a:41:aa:0e:13:00:50:8f:ea:69:a9:
b4:5b:73:7d:82:d8:94:68:7a:10:aa:a0:ad:98:b6:be:2b:6a:
85:a2:74:20
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZGcUQvTEukSgf2Br0e3GmeyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwODI5MDQwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzcyOTFiYmY0YzM4MzM2YzdkY2M3ZGEwN2UwZTkyYjJiNjVkNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00MTybd/Mxz5rg9omSEXS+2+MfSK
w0XUP6kTBcjx5ee7RH3p9k4SKZ5tadQOb5Fwawm3fTLIEH0OSWH4YvmlEWImT/X/
7cGI3DZKBReHZO2+IdTbUeuB3WeDHRpxl6NExHh5LblCcVIyNSG0mC1eloNOUCLr
31XxgU7QZN757D/l2N/IFPu/P/apZ+krd5My61+djrVmHsQZ3pWECxX7iAIDMWma
y9i004KVfi7Ruy8YjtERX5j3v/ikmNzsMz1QGrsWhaGKE9ATp3wFc9GWtpDaMoHf
K1llF9YGJXhzyOWZ+IyIfuwJOyqYtrOv4bnbEwqiZHI9tPPjUa2n+Ds+wQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFAxykbv0w4M2x9zH2gfg6SsrZda2MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvREhLUnVfVERnemJIM01mYUItRHBLeXRsMXJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEA3754P11pIi2Q
YaukzdLeJ4NkAdVY/tfnBV79qn8MwrRcvuKNQUDdoahZmVroFWtMlev+hYo9xfHR
lQmNvAvQj50UqmVYW2/dQ+vAXhuzPZBtt325wB1+Ct336QiYzcAkIH3weYG3Pm+3
S3vYCikgsgOI0DbTlUevBCjiLufNFUe/mD9+hM2VB6uLlhMi3Qje2IMLAkudGDj3
RU+kbkgzaDvKsOCnuLRt+fwdkngP5JrGtHjsnsekU0OYaWMzQM9YqyK1w2wIuMTV
M9h2B4XIqkO0TqjQUL7mcpLrJmfwgopBqg4TAFCP6mmptFtzfYLYlGh6EKqgrZi2
vitqhaJ0IA==
-----END CERTIFICATE-----
Generated at Thu Aug 29 18:06:28 2024 by rpki-client on console-fra.rpki-client.org