Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6MHZPtHc0gWX-tjISthQOh8SIE.roa
File: E6MHZPtHc0gWX-tjISthQOh8SIE.roa (raw, json)
Hash identifier: e9KWjRoKR83hWaVMg+kx4owA9HQxi9+WPwiAC2bMKD0=
Subject key identifier: 13:A3:07:64:FB:47:73:48:16:5F:EB:63:21:2B:61:40:E8:7C:48:81
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192D347E46B401D3E2688F57FA1CB5E4EF1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6MHZPtHc0gWX-tjISthQOh8SIE.roa
Signing time: Mon 28 Oct 2024 13:19:17 +0000
ROA not before: Mon 28 Oct 2024 13:19:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.139.0/24 maxlen: 24
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.45.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 29 Oct 2024 02:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:47:e4:6b:40:1d:3e:26:88:f5:7f:a1:cb:5e:4e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 28 13:19:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13a30764fb477348165feb63212b6140e87c4881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:a8:e1:b3:33:5f:f5:5a:9d:4a:af:bd:0c:
5c:80:e4:e0:c5:f2:bc:27:34:4c:eb:5b:f7:fe:39:
23:a1:9b:97:24:73:59:27:d0:33:6d:4f:eb:36:8c:
c3:e7:89:38:c5:d0:6f:db:fa:1c:7a:03:89:c5:fd:
1d:1c:60:2d:50:56:87:d0:bb:52:00:3d:5a:b7:8e:
2b:e9:a1:29:7c:46:27:11:63:f0:85:cc:70:40:d8:
c5:55:98:48:87:bc:f9:48:97:39:01:e9:ec:61:27:
70:cf:b0:19:d3:e5:71:1e:60:d1:3e:47:22:71:22:
7d:9e:62:9c:f2:99:ad:15:90:56:eb:38:f9:c6:21:
e0:06:d2:c9:f2:13:ed:59:d0:70:14:ef:89:b5:b5:
1b:f3:5a:4c:a6:fa:58:25:1e:44:2e:0f:2f:4d:0c:
91:72:10:84:60:72:5b:3d:77:b6:30:87:e7:4d:27:
5e:07:91:8a:18:04:c0:95:df:14:26:e8:b6:27:7e:
bd:ce:54:05:39:7c:76:63:b2:eb:e2:c8:93:cb:2a:
06:4c:f2:08:f8:2b:05:e3:59:f2:51:53:f9:47:2f:
10:0b:69:8b:dc:54:03:86:4e:62:96:a5:6c:c0:e7:
8f:77:b8:16:13:7b:5f:cd:2d:a4:07:b7:0c:9a:86:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A3:07:64:FB:47:73:48:16:5F:EB:63:21:2B:61:40:E8:7C:48:81
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/E6MHZPtHc0gWX-tjISthQOh8SIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:98:9d:b0:c8:3c:06:7b:45:b8:99:9a:b1:25:a7:1e:d8:79:
7c:f7:05:3b:31:31:0d:65:2d:14:b8:a5:23:48:a7:d1:bb:db:
c0:91:51:cc:1c:42:0c:22:53:9d:eb:55:d6:f3:d3:4c:c9:04:
0f:10:42:82:d2:75:51:5a:63:89:1f:38:25:dc:23:f6:2d:93:
c5:08:4a:2d:9c:b7:67:ee:ae:c2:29:29:55:ae:7e:a4:5e:26:
67:f5:c9:b4:ee:bf:93:a8:1b:2e:3c:4b:3c:0a:00:8a:a7:82:
e4:87:d7:19:59:42:80:64:91:04:57:a7:2f:78:df:66:20:a2:
23:25:c2:aa:7b:0f:07:39:35:dd:13:ea:5c:73:09:fc:8a:7e:
fc:ca:89:87:e6:21:e8:91:a5:09:e1:a5:f2:63:49:c0:d6:15:
fe:39:40:50:44:ba:23:eb:4e:1d:58:c3:b3:90:be:ae:8c:d0:
08:1a:fe:2d:b5:c6:dc:87:c1:62:3b:6b:2a:10:54:af:4c:86:
a4:38:76:f4:6d:1c:3c:27:83:39:31:71:20:c5:8f:ae:92:d4:
b2:11:2d:84:ce:c9:dd:00:cb:e1:21:8f:20:3a:62:0f:ac:f5:
6b:95:82:b0:22:cd:f8:98:13:40:90:18:a7:29:93:66:2e:f6:
69:95:fd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 04:56:26 2024 by rpki-client on console-ams.rpki-client.org