Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HDnRj8Fwdo07uKXEoQ87R1IhbSY.roa
File: HDnRj8Fwdo07uKXEoQ87R1IhbSY.roa (raw, json)
Hash identifier: 3Jy0X4k3dse3DZ2qm0k2eFEdVjZ+xECgIE6UaHCeXI4=
Subject key identifier: 1C:39:D1:8F:C1:70:76:8D:3B:B8:A5:C4:A1:0F:3B:47:52:21:6D:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01934D85A9E5161FE920D8F4AAF7EFFFF35A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HDnRj8Fwdo07uKXEoQ87R1IhbSY.roa
Signing time: Thu 21 Nov 2024 07:00:25 +0000
ROA not before: Thu 21 Nov 2024 07:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.57.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 21 Nov 2024 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4d:85:a9:e5:16:1f:e9:20:d8:f4:aa:f7:ef:ff:f3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 21 07:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c39d18fc170768d3bb8a5c4a10f3b4752216d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:be:e5:49:6b:a0:e1:d5:c3:8a:6a:60:15:
cc:cc:5c:7d:25:fd:25:fc:6a:31:25:ad:c6:1e:cc:
9f:1b:9c:09:46:c3:82:d2:02:ea:5c:e9:57:09:67:
73:07:34:68:d6:84:bd:d9:7b:99:61:4e:30:6d:10:
0a:60:ae:ec:91:fc:8c:0b:00:2b:b5:2a:7f:91:38:
8d:be:ff:61:9a:65:cf:db:f0:cd:c9:fb:9b:42:93:
69:20:f2:a4:07:fe:76:28:eb:de:7d:6a:28:a7:69:
b1:33:a4:5f:48:19:23:7c:f3:ee:68:47:5b:4f:08:
a1:dc:d0:ff:2f:86:6b:76:3f:47:3f:07:7a:4d:23:
83:7e:57:5e:4b:09:80:d8:2d:ce:f8:ae:38:d6:cb:
57:7d:27:da:5f:8c:70:e2:49:c1:1b:90:01:dd:a7:
b1:a1:f5:c5:52:62:13:b7:0c:cc:2b:f5:95:bb:52:
b8:34:ec:84:a4:cd:45:ef:9b:e6:ea:a5:ec:f8:0f:
09:74:21:91:60:2e:36:2b:84:1d:48:bb:d1:35:28:
0d:24:7a:71:cb:49:49:03:2e:c2:cb:53:ff:b2:11:
a6:20:7f:7d:d0:ec:a3:23:e0:00:c8:c2:35:b0:f7:
2e:d5:6f:62:60:7f:81:9a:d7:cc:a7:7a:f1:b2:71:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:D1:8F:C1:70:76:8D:3B:B8:A5:C4:A1:0F:3B:47:52:21:6D:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HDnRj8Fwdo07uKXEoQ87R1IhbSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
9f:4a:d8:5b:e6:98:22:37:27:7c:68:e5:f0:87:d2:c5:df:57:
79:89:e0:60:47:bd:67:13:a1:2a:d1:c5:48:9f:8a:87:9e:77:
f9:01:df:04:da:b8:6a:30:5f:c2:7c:43:a9:50:a1:17:9d:5c:
2e:bd:ce:4a:09:52:bc:18:e1:35:01:8b:6e:c6:0a:26:c5:a9:
23:fb:cb:35:63:6b:9c:fc:97:e6:a9:98:58:50:44:a3:99:f0:
fe:36:db:f9:59:22:24:f5:67:a1:54:29:28:b6:00:5b:7f:ed:
4b:5e:02:f9:e3:e0:67:a8:57:96:75:df:be:e9:a5:ad:7b:58:
c2:25:3b:70:c3:a4:2a:fb:ac:89:4a:a4:b1:7c:9a:7c:bc:05:
6e:cf:cb:3c:fe:13:10:f4:b8:b8:83:b7:b2:ed:e4:58:9b:3c:
69:43:04:72:79:29:00:e0:64:1a:6c:cf:52:5b:2e:12:51:0e:
01:38:a3:bf:5a:42:6b:b4:11:c2:8c:9a:24:b1:c7:4b:fd:48:
d4:c7:c9:52:27:5e:b5:6c:b5:03:78:df:ea:17:95:fa:aa:76:
2b:ba:3c:8e:f1:c7:dc:1c:91:76:e0:6b:fc:ee:16:a3:c1:57:
7c:62:fa:7a:71:aa:4c:54:fb:d6:41:d3:33:4d:15:d1:bf:47:
ac:22:6f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:10:00 2024 by rpki-client on console-fra.rpki-client.org