Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaiZavWv1dPdgO1-tA-KgQI0V-Y.roa
File: HaiZavWv1dPdgO1-tA-KgQI0V-Y.roa (raw, json)
Hash identifier: xA5rYQaL5oKVWQaz45RITXqqsmuw4vmtSQE+KBBGMPY=
Subject key identifier: 1D:A8:99:6A:F5:AF:D5:D3:DD:80:ED:7E:B4:0F:8A:81:02:34:57:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0190435223214463FDBE70E5CC7C233742D0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaiZavWv1dPdgO1-tA-KgQI0V-Y.roa
Signing time: Sun 23 Jun 2024 04:19:34 +0000
ROA not before: Sun 23 Jun 2024 04:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 24 Jun 2024 13:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:52:23:21:44:63:fd:be:70:e5:cc:7c:23:37:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 23 04:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1da8996af5afd5d3dd80ed7eb40f8a81023457e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6f:d5:02:f4:84:54:18:6c:fb:17:4f:d1:b9:
0d:7f:59:3c:ad:99:8d:23:8a:4e:5c:02:da:9c:cf:
ae:58:0a:cf:c2:76:1d:13:86:d5:fd:d0:d2:43:1f:
99:5f:63:ca:2e:71:ca:4a:5f:e0:b8:50:5b:9b:70:
2f:47:8e:17:d2:c9:af:ae:84:f6:92:5f:38:96:97:
d4:05:13:ec:44:72:07:ee:09:22:24:cd:4c:6c:47:
e7:4b:d4:92:1c:64:34:7e:f7:ec:3a:c9:b5:31:53:
ab:95:4a:14:83:58:d4:16:fb:b1:da:08:bb:32:06:
be:7c:2e:91:7a:e7:b8:d0:cb:61:e4:12:d2:29:b7:
37:84:6b:19:8b:78:43:c2:b9:6a:e2:a1:2f:48:08:
0e:93:51:52:96:33:a9:02:b9:fc:59:85:70:d1:8b:
96:11:3c:59:a8:bb:20:20:91:76:c4:c1:0c:5f:0b:
69:73:b6:56:e3:1c:c1:f2:67:67:e2:b1:f8:d6:55:
5d:0b:ea:23:cb:f8:37:d7:94:f4:66:f2:ea:23:e3:
9b:a4:86:55:3a:11:2e:c6:c7:9c:de:7a:5e:5a:60:
fd:1f:70:ac:42:1e:c5:d7:3b:6f:37:db:0f:12:15:
c5:ff:1a:da:dd:10:71:17:98:ea:4d:03:e7:a9:14:
73:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:99:6A:F5:AF:D5:D3:DD:80:ED:7E:B4:0F:8A:81:02:34:57:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/HaiZavWv1dPdgO1-tA-KgQI0V-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
af:2d:97:0c:5f:02:9e:f0:ba:d7:58:e2:b1:07:f2:d8:f8:6a:
97:1a:4b:46:59:67:cf:50:e6:1c:86:82:16:14:c8:1c:dc:7e:
e5:8d:ad:cb:a6:d2:44:b5:35:34:49:52:49:03:0e:3d:cf:62:
de:75:6e:fb:ec:c3:ab:00:38:40:3f:ed:fc:d0:48:15:c2:c9:
6f:2b:3d:41:03:b8:cb:0c:43:3a:1b:24:5f:68:ff:5b:1c:94:
90:a8:84:ea:f8:4e:d7:ba:85:eb:3f:53:a4:44:3b:b8:b0:ae:
cf:37:85:ae:c7:b5:a1:52:aa:0e:c5:92:77:47:ff:06:9f:d1:
24:02:c0:b9:ef:45:c6:92:9f:6c:e5:77:91:fe:a6:22:d0:56:
84:f0:8c:80:b5:ae:77:98:9a:0d:01:70:ac:6f:f2:ed:f5:f5:
a9:cf:63:98:10:7b:3c:f7:3a:89:4b:b1:3f:94:f4:39:c8:25:
88:e8:46:17:61:c4:f1:05:4e:16:e6:4f:2e:3b:f9:b0:ac:43:
f2:bb:42:7d:45:dd:da:38:2c:df:f5:b2:4c:cd:db:24:41:66:
40:f7:90:21:cb:b6:50:c8:91:63:2f:b4:05:63:62:66:d7:71:
00:fc:43:af:86:1e:d8:75:e4:77:20:90:5e:a4:94:a0:83:e8:
1d:11:22:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 20:20:28 2024 by rpki-client on console-ams.rpki-client.org