Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JKHaNgrQ6tagUrVDvThse6oSu0E.roa
File: JKHaNgrQ6tagUrVDvThse6oSu0E.roa (raw, json)
Hash identifier: jDL9gfUG8mXZZEXoJXC+p7cK2XX3nZkitdFfRBCIMm0=
Subject key identifier: 24:A1:DA:36:0A:D0:EA:D6:A0:52:B5:43:BD:38:6C:7B:AA:12:BB:41
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191BB3BC7A1C444D17264BE4592565B5633
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JKHaNgrQ6tagUrVDvThse6oSu0E.roa
Signing time: Wed 04 Sep 2024 04:12:22 +0000
ROA not before: Wed 04 Sep 2024 04:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 00:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:3b:c7:a1:c4:44:d1:72:64:be:45:92:56:5b:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 4 04:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24a1da360ad0ead6a052b543bd386c7baa12bb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:a4:f2:ba:eb:1b:2b:f2:c6:4c:3c:c2:22:
02:72:9d:0f:53:6d:10:c8:a7:1a:44:65:b5:52:80:
40:64:41:34:9a:35:77:df:fb:7d:49:81:cd:ad:ad:
99:12:de:da:a6:66:b5:10:c4:24:1b:0e:6e:35:29:
f8:d9:c9:bd:60:75:76:ad:d9:1b:3b:54:3a:50:73:
98:65:10:2d:18:37:8f:a1:84:77:5c:a0:d9:93:15:
4c:8c:1b:51:af:a7:6e:63:26:4c:de:1c:90:37:f6:
ce:16:aa:36:49:63:d1:9b:78:39:af:b6:98:fc:20:
19:71:4e:dd:2a:aa:08:ae:fd:d5:45:2a:06:51:73:
70:79:c8:70:c6:cb:0d:e2:3e:e9:43:f9:f4:ad:09:
9e:d2:8f:cf:e2:8e:aa:d8:30:df:15:b5:f8:63:da:
72:d0:2c:69:73:41:19:c2:d5:27:cb:c5:f7:df:41:
29:e5:05:2b:03:29:91:ef:0a:5a:7c:0c:12:5c:6f:
25:ea:f9:86:f9:dc:fe:52:3b:1c:0b:46:6b:a0:ef:
aa:7e:ed:6e:84:04:0b:f5:07:4b:28:ac:78:8f:24:
38:c4:46:ab:0b:6a:b9:01:90:b5:04:7a:2f:4f:cd:
d3:06:a2:10:ed:df:e7:87:f7:51:52:f1:a7:44:ac:
4f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A1:DA:36:0A:D0:EA:D6:A0:52:B5:43:BD:38:6C:7B:AA:12:BB:41
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JKHaNgrQ6tagUrVDvThse6oSu0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
29:26:f5:c4:e6:58:ff:f6:80:96:4f:c5:eb:d3:3c:6a:9f:eb:
5e:53:d2:dd:f1:ba:fd:e8:0d:3a:c5:69:fb:99:d7:d8:ec:85:
da:13:4b:e7:07:4e:fc:5e:13:c6:1a:af:5a:7f:7c:c0:e2:43:
f8:c6:56:75:8a:21:c4:32:14:56:62:de:5d:2b:80:6e:54:68:
24:64:24:b0:a2:27:7c:9f:f4:c6:f6:ab:7f:43:67:e8:86:9d:
18:0b:94:65:f2:97:22:5d:ac:ef:e3:76:ed:c7:77:c8:99:40:
ec:45:a6:22:dc:f8:46:0d:60:86:24:97:49:d6:0a:cc:34:f7:
52:52:e4:e2:8e:2e:c1:cc:75:4c:c0:b1:f9:42:3d:88:35:27:
8f:d7:5a:39:c2:56:35:87:44:41:16:ee:8f:81:a8:d0:2b:60:
31:af:f0:9b:2f:d9:e1:fe:3a:00:cb:23:73:4f:55:55:5f:07:
2f:2d:61:23:b1:a5:7e:9f:30:49:3f:36:a2:c1:52:ed:31:b5:
d4:60:4f:9a:22:1e:dd:fd:db:aa:35:1d:b6:d7:c9:e8:32:84:
ab:af:02:49:32:58:bd:e3:19:aa:27:14:14:28:43:b6:92:f5:
d8:87:51:6d:79:28:6d:84:7f:18:dc:bf:1f:10:96:ff:60:d9:
62:22:28:d9
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZG7O8ehxETRcmS+RZJWW1YzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwOTA0MDQxMjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGExZGEzNjBhZDBlYWQ2YTA1MmI1NDNiZDM4NmM3YmFhMTJiYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11Wk8rrrGyvyxkw8wiICcp0PU20Q
yKcaRGW1UoBAZEE0mjV33/t9SYHNra2ZEt7apma1EMQkGw5uNSn42cm9YHV2rdkb
O1Q6UHOYZRAtGDePoYR3XKDZkxVMjBtRr6duYyZM3hyQN/bOFqo2SWPRm3g5r7aY
/CAZcU7dKqoIrv3VRSoGUXNwechwxssN4j7pQ/n0rQme0o/P4o6q2DDfFbX4Y9py
0Cxpc0EZwtUny8X330Ep5QUrAymR7wpafAwSXG8l6vmG+dz+UjscC0ZroO+qfu1u
hAQL9QdLKKx4jyQ4xEarC2q5AZC1BHovT83TBqIQ7d/nh/dRUvGnRKxP1wIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFCSh2jYK0OrWoFK1Q704bHuqErtBMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvSktIYU5nclE2dGFnVXJWRHZUaHNlNm9TdTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAKSb1xOZY//aA
lk/F69M8ap/rXlPS3fG6/egNOsVp+5nX2OyF2hNL5wdO/F4TxhqvWn98wOJD+MZW
dYohxDIUVmLeXSuAblRoJGQksKInfJ/0xvarf0Nn6IadGAuUZfKXIl2s7+N27cd3
yJlA7EWmItz4Rg1ghiSXSdYKzDT3UlLk4o4uwcx1TMCx+UI9iDUnj9daOcJWNYdE
QRbuj4Go0CtgMa/wmy/Z4f46AMsjc09VVV8HLy1hI7Glfp8wST82osFS7TG11GBP
miIe3f3bqjUdttfJ6DKEq68CSTJYveMZqicUFChDtpL12IdRbXkobYR/GNy/HxCW
/2DZYiIo2Q==
-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org