Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JWOoO18juZM_-rdpQlSm5FfFss0.roa
File: JWOoO18juZM_-rdpQlSm5FfFss0.roa (raw, json)
Hash identifier: Sk2BeGmC8H4gTGuPsG/9GodWmjfyXsq+l0gtb38FyuY=
Subject key identifier: 25:63:A8:3B:5F:23:B9:93:3F:FA:B7:69:42:54:A6:E4:57:C5:B2:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019262260FD9011B987F7B2AC26D5ACB4436
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JWOoO18juZM_-rdpQlSm5FfFss0.roa
Signing time: Sun 06 Oct 2024 14:05:14 +0000
ROA not before: Sun 06 Oct 2024 14:05:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.39.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
85.118.162.0/24 maxlen: 24
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.148.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sun 06 Oct 2024 20:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:62:26:0f:d9:01:1b:98:7f:7b:2a:c2:6d:5a:cb:44:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 14:05:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2563a83b5f23b9933ffab7694254a6e457c5b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:b0:e6:10:2b:57:2a:47:75:6f:cf:32:4a:
0c:e6:56:bd:2e:ea:b2:e5:0c:16:68:21:a9:47:40:
b6:a7:d8:a4:ec:bf:fd:7f:0b:4b:1d:e0:23:86:33:
78:96:d0:40:49:68:74:33:de:3b:60:16:81:19:c0:
70:41:eb:dd:c9:0d:c4:e0:7b:6a:36:d6:47:be:d6:
fb:92:b0:d4:90:e5:2e:40:a9:50:18:e0:18:17:41:
80:1c:6c:3c:d2:47:3b:32:f9:d1:c1:ed:53:c1:28:
f9:f5:3b:30:08:be:c4:f7:e2:80:96:64:d6:f2:ba:
49:47:a0:2f:17:dc:37:ee:08:cd:3c:ac:f3:9d:32:
0f:cf:2c:72:a7:08:28:2c:54:42:b2:55:80:6a:1b:
fe:99:f0:0c:e0:75:42:42:4e:ae:3c:b6:e5:49:cf:
41:3d:81:eb:c6:14:5d:02:6e:d9:dc:4d:80:b7:25:
fb:aa:30:73:4d:b9:a4:9a:59:84:85:28:ae:69:49:
e5:c6:b2:65:d5:ff:3b:08:6f:4d:96:c0:8f:7d:16:
1d:a0:cb:70:46:f7:dc:2c:1a:7c:80:84:bd:87:19:
e4:3a:79:8d:60:61:91:a6:7d:7c:5b:b9:bc:c9:61:
9e:58:4e:89:4a:9a:5a:b3:07:c7:80:47:d6:e0:9f:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:63:A8:3B:5F:23:B9:93:3F:FA:B7:69:42:54:A6:E4:57:C5:B2:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/JWOoO18juZM_-rdpQlSm5FfFss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:e7:e2:03:54:90:bd:e5:d5:16:95:47:18:13:58:54:1c:e3:
e4:9b:dd:4f:c7:8c:41:0d:90:49:a1:da:b1:fa:68:b6:ac:86:
18:6f:74:14:a6:f1:08:28:cf:b0:39:7d:19:fe:61:1f:ce:7a:
81:20:13:0b:fd:41:e0:64:f0:00:19:c8:e4:55:d9:70:d1:cb:
6a:2f:63:a1:81:c0:81:e9:c7:04:70:10:3e:24:91:ca:65:ed:
b6:bd:ce:e8:3c:c9:f1:35:72:6d:e0:95:d0:1c:d0:80:ba:69:
e3:34:b3:82:21:75:7b:bd:01:6e:55:df:7e:1e:77:74:66:ed:
3d:d5:c6:b3:18:3e:ab:9b:07:d4:2a:e7:de:4d:12:be:e7:e3:
fb:7d:d6:32:12:b8:ba:47:f0:7b:4b:bc:0c:08:89:83:5a:0a:
e8:4d:b8:53:e2:00:bc:ef:14:70:f9:e2:ce:28:d3:7e:f5:a6:
39:ee:94:2c:0b:46:eb:5b:65:1f:05:fb:97:d8:88:34:ec:b9:
e4:e5:ae:7a:22:f8:49:93:24:c5:b2:76:40:bc:f1:4d:96:6a:
7f:ab:b3:1d:58:5f:4b:a6:8d:1c:cc:f7:07:3c:3f:63:ba:ad:
cd:3f:f6:99:bb:b7:ed:af:bc:3d:0e:16:bc:96:98:8a:71:77:
b1:95:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 23:09:17 2024 by rpki-client on console-ams.rpki-client.org