Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P98hUSFhvXSY-pFz3jdOLUcTjXc.roa
File: P98hUSFhvXSY-pFz3jdOLUcTjXc.roa (raw, json)
Hash identifier: hsvgp2ED7S/9bLg7/s0/0NmHbz51HbuC1ytpnJp/qMM=
Subject key identifier: 3F:DF:21:51:21:61:BD:74:98:FA:91:73:DE:37:4E:2D:47:13:8D:77
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01927EF3AE49FC8D8EAEC8E83F1A42627EB1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P98hUSFhvXSY-pFz3jdOLUcTjXc.roa
Signing time: Sat 12 Oct 2024 04:19:12 +0000
ROA not before: Sat 12 Oct 2024 04:19:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.7.0/24 maxlen: 24
77.90.48.0/24 maxlen: 24
77.90.52.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 12 Oct 2024 07:13:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7e:f3:ae:49:fc:8d:8e:ae:c8:e8:3f:1a:42:62:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 12 04:19:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fdf21512161bd7498fa9173de374e2d47138d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:ab:f0:1a:17:1a:c8:70:c0:41:52:72:2a:
de:8f:94:72:55:bf:74:8b:44:9f:c2:28:19:d9:6a:
0e:36:60:25:d5:eb:c1:1b:54:8f:60:f6:85:bf:1d:
e2:77:81:35:b1:63:03:bc:7b:ac:b0:1a:4c:94:5a:
5b:e4:4f:3d:54:5c:ad:5b:99:7a:a0:2c:1e:52:30:
d4:1f:51:cb:52:c8:91:81:ef:a5:18:62:5f:10:be:
df:23:1a:3e:91:12:08:76:02:0e:36:c4:a6:c2:7f:
70:3e:9c:c1:1a:b5:2e:f4:a9:0c:de:25:46:f4:a2:
e1:9b:aa:f8:20:27:72:95:df:d1:e4:38:a9:c8:65:
f0:5b:a6:52:3f:4f:25:59:98:41:da:0d:c0:38:b2:
38:7d:b3:af:ac:74:96:20:9f:d8:4a:7c:5a:a4:57:
31:ff:9c:ad:c0:f2:66:c4:f7:8e:e5:37:45:79:17:
9a:76:ce:d1:91:70:f4:c9:34:65:9c:63:2b:f7:05:
d8:ea:c4:50:b2:48:40:2c:58:c0:c7:d8:0d:2e:9e:
e2:a1:4f:9e:5c:ec:da:bc:8a:e2:83:91:a8:c6:cd:
a0:16:0b:ed:53:a6:cf:ad:53:3e:12:fb:c2:93:cf:
b5:18:ab:44:ba:60:7c:b7:92:2b:35:5a:65:7a:15:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:21:51:21:61:BD:74:98:FA:91:73:DE:37:4E:2D:47:13:8D:77
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/P98hUSFhvXSY-pFz3jdOLUcTjXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:68:96:47:30:0d:1b:be:4a:7c:f0:5f:bf:2a:2d:4b:2d:90:
b9:6c:22:0b:e0:0d:5e:58:9a:18:cd:ff:4e:f6:c0:d9:f3:40:
6f:9f:c3:33:6a:83:c7:df:bb:02:7f:32:61:e5:cb:96:43:58:
6c:9f:30:d7:59:1a:69:db:73:79:66:fc:d1:01:fc:9a:ac:a1:
20:34:a7:c0:89:e8:5f:de:c7:b8:5e:11:df:ee:6a:80:8c:2b:
53:93:d0:0c:8c:3c:87:1c:f3:3f:9d:1e:30:bf:f2:78:3d:88:
19:a5:8f:19:7c:15:fa:e4:0c:0d:30:ca:cd:ce:e9:0f:14:20:
57:49:d4:e5:d0:fc:10:0d:b6:c7:82:49:3a:aa:42:18:ce:52:
bf:4d:79:9f:4b:9b:d4:37:ea:47:96:94:43:ed:54:26:17:46:
06:3d:9a:66:e9:02:23:2b:39:d1:56:69:44:b0:e4:b4:f4:e8:
24:cf:9b:f3:a8:9f:92:99:eb:7a:f5:9a:d2:cc:a9:7e:61:2b:
11:63:61:24:7a:77:c4:68:06:e8:0e:be:ed:07:5c:07:d3:3b:
8f:00:7d:63:19:0e:21:59:7f:2d:fc:5e:40:dc:7e:ff:65:b7:
16:79:c1:bf:c0:1d:56:00:da:bd:cd:a8:f7:c1:f1:03:4b:35:
d1:a7:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 12 08:56:40 2024 by rpki-client on console-fra.rpki-client.org