Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PjA3-cno1LD2KT0bPOH5x4i4O80.roa
File: PjA3-cno1LD2KT0bPOH5x4i4O80.roa (raw, json)
Hash identifier: u4ach6etRsCBhrIBKXZHp39iTXHUST7L4DK41PmbDIo=
Subject key identifier: 3E:30:37:F9:C9:E8:D4:B0:F6:29:3D:1B:3C:E1:F9:C7:88:B8:3B:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019319A3BD9716E016CACD70B4CCAE33D6B1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PjA3-cno1LD2KT0bPOH5x4i4O80.roa
Signing time: Mon 11 Nov 2024 05:13:01 +0000
ROA not before: Mon 11 Nov 2024 05:13:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.138.0/24 maxlen: 24
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 11 Nov 2024 22:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:19:a3:bd:97:16:e0:16:ca:cd:70:b4:cc:ae:33:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 11 05:13:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e3037f9c9e8d4b0f6293d1b3ce1f9c788b83bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ee:d5:8b:48:33:7f:d7:8c:c5:e8:8c:a4:3b:
3a:79:33:8a:8a:31:73:2e:56:27:ee:2a:d2:eb:a9:
b8:a2:b8:a6:85:13:93:41:ab:a1:19:59:a3:c0:39:
84:ee:21:81:be:b6:e4:13:c7:89:6a:fd:93:e7:db:
60:ac:8c:be:75:29:82:b9:d4:98:10:0f:dc:9c:14:
43:e5:f3:d7:8f:9e:4d:e7:8e:46:5d:f7:2e:4a:85:
31:f8:54:39:49:02:9a:f5:e1:15:e8:41:4e:bd:cf:
21:cf:df:6d:10:e3:27:7b:73:e0:a2:00:b1:2b:ed:
7d:07:9a:1c:9d:0b:54:d3:9a:6e:33:73:43:67:75:
b4:f4:c3:46:a8:58:43:58:a0:38:5e:c2:96:29:a5:
53:4d:ff:43:9c:3a:6d:bf:35:a2:b4:cd:d9:1a:61:
a1:74:1f:18:bb:3a:ce:40:df:7b:e8:dd:fd:1e:bc:
8a:26:03:c3:76:14:52:29:25:c8:39:4d:f7:29:06:
73:b2:28:1d:81:c8:48:21:05:60:e8:10:3d:e0:d1:
29:04:79:06:50:42:da:44:1b:37:e7:33:12:f2:65:
51:1f:21:e4:08:d8:ef:e3:0e:98:6a:e2:65:8a:15:
a3:92:8d:a5:91:fe:93:6a:36:ed:7d:65:6e:aa:5c:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:30:37:F9:C9:E8:D4:B0:F6:29:3D:1B:3C:E1:F9:C7:88:B8:3B:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PjA3-cno1LD2KT0bPOH5x4i4O80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.138.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
58:2e:51:a9:08:97:19:4a:ea:ff:21:fc:db:8a:07:0e:52:b0:
6d:5a:5b:0a:f5:3e:f3:52:13:8c:bd:01:1b:06:31:67:d9:92:
88:df:f8:33:33:8d:b1:22:1a:5b:39:13:57:1b:c3:fa:b1:84:
58:a6:e4:ba:ff:5c:b2:f2:c6:a5:8f:53:dc:a5:a2:79:1c:1c:
82:d8:f0:48:38:bb:03:5a:95:d2:f9:fe:51:b1:75:47:32:da:
69:86:ec:d0:28:65:44:54:4f:93:af:7c:c8:46:bd:5f:67:aa:
43:68:93:00:80:9a:56:c9:8c:50:d5:5e:73:19:b6:9c:e8:c8:
46:96:dc:24:40:44:72:02:ee:ea:aa:a5:63:e8:f6:41:a9:a0:
88:51:a8:eb:f5:bf:7c:eb:1a:29:1a:c4:ea:af:d2:dc:c2:bf:
22:4c:ed:3b:b0:88:64:35:8e:49:7e:b2:04:86:45:2d:63:cf:
92:19:4b:dc:9b:85:78:d9:59:9c:ad:fc:50:52:a6:d6:ec:c8:
ea:bc:47:67:4b:4a:ca:c7:fd:0e:3e:2f:bf:83:2a:ee:0d:1e:
48:d0:43:a8:b2:6a:92:72:77:9a:fe:44:d3:28:a2:02:a2:00:
58:4a:59:c5:10:d6:5e:90:30:e7:22:e7:a5:97:1a:81:74:50:
1e:4a:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 02:40:04 2024 by rpki-client on console-fra.rpki-client.org