Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa
File: QDwoqamY4xsmKRxojfkxqWRMhyQ.roa (raw, json)
Hash identifier: M/IRRwMy/nSiKr4CAyeKdsNQeYoK2PPrDpmOOwvyTes=
Subject key identifier: 40:3C:28:A9:A9:98:E3:1B:26:29:1C:68:8D:F9:31:A9:64:4C:87:24
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192500308ADF72E1BF733671184FEF82A6F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa
Signing time: Thu 03 Oct 2024 01:33:48 +0000
ROA not before: Thu 03 Oct 2024 01:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 03 Oct 2024 22:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:50:03:08:ad:f7:2e:1b:f7:33:67:11:84:fe:f8:2a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 3 01:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=403c28a9a998e31b26291c688df931a9644c8724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:0c:96:40:79:f8:f5:87:1e:59:6e:31:3d:
43:f8:f3:49:46:f2:b3:98:77:e9:4f:7e:38:af:fd:
a8:a2:3c:e5:db:be:bd:90:35:24:f4:13:e6:1c:f8:
5e:2c:b0:30:33:1e:a5:b3:4f:9d:05:ac:5d:62:00:
f9:5b:10:7a:89:ca:b7:bd:60:aa:47:7e:fd:f3:f6:
0d:a9:85:4d:b0:10:10:11:ee:88:af:52:fa:d9:24:
19:0a:71:ec:d6:d4:06:55:4a:92:42:b5:9e:01:ab:
0f:c1:e8:85:70:64:9c:ff:ac:74:77:f3:2b:e6:ae:
95:83:f2:67:b7:c2:f5:fb:74:de:bd:f9:c7:05:0d:
a8:ac:32:85:a5:72:b0:5c:64:76:1f:9f:46:51:0d:
a6:ab:93:e2:46:1e:ae:f3:fa:28:83:a2:2a:20:09:
73:78:1c:5d:94:e4:88:51:4a:15:61:3a:2c:31:10:
2b:37:db:a5:cd:ef:5e:bd:ee:2b:60:4c:ec:a8:47:
08:f2:21:2d:44:be:c2:2d:d4:e7:54:28:d6:13:4e:
04:e6:a9:e2:94:b1:66:16:29:76:57:0f:5c:71:96:
e8:5b:ea:9a:53:62:0c:d0:37:ba:25:85:16:27:04:
f9:38:15:ad:cf:62:8b:1d:2f:10:d3:13:08:4c:27:
d7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3C:28:A9:A9:98:E3:1B:26:29:1C:68:8D:F9:31:A9:64:4C:87:24
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QDwoqamY4xsmKRxojfkxqWRMhyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
2a:0e:ac:ea:3b:69:e0:77:99:0d:7d:b3:b8:16:a7:e8:4b:d7:
35:f1:25:ac:cc:fa:c4:6f:e8:5f:56:90:fb:5f:0a:44:f3:ef:
0d:31:c1:ce:7e:95:4d:cc:57:31:a3:5c:b8:24:4b:89:a8:cb:
a0:b7:41:c9:2d:42:24:55:e9:89:50:f5:7f:fb:65:30:9f:9a:
f8:b3:13:5a:a2:e5:45:23:08:54:82:be:9a:3b:ec:94:0b:6f:
5e:56:d9:e4:6a:55:db:a3:06:38:6a:9c:91:e0:7c:2f:90:d3:
28:c1:fb:66:7e:0c:ee:00:1b:c7:23:89:af:b2:ee:bb:02:41:
00:26:a6:08:21:37:4c:07:f4:9b:ee:65:30:f4:08:ac:d3:ea:
92:94:38:20:66:8b:d4:80:48:b6:12:79:a8:fe:1c:1b:c0:28:
d4:a5:83:f3:a1:dc:da:1c:8f:bb:07:9d:44:e4:4b:4e:bc:e5:
3b:30:01:96:7c:19:d4:2d:93:fe:d5:4e:6c:d8:77:df:24:f4:
58:3a:5d:20:67:e2:91:e8:8a:89:89:2c:71:b4:71:3f:79:01:
e3:e4:89:9f:90:c9:9f:a4:a4:80:3f:49:4a:79:95:e7:db:49:
22:c0:60:ca:82:f1:2b:e6:0a:fc:4a:02:e6:58:e2:25:df:ba:
6e:2a:b7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 01:37:15 2024 by rpki-client on console-ams.rpki-client.org