Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VeFtyNx_ZqphvQj6sfEd3kRY8WM.roa
File: VeFtyNx_ZqphvQj6sfEd3kRY8WM.roa (raw, json)
Hash identifier: l9AoEY2layIE0V2bzX7EXT0GJE3M0kCIlV9J0HJ9ScU=
Subject key identifier: 55:E1:6D:C8:DC:7F:66:AA:61:BD:08:FA:B1:F1:1D:DE:44:58:F1:63
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019190735359DDA015ADF5A9A1F50365DA47
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VeFtyNx_ZqphvQj6sfEd3kRY8WM.roa
Signing time: Mon 26 Aug 2024 20:49:22 +0000
ROA not before: Mon 26 Aug 2024 20:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.28.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 Aug 2024 04:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:73:53:59:dd:a0:15:ad:f5:a9:a1:f5:03:65:da:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 26 20:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55e16dc8dc7f66aa61bd08fab1f11dde4458f163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c2:cb:4f:aa:75:22:cc:ee:b8:1c:a6:03:a6:
0d:9d:bd:c6:4e:fc:9d:9b:37:7c:95:1f:2d:26:f1:
28:73:ad:00:e8:0c:71:d4:71:0f:bb:0a:47:d9:e0:
eb:df:b0:a9:c9:7a:93:24:de:d2:57:f5:04:c6:6c:
95:ad:ec:32:8a:ec:23:58:dc:53:06:ee:b5:8a:5d:
44:fb:75:c4:35:c8:7e:13:9b:9b:23:a1:20:05:7b:
3f:84:d8:17:fb:6d:9c:73:fa:16:8d:7d:2b:b8:98:
f1:a0:8f:fa:e2:26:29:90:14:cd:dd:10:cf:f2:4d:
ab:b6:f3:05:bd:26:74:62:15:28:e3:a9:b1:e2:47:
82:00:de:2e:c6:d9:bd:5a:de:ab:72:e8:f4:85:f9:
37:80:86:cc:a2:48:4c:e4:8c:a9:06:a9:a4:88:5f:
56:c4:0f:8e:04:a5:01:46:b0:29:a9:4e:7a:17:89:
76:02:d7:97:b4:1e:d2:e4:75:45:6d:9b:a9:23:7f:
ac:b2:d3:d0:31:5b:e2:55:91:b7:41:a0:e0:6c:89:
35:52:8f:0e:db:16:25:8d:c0:25:dc:b1:83:51:5a:
a2:ea:5e:b1:cd:24:77:6c:9c:9a:6b:3d:2e:36:f0:
84:79:a7:6e:9d:94:d4:ff:74:21:a7:1c:67:6e:31:
27:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:6D:C8:DC:7F:66:AA:61:BD:08:FA:B1:F1:1D:DE:44:58:F1:63
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VeFtyNx_ZqphvQj6sfEd3kRY8WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
18:c1:06:63:52:f8:4d:b6:4b:41:a3:db:bd:19:8f:97:07:aa:
ba:ae:2a:19:13:d1:80:3e:9b:a6:7d:29:00:4c:1a:fa:68:68:
f0:94:0e:af:46:f7:54:c8:a6:94:e3:d9:79:53:f1:c2:60:a5:
b4:16:72:9d:93:f0:e1:7c:83:87:56:da:e1:08:5a:74:a5:f2:
75:9e:94:20:d7:55:ae:d9:39:88:fe:2c:af:a0:0d:d0:d9:03:
82:9d:2f:5e:e7:74:cb:b2:92:b2:53:7a:3a:93:5a:ca:01:b3:
4d:b3:49:9f:be:d6:49:27:7f:bc:2c:0f:c2:f6:a4:31:60:0a:
d5:3f:30:f7:55:57:fb:d0:92:42:95:e3:4d:86:49:3b:c0:1c:
9b:63:25:d0:52:e0:d8:b0:6e:bc:69:80:b4:19:8f:b9:44:d9:
22:58:a4:46:80:d0:be:9d:6f:38:be:81:84:84:9f:08:24:9b:
79:f8:7b:cc:ac:40:84:61:1e:f7:ea:fd:97:1e:96:b8:02:35:
6a:ab:2d:7b:0e:7a:bf:2a:f5:1e:0f:db:9c:0c:bd:61:ef:f6:
54:3d:64:c9:c5:da:56:3e:09:c3:05:d2:20:11:f8:3f:6e:bf:
d1:4d:c0:7d:17:45:05:01:b2:20:16:48:00:1f:36:7c:c6:05:
49:3f:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 07:05:42 2024 by rpki-client on console-ams.rpki-client.org