Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WFpinr3Y9Egktl5damkqDndlRJ8.roa
File: WFpinr3Y9Egktl5damkqDndlRJ8.roa (raw, json)
Hash identifier: IMheF22B4nRFOIgYbeqaSOzNax/jDw4DFOo5TiJzI+M=
Subject key identifier: 58:5A:62:9E:BD:D8:F4:48:24:B6:5E:5D:6A:69:2A:0E:77:65:44:9F
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019338891D83E5131272B7B791D03F2627CB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WFpinr3Y9Egktl5damkqDndlRJ8.roa
Signing time: Sun 17 Nov 2024 05:12:10 +0000
ROA not before: Sun 17 Nov 2024 05:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Nov 2024 21:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:38:89:1d:83:e5:13:12:72:b7:b7:91:d0:3f:26:27:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 17 05:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=585a629ebdd8f44824b65e5d6a692a0e7765449f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:35:01:44:18:33:a2:cd:7d:55:1c:9f:eb:
4a:50:32:03:6b:12:c2:02:86:b9:40:76:aa:09:d7:
93:f7:18:f3:79:50:e3:02:a6:10:80:70:38:22:e9:
00:b8:b8:f8:41:c9:e7:7d:cf:de:6d:55:5c:ba:e0:
b0:e8:dd:50:b7:b4:15:3b:54:30:96:b3:72:91:0f:
ec:0f:e2:fb:f7:1e:09:18:a5:cb:e7:4a:aa:a5:14:
93:78:d4:7b:2f:01:c8:c3:d0:ff:6e:92:ef:0b:bc:
cd:85:6e:ce:6c:64:a6:d4:21:92:2b:d9:80:1c:9b:
6c:a1:87:ea:a0:df:59:3f:7c:37:58:e0:b4:1e:cd:
51:a5:42:10:8c:4d:f7:de:72:03:b5:27:0c:1e:ed:
0a:f4:b8:d3:d6:fb:d6:a0:9d:1d:68:74:21:a4:83:
86:7b:5d:7f:fc:a5:08:db:e7:4d:17:44:18:d1:32:
51:1d:d2:73:52:31:be:76:fa:69:60:9b:26:59:2f:
0d:b3:8f:c9:e3:56:48:c8:12:26:8a:3c:d3:2e:a1:
e6:be:25:ee:57:24:47:66:0d:f9:6b:63:76:79:79:
b6:a1:a9:99:54:97:8a:f7:22:4a:61:34:2f:82:ae:
8a:12:0f:41:ec:c5:13:8b:09:16:32:23:d0:f4:ac:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5A:62:9E:BD:D8:F4:48:24:B6:5E:5D:6A:69:2A:0E:77:65:44:9F
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/WFpinr3Y9Egktl5damkqDndlRJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.55.0/24
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:51:7c:81:bc:20:71:e9:a3:f8:c5:b9:ac:33:9e:e9:b5:85:
bd:78:02:a9:14:99:e7:3a:73:f3:72:ff:9e:78:78:7c:06:fe:
bf:7f:0d:bc:5e:2f:f6:cd:66:15:cc:48:11:02:14:c5:62:94:
0a:49:93:ce:ec:d4:56:6d:4c:63:3c:90:ff:38:cc:c9:6e:e4:
aa:01:60:41:98:cd:c4:56:62:b8:69:dd:13:8f:95:ef:16:e4:
37:30:9e:a6:6e:6d:64:47:f4:b0:f2:fb:0b:e6:8b:b6:85:5c:
1a:38:b8:53:35:d7:90:36:79:2b:57:ce:98:0c:fe:55:6a:e9:
c8:f1:36:72:a3:7a:f6:4d:7d:cb:79:7c:65:ec:d7:b3:09:16:
b3:47:10:c5:de:43:d2:00:11:fd:cf:b5:98:2e:dc:b2:53:60:
d5:67:4d:6f:77:ee:8f:e7:fc:ce:13:58:87:45:00:99:e4:27:
17:66:39:3e:85:21:21:71:53:d1:40:a3:99:75:40:93:45:9c:
4f:fd:e8:67:f9:98:9f:59:72:19:45:7e:4e:73:78:59:4a:1e:
7e:71:2b:ef:2c:90:6a:50:22:ff:eb:a3:42:ba:72:63:d7:58:
b9:8c:f7:af:84:88:ed:e0:fa:c0:70:82:f4:b1:ab:a2:ee:41:
13:0b:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 01:41:56 2024 by rpki-client on console-ams.rpki-client.org