Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeYAI1qRKvSIoZPdWunBsI73Wzw.roa
File: XeYAI1qRKvSIoZPdWunBsI73Wzw.roa (raw, json)
Hash identifier: 2BqWw12dxNaIjQejGVlqKSKx0SpjK/Ovc4yL1uefIXI=
Subject key identifier: 5D:E6:00:23:5A:91:2A:F4:88:A1:93:DD:5A:E9:C1:B0:8E:F7:5B:3C
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192411CF13654023D5A1B6E2411CECFDF94
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeYAI1qRKvSIoZPdWunBsI73Wzw.roa
Signing time: Mon 30 Sep 2024 04:07:48 +0000
ROA not before: Mon 30 Sep 2024 04:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 01 Oct 2024 04:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:1c:f1:36:54:02:3d:5a:1b:6e:24:11:ce:cf:df:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 30 04:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5de600235a912af488a193dd5ae9c1b08ef75b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a9:8a:b4:d7:6b:3a:14:e4:6b:b7:23:10:e8:
44:3a:3f:0f:66:5a:91:6f:91:51:df:94:c5:e5:63:
a4:18:30:f7:14:f5:7c:12:69:28:da:ac:02:61:6c:
ce:ef:58:c1:90:b9:11:cd:0e:6d:c7:dd:42:0f:fe:
fa:41:3a:b6:5b:b6:0e:d7:17:c0:e8:c9:be:ef:8d:
a3:73:31:8c:12:5d:79:4a:fe:96:89:84:7f:7f:11:
31:13:32:0c:df:80:e2:60:1f:cc:f1:ca:bd:6b:25:
ba:25:f0:ab:26:47:b0:6b:42:a7:1b:17:10:16:29:
04:7c:8f:88:29:0a:45:37:70:a4:d7:7f:59:28:43:
47:e1:e7:41:8d:b5:97:db:21:fe:28:8a:4f:2a:6e:
19:67:1c:7c:bf:3b:fd:c5:93:b0:a9:62:ef:37:d0:
3e:35:de:4d:fa:9b:a3:7f:dc:a5:f3:b1:8a:31:e9:
a4:a8:98:5f:08:5d:d2:a8:e1:a7:f0:be:18:31:f7:
db:90:7e:ab:53:2b:52:e9:18:c3:59:2a:7d:25:c5:
11:14:2b:7d:87:e2:65:be:3a:4d:b9:00:6f:93:f7:
cf:70:29:ea:f3:ce:21:d1:a6:a3:ea:08:ec:44:79:
10:96:79:7b:90:c6:33:15:63:e7:e9:b3:23:d7:ac:
d4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E6:00:23:5A:91:2A:F4:88:A1:93:DD:5A:E9:C1:B0:8E:F7:5B:3C
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/XeYAI1qRKvSIoZPdWunBsI73Wzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
23:b8:5e:6b:10:20:17:65:96:5d:8e:9f:ec:da:6b:8a:6c:b8:
87:82:73:f8:5b:1f:53:3c:aa:2c:96:40:90:36:e5:56:d2:24:
0b:7a:51:9e:57:98:f2:bc:d5:75:d4:23:21:b6:e9:bb:db:f0:
58:aa:ec:ee:c4:43:19:49:91:64:9c:68:a8:4e:75:22:24:be:
e3:8b:97:1e:c8:8c:4d:f8:5a:6e:ab:a4:5e:cd:dd:77:b8:b7:
ca:f9:13:a9:69:f7:83:2a:82:79:29:2a:85:3d:70:18:f6:b0:
5a:66:cc:24:74:33:14:ba:65:ac:b9:b0:d3:56:b5:08:0a:f0:
f5:ac:9d:87:14:81:ba:7c:e3:55:40:73:59:2b:0b:31:6e:3a:
89:2e:a1:50:f6:e1:03:e0:af:21:ca:31:67:f2:28:61:49:b9:
cf:40:a4:f5:16:09:07:5b:79:a2:69:8c:7b:79:8e:35:2f:48:
e0:d6:bc:37:3c:93:8c:c1:9d:a7:4a:b3:4f:fc:01:1c:b6:11:
0f:4c:9d:3a:85:a8:df:83:ab:3e:29:7e:e0:72:72:7c:9d:82:
2a:b0:eb:8a:a4:9f:4b:f3:19:f2:e2:49:1d:b1:e6:18:93:19:
ed:84:2d:dc:08:65:86:25:b3:b8:77:03:70:e1:bd:7c:55:c3:
b6:83:8c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 1 06:48:19 2024 by rpki-client on console-ams.rpki-client.org