Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YixQzEQAvryQQB9F6IQgi3E0mnY.roa
File: YixQzEQAvryQQB9F6IQgi3E0mnY.roa (raw, json)
Hash identifier: pX59jo2ZJD0rm9mWZUMXHyrqbhw6zRaAODiZ6/VS1VI=
Subject key identifier: 62:2C:50:CC:44:00:BE:BC:90:40:1F:45:E8:84:20:8B:71:34:9A:76
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019289ED6F3A7ED91E08147CC5AD1AD8C59D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YixQzEQAvryQQB9F6IQgi3E0mnY.roa
Signing time: Mon 14 Oct 2024 07:28:11 +0000
ROA not before: Mon 14 Oct 2024 07:28:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.52.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 15 Oct 2024 22:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:89:ed:6f:3a:7e:d9:1e:08:14:7c:c5:ad:1a:d8:c5:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 14 07:28:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=622c50cc4400bebc90401f45e884208b71349a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:b8:8e:8c:a9:6c:26:d7:45:15:a8:8a:8d:
7d:ab:25:2d:9c:c0:0a:11:df:76:af:a4:56:2e:ef:
16:ca:8d:6c:2b:d4:1c:7e:65:81:bd:6a:6f:33:2c:
56:f0:32:7e:e2:b7:ec:d3:ad:a7:d7:d3:3a:17:7e:
9d:2e:bb:a3:94:1c:b2:ba:6e:9c:85:20:d5:5d:8e:
8c:b6:e2:62:e0:21:85:81:2f:43:34:0a:b9:2a:42:
c6:2e:4c:35:30:cc:2c:6b:60:f1:07:ee:35:3e:61:
b2:36:f8:35:8e:18:f9:31:1c:84:78:03:56:03:d2:
e5:e8:dc:fc:23:3c:f0:35:49:46:df:be:cc:d8:84:
cb:9c:0d:da:db:2f:ba:c8:16:fd:03:cb:d3:fc:4c:
01:d2:ab:ea:e4:82:08:51:a6:92:d3:36:99:6e:cd:
30:77:b7:60:38:c0:80:dc:d7:32:41:b3:db:24:c8:
60:73:0e:87:2c:ee:42:30:d5:aa:1c:e1:9e:f2:d6:
20:11:67:c6:bf:4c:3b:83:4d:47:2e:6c:dd:77:ef:
0e:05:c3:1d:98:2f:2a:18:4e:24:12:ed:1a:94:b2:
c5:2a:4e:5c:c7:b5:ca:7a:9c:43:ff:c5:10:f4:ce:
de:63:57:cf:08:23:64:ad:a7:5b:1a:2b:f0:45:d8:
01:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2C:50:CC:44:00:BE:BC:90:40:1F:45:E8:84:20:8B:71:34:9A:76
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/YixQzEQAvryQQB9F6IQgi3E0mnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
39:a8:d3:1e:7d:af:41:ae:f5:d1:2b:18:4f:16:94:bb:89:e3:
1b:24:eb:fa:69:60:ad:e7:4d:b9:18:92:9b:cd:de:57:37:ad:
75:de:67:bb:2c:2d:aa:1f:e3:5a:1f:0b:c4:30:9f:64:82:43:
38:1e:14:ed:95:03:46:5d:3a:38:c7:08:b1:97:3e:1c:7a:32:
2b:28:e1:c8:38:c0:5e:20:8c:6b:d6:9a:56:86:c7:5f:0e:9a:
64:d1:38:7b:a5:0f:90:4b:e6:c8:39:4e:a4:b4:4f:b5:73:b4:
66:cc:fa:d9:fc:ea:87:7d:18:b4:4e:03:ea:de:e2:7f:ed:88:
81:21:93:d7:79:43:95:b0:4a:f5:17:57:99:56:c1:6c:9c:6d:
c7:21:b5:a9:91:68:82:a9:c2:29:73:d0:02:de:36:83:3d:d8:
53:6c:61:35:38:d0:27:ac:a9:b4:85:ff:2d:95:75:b8:e8:77:
f6:41:0a:8e:2d:73:3c:fb:4b:8f:02:88:55:ec:fa:32:ab:da:
b7:40:a5:09:58:80:5e:a8:94:5f:43:5c:fe:4e:49:92:ba:31:
85:0e:8e:ea:58:f5:08:37:3f:1b:58:25:c1:14:ae:16:7c:de:
73:0e:e4:f0:97:16:ef:06:5d:2f:59:c4:cc:d0:c7:82:6f:73:
5d:f3:67:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 23:26:15 2024 by rpki-client on console-fra.rpki-client.org