Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eisIv8dmFGoJqaFYWhcMRXvlzI.roa
File: _eisIv8dmFGoJqaFYWhcMRXvlzI.roa (raw, json)
Hash identifier: OhLRuRgi5nWRnUEf5LmJcDVG1K9daarXV23tyUWcoyg=
Subject key identifier: FD:E8:AC:22:FF:1D:98:51:A8:26:A6:85:61:68:5C:31:15:EF:97:32
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01909087369AF9A3D9DFB8AD383607540B0B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eisIv8dmFGoJqaFYWhcMRXvlzI.roa
Signing time: Mon 08 Jul 2024 04:08:18 +0000
ROA not before: Mon 08 Jul 2024 04:08:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 09 Jul 2024 16:15:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:90:87:36:9a:f9:a3:d9:df:b8:ad:38:36:07:54:0b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 8 04:08:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fde8ac22ff1d9851a826a68561685c3115ef9732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:66:5b:b2:95:eb:e1:b9:9f:fe:55:ac:b1:1d:
16:51:0e:ad:1a:0d:36:7d:e0:70:4e:04:2b:32:a9:
1c:24:e7:e6:48:14:75:30:3d:51:a5:8f:35:27:5e:
1f:38:38:80:12:dc:8f:86:a8:02:3e:40:60:d3:d5:
d4:6c:e8:ef:6b:f5:b6:06:d1:f6:86:89:9b:49:ed:
f4:64:c8:14:6f:ae:5d:0e:02:2b:cc:c1:28:da:b3:
9c:45:5c:66:5f:a2:19:67:c9:d3:31:5b:18:2b:87:
e7:77:5a:0a:da:4a:0b:78:99:e4:c9:09:12:23:23:
7d:11:6b:7f:2e:1c:83:c1:86:54:de:ed:ea:56:43:
b3:83:ee:58:1f:cb:a2:c4:07:0e:62:1d:a2:92:b4:
f6:42:c0:6f:c2:4f:ec:93:41:31:0a:e2:e5:fe:8d:
06:4e:3e:9f:79:25:d2:d9:c2:9d:25:c8:5d:2d:e7:
0d:5e:d5:87:32:1b:cf:ab:9b:73:75:74:b3:ce:ba:
4e:1b:e4:dc:57:3d:09:c3:ab:ce:13:ba:7a:82:8a:
69:d4:a9:ce:60:cc:79:ac:70:e9:25:b6:ee:ce:24:
11:fc:8a:e1:b1:34:64:a7:de:9c:8c:21:af:ac:a9:
be:b6:fc:a2:d7:41:74:28:05:72:16:8e:6a:a8:be:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E8:AC:22:FF:1D:98:51:A8:26:A6:85:61:68:5C:31:15:EF:97:32
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eisIv8dmFGoJqaFYWhcMRXvlzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:4d:e0:ae:7e:7a:01:de:ec:cd:bb:8e:80:37:19:46:a8:2e:
bf:44:11:37:09:a4:4e:86:f5:c3:f4:47:e1:f5:48:08:10:e1:
d1:03:fa:2a:fc:0a:09:9a:28:c1:49:18:1d:56:10:c3:ae:87:
3b:fa:97:48:9d:b9:1e:aa:90:41:f5:9a:0c:88:37:20:80:3c:
94:18:f4:f6:3c:58:20:d4:82:5f:f5:d6:4a:c1:e1:75:cf:d6:
aa:9d:32:46:14:dc:16:cf:9f:47:aa:4c:70:d0:ba:2f:a9:26:
97:b3:ec:1e:41:c3:b3:21:00:d8:f4:58:49:4a:15:89:24:85:
0a:d8:81:b9:6e:c4:00:97:e8:1a:15:15:ac:02:87:cc:a6:9b:
3c:ba:16:2d:29:0d:de:82:95:33:df:74:a6:79:de:b5:e5:15:
5f:5b:f6:21:12:9a:58:ec:15:13:8b:d7:40:4a:c7:5e:13:af:
49:be:88:de:15:e2:fa:02:b1:80:63:c2:3c:1a:2b:6a:e4:3c:
00:c1:70:67:55:d1:56:6d:3e:f8:fb:15:0f:2a:41:37:1e:4f:
09:bf:d6:5c:ab:97:39:0a:72:dc:bd:af:33:d9:e8:4f:0b:f8:
98:87:c3:e9:48:1e:0a:bf:60:87:d2:0a:ed:0b:a4:76:8b:76:
c3:53:b9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 17:39:18 2024 by rpki-client on console-ams.rpki-client.org