Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/auUYgWvljzNZE3xNfAZdtQVsi_g.roa
File: auUYgWvljzNZE3xNfAZdtQVsi_g.roa (raw, json)
Hash identifier: HmpgQ8OmGsSReT3VeaU6HFwJfl25QDe+IXNV/oaH8ZU=
Subject key identifier: 6A:E5:18:81:6B:E5:8F:33:59:13:7C:4D:7C:06:5D:B5:05:6C:8B:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018D1171B3A6B1C9D57064EA563E1D317A53
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/auUYgWvljzNZE3xNfAZdtQVsi_g.roa
Signing time: Tue 16 Jan 2024 08:44:40 +0000
ROA not before: Tue 16 Jan 2024 08:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.151.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
95.215.32.0/22 maxlen: 32
89.144.0.0/18 maxlen: 32
5.175.255.0/24 maxlen: 32
94.103.160.0/20 maxlen: 32
5.230.11.0/24 maxlen: 32
5.83.128.0/20 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.102.0/24 maxlen: 32
94.249.128.0/17 maxlen: 32
87.239.128.0/21 maxlen: 32
5.175.128.0/17 maxlen: 32
193.28.251.0/24 maxlen: 32
85.93.0.0/19 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
5.230.224.0/24 maxlen: 32
89.106.64.0/19 maxlen: 32
77.90.0.0/18 maxlen: 32
85.118.160.0/21 maxlen: 32
77.90.11.0/24 maxlen: 24
77.90.10.0/24 maxlen: 24
77.90.14.0/24 maxlen: 24
77.90.15.0/24 maxlen: 24
77.90.13.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
77.90.12.0/24 maxlen: 24
85.93.20.0/24 maxlen: 32
217.69.160.0/20 maxlen: 32
195.110.14.0/23 maxlen: 32
2a02:7a0::/29 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a00:12d8::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Fri 08 Mar 2024 11:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:11:71:b3:a6:b1:c9:d5:70:64:ea:56:3e:1d:31:7a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 16 08:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae518816be58f3359137c4d7c065db5056c8bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:58:c2:19:ab:7f:b5:1d:ef:11:13:1b:b1:
9b:19:e2:13:40:47:b1:3c:9c:b4:d7:90:97:b0:36:
88:48:39:fc:47:75:e1:8a:f9:7b:09:e8:e7:b5:95:
b3:0b:aa:0f:1f:9f:a8:10:b9:be:dd:5f:ec:28:7b:
72:d0:bb:e3:eb:3c:14:0b:82:3c:8f:61:2d:f6:09:
ee:d7:7e:9f:e6:d0:16:61:fe:95:3e:10:8c:76:a9:
04:c3:61:d8:b3:4e:1b:7f:62:40:15:a7:25:9b:7f:
3c:14:78:cc:ad:fa:a0:09:35:a3:73:74:41:a8:ae:
a0:c6:0f:b4:36:b3:43:8d:b9:11:f2:b5:3f:44:86:
37:d5:42:5a:37:86:81:49:43:86:93:8f:08:07:cb:
84:e0:15:73:fe:ae:b8:34:50:45:76:9c:1f:b2:4e:
5b:67:38:2d:62:9c:30:18:2d:7d:c7:f2:cf:ed:2a:
7a:7a:af:57:b8:85:41:17:7a:35:b9:4c:00:1a:be:
ba:bd:8c:9f:7d:eb:3b:79:8a:da:a6:6d:7e:8b:d5:
ef:10:aa:5a:ac:44:8d:57:b7:6e:95:1b:84:7e:72:
06:13:83:d9:90:8f:e3:1c:a0:32:4c:bf:d8:38:2b:
a3:2d:31:ec:17:f6:16:ef:4d:99:d9:56:d2:0d:ad:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E5:18:81:6B:E5:8F:33:59:13:7C:4D:7C:06:5D:B5:05:6C:8B:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/auUYgWvljzNZE3xNfAZdtQVsi_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:3f:58:2e:96:59:48:44:40:82:d9:17:eb:b9:09:b1:42:d1:
81:8b:d9:a8:61:17:50:83:8c:4e:3c:4c:3a:27:3c:66:3e:6b:
4a:fa:90:ea:6e:d8:8f:f4:50:a5:31:ea:37:4d:22:dd:2e:71:
0e:b8:44:85:ba:52:e8:89:91:49:bd:83:35:d4:0b:7f:27:77:
2a:93:c3:3e:34:23:28:d2:71:cb:1d:2f:26:e6:23:e6:55:71:
d1:68:b1:56:28:53:3b:3a:87:c1:15:8b:6c:64:68:94:ee:c5:
be:f5:2e:5c:81:dd:1b:bf:7f:dc:27:f7:e2:b0:88:94:04:8c:
d4:38:c6:ca:32:b6:8b:11:b3:7e:4b:89:d5:a7:1d:38:5d:0b:
2a:78:b4:b4:71:df:64:cd:6e:82:f1:81:3d:4a:7b:d0:20:4d:
31:76:8e:1e:b4:d7:51:93:77:d2:b7:02:78:bf:93:62:0f:dd:
24:22:b4:d4:65:4c:5c:54:d2:22:0c:4d:dc:f7:a9:cb:24:a1:
54:f8:8f:c5:5f:a2:f4:5b:33:c0:0e:76:0c:9a:67:de:3d:bd:
78:2f:ba:84:40:f3:37:e1:d4:c4:92:a6:70:b0:52:d4:d5:94:
3f:20:ad:9a:72:02:37:fc:73:4a:e2:69:87:5f:f6:de:75:91:
21:08:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org