Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b9gTeKJITuGBiea5lvyJF71RjM8.roa
File: b9gTeKJITuGBiea5lvyJF71RjM8.roa (raw, json)
Hash identifier: 9W8M2exWVdce1lS7GKUvPSJlHrQFw2kWGNo5BzBVIoI=
Subject key identifier: 6F:D8:13:78:A2:48:4E:E1:81:89:E6:B9:96:FC:89:17:BD:51:8C:CF
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192EB4F155E9AB26CDBBE568FF53051AB43
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b9gTeKJITuGBiea5lvyJF71RjM8.roa
Signing time: Sat 02 Nov 2024 05:18:01 +0000
ROA not before: Sat 02 Nov 2024 05:18:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.50.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 02 Nov 2024 11:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:eb:4f:15:5e:9a:b2:6c:db:be:56:8f:f5:30:51:ab:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 2 05:18:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fd81378a2484ee18189e6b996fc8917bd518ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:c1:79:04:ea:f5:fc:89:c1:af:28:2c:79:
1a:90:9f:3a:d7:77:ce:c0:d9:14:0c:9b:65:de:ea:
e2:00:c5:ac:44:bc:b7:d9:71:e3:4d:a6:67:43:0e:
1d:ee:2a:33:65:a7:69:fa:53:b1:96:f8:c6:59:c5:
c0:30:53:a4:4b:9a:a3:fd:49:b2:dd:99:d5:fa:5e:
e3:c2:57:ad:91:63:6f:36:8c:bf:28:d7:c6:92:6b:
6c:57:eb:b3:94:d4:d7:ef:2d:33:db:40:28:4e:69:
06:a2:1e:5a:47:2a:76:5e:44:87:c4:05:43:71:43:
cd:21:0d:b9:18:ff:a3:9c:98:ea:6a:f3:ea:e1:6c:
cf:fa:8d:7e:d5:49:f5:d2:09:96:88:ba:fa:d7:f9:
11:1f:da:3c:82:a8:f3:44:d2:9b:77:6c:ec:6b:86:
c5:b0:fc:63:01:3b:ae:0e:da:e8:f1:9c:c8:1b:2b:
fc:52:ba:41:e6:d9:26:31:42:36:1b:da:0a:5d:b6:
dd:5d:df:4b:73:b0:cb:cb:cd:1a:4b:fc:62:a9:fe:
fc:22:c1:b1:12:62:c0:31:08:c9:34:7e:2b:d3:73:
89:b5:37:83:a8:c7:76:2d:64:09:67:25:cb:24:65:
54:c5:eb:fb:85:07:67:cb:bc:39:4f:e9:d5:8e:e5:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D8:13:78:A2:48:4E:E1:81:89:E6:B9:96:FC:89:17:BD:51:8C:CF
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/b9gTeKJITuGBiea5lvyJF71RjM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:93:fe:5d:8f:e4:b0:44:b9:54:34:d1:0c:36:f5:58:b7:75:
ab:b3:35:ab:2c:a2:b6:2d:2c:1c:74:72:90:69:36:f5:36:31:
6b:34:eb:04:85:36:b3:61:d5:25:68:35:03:02:fc:64:6d:68:
06:ba:48:a5:ec:ab:b7:17:d9:c2:db:cb:0b:f0:77:27:ab:b8:
62:de:e7:f5:8a:10:60:d8:9f:77:47:12:f9:be:6f:34:75:14:
cc:cc:f4:96:34:0a:fd:d5:bb:c8:0a:3a:39:ef:8a:5c:72:5b:
cd:68:e4:ea:fc:34:39:38:d6:c6:80:70:db:0f:65:c4:17:b1:
b1:8e:9a:01:49:d9:ae:cc:54:76:60:4d:8e:62:4e:47:cc:e0:
74:07:f8:52:a7:c0:c7:ef:77:eb:cb:75:27:29:7e:64:f3:f1:
db:4c:5b:f0:00:21:95:63:98:83:2d:f4:d0:ad:4f:fa:d9:7f:
b0:67:db:62:b3:78:cc:95:a4:3f:6b:33:25:e3:99:3f:18:25:
7e:95:04:7d:45:05:88:6f:9f:f9:e0:a4:4a:1f:cc:3f:c5:ac:
16:f4:05:f2:bc:f7:e8:f6:6e:88:6d:cd:dc:c1:57:ca:76:1f:
c3:51:bd:f8:29:15:b8:10:5a:2a:0e:6c:1f:86:07:bd:fd:56:
97:75:f0:fa
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZLrTxVemrJs275Wj/UwUatDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTAyMDUxODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ4MTM3OGEyNDg0ZWUxODE4OWU2Yjk5NmZjODkxN2JkNTE4Y2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfXBeQTq9fyJwa8oLHkakJ8613fO
wNkUDJtl3uriAMWsRLy32XHjTaZnQw4d7iozZadp+lOxlvjGWcXAMFOkS5qj/Umy
3ZnV+l7jwletkWNvNoy/KNfGkmtsV+uzlNTX7y0z20AoTmkGoh5aRyp2XkSHxAVD
cUPNIQ25GP+jnJjqavPq4WzP+o1+1Un10gmWiLr61/kRH9o8gqjzRNKbd2zsa4bF
sPxjATuuDtro8ZzIGyv8UrpB5tkmMUI2G9oKXbbdXd9Lc7DLy80aS/xiqf78IsGx
EmLAMQjJNH4r03OJtTeDqMd2LWQJZyXLJGVUxev7hQdny7w5T+nVjuX7dwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFG/YE3iiSE7hgYnmuZb8iRe9UYzPMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvYjlnVGVLSklUdUdCaWVhNWx2eUpGNzFSak04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAyJP+XY/ksES5
VDTRDDb1WLd1q7M1qyyiti0sHHRykGk29TYxazTrBIU2s2HVJWg1AwL8ZG1oBrpI
peyrtxfZwtvLC/B3J6u4Yt7n9YoQYNifd0cS+b5vNHUUzMz0ljQK/dW7yAo6Oe+K
XHJbzWjk6vw0OTjWxoBw2w9lxBexsY6aAUnZrsxUdmBNjmJOR8zgdAf4UqfAx+93
68t1Jyl+ZPPx20xb8AAhlWOYgy300K1P+tl/sGfbYrN4zJWkP2szJeOZPxglfpUE
fUUFiG+f+eCkSh/MP8WsFvQF8rz36PZuiG3N3MFXynYfw1G9+CkVuBBaKg5sH4YH
vf1Wl3Xw+g==
-----END CERTIFICATE-----
Generated at Sat Nov 2 14:42:35 2024 by rpki-client on console-ams.rpki-client.org