Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLWgFogWFRZ4InSGRSIz93-3nSA.roa
File: eLWgFogWFRZ4InSGRSIz93-3nSA.roa (raw, json)
Hash identifier: RfT2x9Ij1C7VtsepTUiInb8+j4Qf7V9FCtn3H+s4eQo=
Subject key identifier: 78:B5:A0:16:88:16:15:16:78:22:74:86:45:22:33:F7:7F:B7:9D:20
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01911365CEE4B8EFC444405C636F01F9734E
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLWgFogWFRZ4InSGRSIz93-3nSA.roa
Signing time: Fri 02 Aug 2024 14:02:04 +0000
ROA not before: Fri 02 Aug 2024 14:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 03 Aug 2024 17:33:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:65:ce:e4:b8:ef:c4:44:40:5c:63:6f:01:f9:73:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 2 14:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78b5a0168816151678227486452233f77fb79d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:bd:77:2f:f1:84:af:18:c7:8c:e7:a4:3a:
e3:f0:dd:24:f9:25:5d:aa:8e:b2:19:04:1b:e1:52:
d1:1a:35:13:cb:2b:32:49:03:ab:68:ad:76:be:d1:
cc:03:5d:09:c2:bc:3b:d1:b1:52:47:5a:b4:1d:27:
18:39:e5:0d:25:7d:7c:dc:66:c5:c6:9a:c5:2d:c6:
32:93:08:7e:f6:8d:3c:e8:9e:16:24:79:a1:68:07:
d6:f5:fe:45:54:65:da:82:13:b0:17:8d:95:b9:94:
2b:9a:03:89:ef:bd:4c:3b:fb:6c:f9:a5:fd:93:de:
78:86:d3:7f:8d:3c:f4:69:b4:90:c6:43:27:74:d8:
9c:9b:95:eb:6c:9a:8f:e3:74:0d:3e:7a:c5:4a:fb:
4b:99:d8:e5:5e:fc:65:f8:dd:11:ba:8e:29:f8:ce:
80:c0:1e:2f:0f:3e:f3:cc:9a:f2:dd:05:13:52:b9:
0b:af:2b:ba:3f:66:1b:c4:0a:41:5a:de:b5:ea:1b:
0b:ae:2f:2d:ab:15:2e:19:0f:6b:d2:6a:7b:0a:a6:
42:30:2d:d0:2f:5d:f4:14:3c:59:51:8f:3c:6c:fd:
f1:2b:54:06:a8:23:90:30:73:f2:fd:4b:16:54:fa:
2d:8e:15:39:83:b5:83:37:d0:b6:a0:8f:53:48:82:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B5:A0:16:88:16:15:16:78:22:74:86:45:22:33:F7:7F:B7:9D:20
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eLWgFogWFRZ4InSGRSIz93-3nSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:b4:9a:0c:22:44:20:d3:1d:b4:6a:2f:67:f7:9e:43:2b:46:
1f:ad:6c:10:60:78:a5:33:70:4d:1f:ef:e9:ac:77:79:7a:a4:
e8:4c:62:ff:26:ed:4b:35:17:6f:98:b5:da:51:bc:1a:e3:49:
7e:fd:a8:9d:2e:cf:87:69:c0:67:6f:1a:47:fb:2c:ba:1c:c8:
e9:fd:48:23:13:f3:8c:f9:86:39:29:49:ea:1b:ca:c5:3c:c9:
42:03:9f:ff:b3:dd:29:20:8f:2e:72:97:4a:d2:08:21:6b:ce:
c7:6a:62:b8:a3:bd:2d:50:11:e3:25:52:e1:a8:3c:c5:09:36:
4f:91:71:ac:ad:ba:99:e6:c9:34:f9:18:48:b6:47:9b:26:e0:
d1:47:b2:95:05:8b:3a:24:57:82:ed:16:bc:a6:a9:cb:44:ab:
51:98:b5:6b:62:09:eb:b2:5f:8b:54:52:18:58:f2:f4:45:79:
a5:b5:cc:81:71:d1:3d:d1:3d:11:f6:88:de:57:6b:d7:c5:8a:
49:52:d2:55:db:a7:1a:b8:3c:31:42:52:95:87:b4:b6:94:07:
d1:35:e5:da:5c:86:2b:eb:4e:4e:52:69:cf:62:dd:1e:b5:d4:
52:73:70:8c:67:e4:1d:25:c6:70:65:33:f8:1b:2d:27:aa:af:
d6:da:88:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 19:56:42 2024 by rpki-client on console-ams.rpki-client.org