Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gEYD-A-qfhji01jsBWNm34f-pzs.roa
File: gEYD-A-qfhji01jsBWNm34f-pzs.roa (raw, json)
Hash identifier: 5uNYI/WlcKJTgswcsZxhKL8aEngBc3fr/B2PHHgKNlY=
Subject key identifier: 80:46:03:F8:0F:AA:7E:18:E2:D3:58:EC:05:63:66:DF:87:FE:A7:3B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01915CF4A52C0A1E7C975715143C82C6CDB1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gEYD-A-qfhji01jsBWNm34f-pzs.roa
Signing time: Fri 16 Aug 2024 20:50:22 +0000
ROA not before: Fri 16 Aug 2024 20:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.56.0/24 maxlen: 24
77.90.57.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
77.90.59.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 19 Aug 2024 14:44:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5c:f4:a5:2c:0a:1e:7c:97:57:15:14:3c:82:c6:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 16 20:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=804603f80faa7e18e2d358ec056366df87fea73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:a9:a7:a0:bc:bf:7b:a2:4b:e0:e7:8d:50:
f8:03:a3:18:8b:b5:78:95:71:4d:4b:3e:00:52:07:
62:36:57:ac:d9:6a:c8:11:a5:50:17:8e:be:ac:57:
37:87:c4:97:e7:3b:2a:8d:41:92:0a:74:40:1b:8b:
c8:57:38:7c:da:0b:1e:18:a2:74:f2:07:10:6a:2e:
ff:20:95:10:80:62:ff:d6:5e:fd:dc:4b:a8:3d:71:
04:90:15:2c:c8:d3:fc:0a:3c:8f:4c:5f:21:eb:c9:
06:47:f0:4a:69:c1:6c:2d:12:1c:b3:b1:06:15:d2:
f1:19:d2:d8:e6:99:b1:07:83:20:b4:ba:35:c9:1d:
d2:00:4f:85:43:87:db:fa:5d:4a:6f:0c:da:60:9e:
1b:be:fe:db:f7:7c:a1:c0:58:72:f6:13:d1:86:4a:
8c:e4:03:b6:ad:12:bd:fc:d7:5e:d8:13:78:96:6e:
16:fa:09:cf:5d:da:b6:60:59:a2:85:97:dc:08:e0:
18:71:36:c2:7b:ed:f1:f8:7f:4b:a1:b7:b6:d5:ac:
a3:1b:8d:cc:22:2f:1e:87:50:1f:fd:62:50:e6:6b:
1c:cf:56:aa:31:44:bb:dc:08:65:4e:b2:d2:14:eb:
8f:29:d1:21:f3:8c:ba:89:20:a1:88:22:de:8f:79:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:46:03:F8:0F:AA:7E:18:E2:D3:58:EC:05:63:66:DF:87:FE:A7:3B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gEYD-A-qfhji01jsBWNm34f-pzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:14:61:b5:a9:d0:dd:71:fc:ac:26:c2:f1:f9:87:a6:99:ce:
4e:43:0b:45:bd:4d:18:24:1a:c1:42:1c:c7:1c:47:fd:a8:11:
0e:a2:ca:75:9c:a1:b4:f0:ad:92:57:6f:78:ff:f7:a5:48:f6:
8b:b8:b8:93:c4:d6:4d:50:84:5d:9c:a4:32:ea:f8:2c:cf:0d:
8a:bd:77:a3:a1:5b:4c:c0:66:bf:19:e0:a9:8c:57:0b:f3:97:
36:b3:cc:a6:a7:55:ca:73:4d:77:13:3d:72:45:fd:dc:70:41:
44:9c:89:b3:10:40:3c:0a:3f:aa:ad:5f:f9:45:d9:38:55:95:
69:c8:8f:8b:86:6f:64:2b:6d:0f:e3:b3:21:1b:1b:92:d5:27:
6f:76:c6:61:5b:fb:c2:b6:cf:ab:b5:da:45:fd:ad:f2:15:3f:
ed:68:ef:fd:af:43:28:2b:b6:de:81:4c:74:ca:0e:00:32:88:
57:5b:15:4b:c1:33:ab:88:71:07:93:5a:fe:d5:c6:20:9b:cc:
2b:f2:de:a4:ab:ec:59:67:e2:bf:1c:e3:23:4f:b8:e1:5a:e6:
6e:e6:4b:de:eb:62:88:5c:e0:d7:c3:94:f1:14:3e:52:f9:9e:
89:ba:8c:f3:42:c8:ea:fe:a1:17:99:b2:de:19:4e:13:0a:96:
13:6a:48:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 19:09:13 2024 by rpki-client on console-ams.rpki-client.org