Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gwWXwFOYvhz7V9BKwcPhYO44QuE.roa
File: gwWXwFOYvhz7V9BKwcPhYO44QuE.roa (raw, json)
Hash identifier: yRZnggaqFO75y+y7O6O3GX+gkZtBdaCuwcBPwZsf600=
Subject key identifier: 83:05:97:C0:53:98:BE:1C:FB:57:D0:4A:C1:C3:E1:60:EE:38:42:E1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B76914261E0F5634FB0A2AB3F5458328
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gwWXwFOYvhz7V9BKwcPhYO44QuE.roa
Signing time: Tue 03 Sep 2024 10:23:22 +0000
ROA not before: Tue 03 Sep 2024 10:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 03 Sep 2024 20:46:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:69:14:26:1e:0f:56:34:fb:0a:2a:b3:f5:45:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 10:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=830597c05398be1cfb57d04ac1c3e160ee3842e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:9b:f8:58:fd:03:6d:22:6b:9f:12:23:62:
5d:db:02:94:bb:68:0d:7a:98:69:0d:84:7c:72:3b:
cf:ff:d3:f8:a3:e1:35:28:20:f1:41:bb:d0:fc:93:
27:71:9d:98:f1:2f:94:49:67:37:04:1d:9a:a0:35:
57:fa:8d:a4:0e:d0:d9:91:0c:ea:72:aa:21:f1:27:
66:1b:1e:16:30:a7:b5:57:1c:f1:9b:9d:5e:c1:b0:
f6:1a:a0:50:34:27:97:a5:da:a2:f8:47:a4:23:2e:
9d:bd:97:7e:f9:8d:3e:0c:5d:04:51:23:5b:8a:0b:
bf:d1:a4:c2:a7:9d:c0:6b:86:b8:71:7c:df:6f:22:
ab:4a:75:f5:2f:7e:27:ba:2f:e1:38:0d:1c:64:af:
56:1c:e6:b6:e9:f7:24:93:7d:9a:77:7d:90:41:11:
88:9e:5f:93:b4:05:5f:f1:5b:19:f2:f7:8c:2a:6e:
a2:53:ee:1c:20:28:60:fd:de:13:7c:90:08:7d:36:
97:7e:e9:d5:61:cc:bd:e3:26:d3:d9:18:bd:b2:8c:
c7:10:09:10:9b:e0:6c:11:a5:3a:23:e7:25:15:59:
f5:d3:3b:93:ee:72:44:a7:8b:91:7c:a1:fd:e3:72:
07:fe:55:96:25:b1:76:c2:e7:06:a6:11:7d:0a:af:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:97:C0:53:98:BE:1C:FB:57:D0:4A:C1:C3:E1:60:EE:38:42:E1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/gwWXwFOYvhz7V9BKwcPhYO44QuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
b1:83:ad:3c:9e:85:fa:e0:b8:17:bc:c5:41:1c:5d:f6:d5:21:
5a:eb:cc:fc:63:0a:f4:e8:99:dd:68:0e:84:10:a5:42:e2:a0:
25:fe:47:c4:7b:f9:cb:64:00:50:e1:f2:de:eb:cb:3f:1d:b4:
4b:a6:7c:db:f2:92:06:75:8f:2f:3a:4f:e2:c6:ef:6f:cc:e4:
dd:9f:f5:03:43:63:44:f3:06:12:5e:b5:0e:f6:48:cc:f1:17:
6b:09:08:7c:df:57:bc:81:3e:d2:70:55:91:6d:a6:b6:98:b4:
f6:b0:1b:5e:0f:61:ed:1b:48:13:f7:68:c6:df:ba:70:38:97:
40:e5:60:93:73:2f:11:00:8d:0a:c6:e0:6e:04:fc:41:96:7b:
fd:f3:33:9e:6d:e0:a6:e3:f9:07:8e:40:e7:93:50:e5:01:45:
bf:3c:e5:51:8c:c5:f3:12:16:52:d9:5f:ec:56:30:03:68:72:
46:29:0f:d5:79:0d:93:0b:f2:13:a4:47:45:0c:d4:6c:f0:1e:
83:16:99:35:76:07:31:49:b1:b6:2f:af:c9:bd:35:13:27:04:
88:7f:46:00:3e:15:0c:88:e4:ad:57:ca:da:6c:d0:38:f7:f8:
18:7d:57:8b:7a:1e:82:9a:9d:cd:f4:32:0b:2f:29:e9:64:44:
87:6c:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 22:04:23 2024 by rpki-client on console-fra.rpki-client.org