Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h87c2a_JakKIuldvbCYdI9zGljE.roa
File: h87c2a_JakKIuldvbCYdI9zGljE.roa (raw, json)
Hash identifier: tD+el7NxH/VYK5KFQKRAsiXAIYK8nH3rlXl02LDa/w4=
Subject key identifier: 87:CE:DC:D9:AF:C9:6A:42:88:BA:57:6F:6C:26:1D:23:DC:C6:96:31
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019298ABD9CC45733E4A2CEBA36ED3CA68BE
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h87c2a_JakKIuldvbCYdI9zGljE.roa
Signing time: Thu 17 Oct 2024 04:10:52 +0000
ROA not before: Thu 17 Oct 2024 04:10:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 13:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:ab:d9:cc:45:73:3e:4a:2c:eb:a3:6e:d3:ca:68:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 17 04:10:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87cedcd9afc96a4288ba576f6c261d23dcc69631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d4:1a:00:6b:00:74:53:ec:96:51:7f:63:f4:
7a:81:a6:b2:8b:74:25:4b:7d:1e:9b:c0:c9:81:09:
28:30:0a:7d:b5:f0:74:b8:cd:ab:b4:ff:e4:82:6b:
e1:03:29:88:7d:a4:bf:c4:ea:0c:7a:09:e0:7a:59:
cc:ce:3b:dc:91:a7:f8:67:8b:36:19:80:87:c4:09:
d2:58:4b:81:83:9b:58:65:07:78:37:8d:b6:e6:dc:
8c:17:06:c5:7b:82:d0:f5:20:c7:ab:1b:24:44:7d:
24:ae:6a:e9:96:fa:9f:e1:ec:20:48:09:bf:d6:77:
03:ec:d8:ad:10:25:8a:94:dd:33:02:f7:5d:22:76:
e1:a6:fc:5c:f4:c3:91:2e:e3:95:c7:01:79:d1:c1:
59:8e:e6:99:f0:b3:36:02:92:9d:fd:32:ed:eb:51:
13:63:06:90:09:d6:64:eb:93:d0:f4:9d:67:93:86:
c7:12:4e:62:e4:77:15:78:69:f4:07:06:3a:a6:65:
fa:d3:04:ca:05:ee:2e:94:49:23:14:ee:6f:df:26:
48:a6:e0:46:1b:17:0f:95:cc:b1:c5:e9:24:95:fa:
df:a2:a1:4f:85:54:1b:a5:14:34:7d:01:78:8d:3a:
68:15:79:be:58:6e:31:dc:a7:b1:75:78:4d:c8:da:
18:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CE:DC:D9:AF:C9:6A:42:88:BA:57:6F:6C:26:1D:23:DC:C6:96:31
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/h87c2a_JakKIuldvbCYdI9zGljE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
5.231.70.0/24
77.90.42.0/24
77.90.55.0/24
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
85:fa:b6:fc:1c:f7:f0:92:0b:41:67:66:1e:2f:06:43:e7:80:
6e:56:f1:ef:33:d7:16:72:27:19:bb:32:d2:63:0a:95:10:a5:
80:57:b9:8c:21:81:d5:2e:84:63:82:15:cc:97:cf:c0:bb:ce:
6a:91:e9:61:f2:59:b0:72:30:fc:66:b3:62:ba:0d:db:6a:b2:
90:8a:10:90:15:e3:36:6f:26:75:1a:de:94:39:09:6d:9e:c6:
ef:f7:fc:4e:9a:fb:ba:11:c1:23:ec:19:0f:52:b8:81:91:f1:
81:79:72:58:d8:09:3b:c9:25:46:41:bf:b5:e6:40:c3:31:71:
87:c6:21:bb:fe:96:c2:e9:4e:a7:d6:d5:ec:fe:ec:1a:08:9c:
be:5d:b9:94:3d:1b:5b:d8:41:ba:5b:18:a6:27:5d:26:17:eb:
e1:0c:87:87:ec:71:2d:13:eb:24:e8:89:df:56:93:bb:10:79:
5f:3a:5a:fa:2b:6f:fe:d0:88:ed:3c:80:2d:f6:94:29:9b:28:
87:c6:c6:7e:c4:38:1e:42:c8:f3:b0:30:10:f5:39:6f:0f:77:
e5:d5:01:4d:fb:86:42:a9:83:97:43:0b:5a:09:2b:4c:47:f6:
3c:78:f1:7c:2a:96:11:f8:f0:b3:ce:19:0c:f6:2c:9a:65:2c:
a1:8b:2c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 16:48:32 2024 by rpki-client on console-ams.rpki-client.org