Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jMcT96rOvbURwqW_3ErFH8nBkik.roa
File: jMcT96rOvbURwqW_3ErFH8nBkik.roa (raw, json)
Hash identifier: 7DzwNY8ZFUSlKnA97p6/1o/Q+7eG+0z3u6AhhtZgyiY=
Subject key identifier: 8C:C7:13:F7:AA:CE:BD:B5:11:C2:A5:BF:DC:4A:C5:1F:C9:C1:92:29
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01911A7B771A878C1BB6CDCEF14D7C71A5F8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jMcT96rOvbURwqW_3ErFH8nBkik.roa
Signing time: Sat 03 Aug 2024 23:03:04 +0000
ROA not before: Sat 03 Aug 2024 23:03:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 05 Aug 2024 18:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1a:7b:77:1a:87:8c:1b:b6:cd:ce:f1:4d:7c:71:a5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 3 23:03:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8cc713f7aacebdb511c2a5bfdc4ac51fc9c19229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:90:d1:4c:7b:49:c8:4e:e6:7e:24:19:1a:7d:
48:38:48:c8:98:66:c1:1b:b7:9a:63:37:45:ee:3c:
b5:b9:94:5d:12:66:84:98:8e:03:db:ec:07:24:46:
a6:59:ef:28:dc:b0:81:32:89:63:92:6d:81:5c:ff:
fe:f6:21:7d:7e:e7:1b:46:96:18:85:13:ed:89:f2:
ef:c0:9f:e2:e3:9d:81:b0:35:02:6e:af:8d:d3:ff:
be:39:01:7d:0e:69:30:9d:14:5e:73:34:41:5b:ee:
f7:45:7d:6e:11:f7:77:8b:58:dd:59:35:9c:dd:35:
8b:b7:8a:17:42:0f:70:c1:33:b0:cc:38:46:a3:e9:
7a:cc:69:18:b5:3c:89:b8:1b:32:10:32:7c:3f:9e:
32:6e:ff:8b:24:f1:45:e7:6e:63:75:8b:9b:2b:c6:
c5:a4:30:b2:8a:d9:a0:03:ad:0c:12:ac:8c:59:31:
95:14:f1:2d:8c:b8:68:30:30:37:78:9d:31:7e:4f:
d5:5e:e0:1b:a7:c1:42:24:0a:8c:c9:5d:19:02:cc:
a0:af:36:f1:18:da:03:69:8b:f9:56:80:fc:24:04:
af:73:9e:2f:a0:09:9e:7f:b5:e2:d5:62:04:5f:d1:
68:3e:71:8d:bd:f6:5e:4e:ff:22:05:a4:e0:06:83:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C7:13:F7:AA:CE:BD:B5:11:C2:A5:BF:DC:4A:C5:1F:C9:C1:92:29
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/jMcT96rOvbURwqW_3ErFH8nBkik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
93:ee:ae:ca:c4:12:4e:6c:93:70:ba:8c:e0:5a:cf:b0:b0:6c:
52:37:34:83:d7:2e:66:ec:e7:36:b0:a4:7f:45:10:2b:93:ed:
08:fa:26:01:50:a2:01:04:c1:1c:1f:ce:c6:a4:18:f5:64:c5:
61:21:8f:2a:97:8b:1f:d8:1b:9d:6b:98:02:44:bc:9c:35:43:
45:32:3a:9a:21:82:fd:15:fd:8f:ca:bc:22:62:a1:50:5d:74:
9e:d2:ec:ca:c3:24:f8:fa:ad:28:bf:cf:4c:29:9e:b8:54:22:
af:1f:85:03:41:4a:69:e5:44:a8:45:60:b2:3e:99:25:85:39:
80:d2:03:fa:1b:af:86:7d:35:b5:35:4e:3f:19:b4:80:60:0a:
0e:85:ab:03:e5:a0:2b:f3:55:13:8b:02:85:37:87:6f:fe:30:
84:ff:60:2e:15:84:d1:57:78:ee:8b:01:29:ea:a0:9f:9c:db:
57:39:14:fc:31:7c:a6:ef:d8:8c:72:4d:2a:d3:d3:8b:15:98:
56:be:c4:8a:90:e8:08:f7:45:a3:fa:95:9d:bb:38:88:0d:b8:
e6:ce:d2:9d:e3:8a:20:52:0e:29:0e:ed:4f:04:ba:78:c5:20:
2f:72:e3:68:e3:03:6f:26:da:54:2c:e7:22:ed:84:c0:01:da:
93:df:1e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 20:10:21 2024 by rpki-client on console-ams.rpki-client.org