Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lRFHfj2wDBDqODJgx5bklUjCKMs.roa
File: lRFHfj2wDBDqODJgx5bklUjCKMs.roa (raw, json)
Hash identifier: Nbq2tAeivJFXdllEBH/viTw+ThjCFytMsqwZN+iaCjc=
Subject key identifier: 95:11:47:7E:3D:B0:0C:10:EA:38:32:60:C7:96:E4:95:48:C2:28:CB
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192D8CF4D2F83D793C9EE3CEFAD470D534F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lRFHfj2wDBDqODJgx5bklUjCKMs.roa
Signing time: Tue 29 Oct 2024 15:05:17 +0000
ROA not before: Tue 29 Oct 2024 15:05:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.45.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 31 Oct 2024 05:18:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d8:cf:4d:2f:83:d7:93:c9:ee:3c:ef:ad:47:0d:53:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 29 15:05:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9511477e3db00c10ea383260c796e49548c228cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:fd:f5:ab:e6:fe:4f:c0:bc:6c:ee:b0:eb:
93:57:96:53:33:40:c9:ba:57:c2:e1:17:d0:d9:16:
ce:79:af:ef:55:ca:c2:f1:cf:b8:f7:48:31:6b:5a:
ef:c3:e0:f6:1b:e1:76:3b:3f:e7:08:0a:ae:e5:d5:
c5:5a:5c:8c:fc:a9:11:cc:13:eb:5a:34:48:7f:3f:
d9:52:cf:0a:eb:f6:e9:5f:ce:a3:b1:5b:e7:d5:8d:
f2:00:4f:5b:36:0e:d8:4b:b3:8a:bc:6c:f4:1c:c4:
99:bc:88:a8:82:7e:f7:24:37:00:94:f7:df:ba:f7:
d2:9c:7f:9a:4f:dd:a4:b5:0c:89:a9:c5:54:77:4e:
a3:16:cc:8a:be:5c:7e:14:4e:f3:b8:bc:4e:d2:1e:
39:34:f5:5b:a6:d3:b7:3f:8e:65:be:77:e5:61:c6:
92:ed:ae:63:1b:37:98:e0:93:9f:be:89:8e:1d:8b:
6d:4a:fc:a9:10:a2:03:ff:1b:d7:7c:b1:ff:71:dd:
55:dc:32:aa:fa:02:8b:44:ef:3e:32:fb:9e:da:ab:
c7:c9:ee:e7:f6:bf:18:c8:ab:5b:86:13:49:49:c0:
18:a4:16:7e:be:ac:7c:1f:76:76:b6:21:95:b8:ed:
23:e8:21:06:c9:67:42:c4:b5:be:69:89:26:63:0d:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:47:7E:3D:B0:0C:10:EA:38:32:60:C7:96:E4:95:48:C2:28:CB
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/lRFHfj2wDBDqODJgx5bklUjCKMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
38:3e:d4:f2:65:7e:99:25:d3:22:20:12:83:d9:05:c3:db:9c:
27:b6:68:de:38:9a:83:4d:23:62:c8:fa:44:10:fe:be:da:8d:
c4:ea:81:e6:58:e0:2d:62:5f:93:8c:14:15:08:69:cc:92:44:
8a:57:40:88:46:34:31:ab:bd:85:4c:e2:10:27:60:39:55:cd:
72:9f:01:8c:d8:1d:81:b7:82:1d:9e:80:71:2a:28:a6:b6:db:
8e:a7:04:b1:77:33:b1:5a:94:b7:bd:bb:3e:3b:a9:fe:c0:50:
77:1b:26:3b:aa:f3:22:d6:10:1f:28:5f:89:f3:39:56:d1:f7:
c7:ba:68:09:0d:af:4b:61:18:b4:99:79:61:a9:af:84:fc:8b:
28:ec:20:86:7b:10:21:26:4c:59:d4:89:f0:22:ea:f3:1f:66:
b8:7f:ae:e7:dd:df:4d:46:b7:0f:41:f7:93:83:ab:e5:ef:df:
02:aa:9d:f5:7d:c6:59:f4:0f:c3:41:af:d7:c7:a4:9f:1f:54:
8d:48:5b:99:b6:90:b4:99:2f:c1:ae:4d:84:66:c6:a4:e7:d0:
1c:4b:76:d7:9c:66:95:a1:4d:90:44:a0:62:f3:af:a1:34:85:
47:cc:9a:50:7e:ab:a7:df:9c:7b:b7:b4:fe:5c:6d:5c:8a:d7:
d3:d5:8b:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 06:13:21 2024 by rpki-client on console-fra.rpki-client.org