Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mXLYzvb_ck5-4XqptlMq8AVo60s.roa
File: mXLYzvb_ck5-4XqptlMq8AVo60s.roa (raw, json)
Hash identifier: sooeY+aaCpJVUt3RgBtv1AG42cI7WAISH8g5lr9D7kg=
Subject key identifier: 99:72:D8:CE:F6:FF:72:4E:7E:E1:7A:A9:B6:53:2A:F0:05:68:EB:4B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019178439CE01035131F204FE723F1E10D1F
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mXLYzvb_ck5-4XqptlMq8AVo60s.roa
Signing time: Thu 22 Aug 2024 04:06:22 +0000
ROA not before: Thu 22 Aug 2024 04:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.28.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 22 Aug 2024 13:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:43:9c:e0:10:35:13:1f:20:4f:e7:23:f1:e1:0d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 04:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9972d8cef6ff724e7ee17aa9b6532af00568eb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ed:f7:54:5a:87:bc:67:ad:96:84:ba:b2:3d:
ff:36:9f:c9:54:50:71:54:f5:d3:7c:84:68:f3:e7:
13:89:d2:5d:fc:2d:bb:60:5e:a0:77:f2:6d:eb:6c:
ba:a9:e4:12:b3:1d:4f:9a:10:67:51:bf:07:7e:43:
8d:ce:6a:03:4e:1e:f8:1e:f0:0a:22:d0:c1:df:05:
3f:a3:14:fa:89:a7:c1:81:23:ac:9d:e2:ec:da:16:
53:ff:15:51:ce:0e:d3:fa:69:6f:9c:dd:c5:75:8f:
46:bb:d4:97:26:1b:8d:b8:5b:a8:e9:60:a7:e8:f0:
1f:c8:1e:13:9b:d1:d1:55:4e:5a:f8:9f:93:01:45:
92:47:d9:65:92:b6:ec:6e:af:26:60:09:13:df:53:
98:6e:32:bf:1a:87:2f:9d:8f:a6:2f:35:23:e0:ee:
97:34:c4:2b:c1:1e:f6:eb:0e:5d:28:17:e7:f0:a6:
40:36:64:d5:ea:5b:ad:0a:16:79:5b:07:70:50:c4:
4d:f6:ed:96:9d:fe:a1:9d:f3:5a:8f:3b:da:cc:d4:
98:b5:d3:ca:52:8c:c2:8d:8f:5c:c2:bd:28:58:4e:
f2:28:5e:1c:20:91:fa:f9:85:1f:06:ae:ec:5d:26:
9c:49:f7:60:f4:e2:1b:70:15:16:48:c2:56:c9:b6:
3c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:72:D8:CE:F6:FF:72:4E:7E:E1:7A:A9:B6:53:2A:F0:05:68:EB:4B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mXLYzvb_ck5-4XqptlMq8AVo60s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
af:04:62:fc:91:f4:e2:f3:64:7e:68:3b:a5:24:c7:b3:29:f0:
0e:95:e9:1f:6e:a3:7c:cb:e6:d7:38:95:97:e7:27:d1:bc:8f:
a2:97:56:b2:11:09:ad:27:33:2a:2e:b8:84:58:bb:4b:73:2b:
e0:e2:d7:4d:11:d4:0a:11:b9:ee:df:da:42:c0:57:f4:e4:33:
00:83:77:29:03:a6:e9:53:bb:2f:a4:74:b0:db:c5:1f:fa:f4:
57:60:7f:ad:a7:58:79:c3:16:0f:ba:5f:70:0a:c8:59:c7:b1:
3b:e9:e7:00:4d:89:d3:b1:0c:98:1a:33:3d:dd:e9:4a:2d:75:
0f:76:ee:8c:6c:19:4f:7a:7c:95:e5:fa:ba:50:d1:21:4a:7f:
75:62:d2:0a:85:fb:76:18:b6:f3:8c:c6:ae:3e:c6:b5:73:9c:
df:ec:00:44:5f:48:37:9e:c5:81:1d:ac:32:f0:68:c9:8f:f0:
57:2a:d6:a4:e4:41:b0:bd:00:ab:41:db:05:c4:78:fc:76:09:
d7:a9:1e:27:bb:f6:28:c3:a9:4c:b0:92:55:89:d8:a3:98:b9:
51:11:e4:7e:c1:9f:16:b1:ca:9a:02:a4:3b:4a:7f:11:b4:ef:
9a:fc:aa:04:8f:5c:d3:24:d7:76:16:65:b4:87:e4:a5:77:f5:
7d:09:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 16:53:01 2024 by rpki-client on console-ams.rpki-client.org