Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/men6TaUF--Nvv4v4OlHy5Hxk3ec.roa
File: men6TaUF--Nvv4v4OlHy5Hxk3ec.roa (raw, json)
Hash identifier: 6ZmuYQbm/23N6KTQHZvC81TkRVUfYhRDBmHx61k7JgU=
Subject key identifier: 99:E9:FA:4D:A5:05:FB:E3:6F:BF:8B:F8:3A:51:F2:E4:7C:64:DD:E7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01930B9B361C7786976F04AB7433CC036DE0
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/men6TaUF--Nvv4v4OlHy5Hxk3ec.roa
Signing time: Fri 08 Nov 2024 11:49:01 +0000
ROA not before: Fri 08 Nov 2024 11:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Nov 2024 00:38:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0b:9b:36:1c:77:86:97:6f:04:ab:74:33:cc:03:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 8 11:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99e9fa4da505fbe36fbf8bf83a51f2e47c64dde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:a6:73:4d:31:f3:56:b5:24:68:e7:8d:54:
f9:f6:1b:b7:37:f7:93:6d:fd:27:07:03:72:fc:de:
9b:3c:43:11:d7:3d:88:97:80:0e:09:5c:2a:be:6c:
77:d7:d0:d6:e5:ea:0c:b0:90:01:4d:37:e8:03:76:
e0:11:d8:92:e9:5b:c0:3e:60:dd:2e:2f:4c:34:de:
40:b3:0f:a4:c3:e0:33:82:34:26:46:6d:c7:75:86:
92:52:ab:2c:ff:c3:02:41:0d:bd:c7:85:f8:ec:8a:
3f:c0:a3:0f:ab:a8:17:a5:db:96:51:53:eb:8d:bf:
e2:e8:79:16:40:83:a1:43:87:75:66:fb:2f:5f:b2:
f3:75:b3:8f:77:84:77:79:f3:4c:46:2e:7d:fc:13:
7e:b3:f1:a5:29:0d:8d:13:dc:94:df:5a:0e:65:6b:
4c:68:7d:f4:a6:55:13:61:56:a0:18:20:0c:9e:a0:
4d:82:a3:2e:68:75:7f:1a:d4:9d:e8:b9:68:ee:d4:
85:bb:49:a3:2e:9c:be:1c:85:44:9f:9a:4f:d9:48:
03:80:ec:e7:05:f6:3b:ec:cf:4f:33:3a:5b:aa:91:
95:ab:e9:d3:05:f9:18:e6:c3:5d:43:cc:3f:0c:8f:
49:3e:f1:4d:ed:43:2e:a0:6b:a3:97:cd:b2:e8:47:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E9:FA:4D:A5:05:FB:E3:6F:BF:8B:F8:3A:51:F2:E4:7C:64:DD:E7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/men6TaUF--Nvv4v4OlHy5Hxk3ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
35:70:76:5b:5a:a3:a8:14:79:fc:d5:73:7a:f4:d0:cf:f6:a2:
19:77:cd:77:86:2a:3d:52:64:56:80:3f:89:71:80:ba:3f:fc:
15:3f:2c:b8:1c:f2:22:4f:36:01:56:d9:ae:f3:a3:31:e0:0b:
21:ad:0f:eb:70:c4:6b:b0:7b:cb:c9:2c:89:17:b9:b8:49:44:
66:a3:36:71:8a:b6:0a:ed:49:c3:62:8a:5c:d3:ea:7b:8c:57:
6a:c5:27:02:78:ed:6b:93:83:88:b8:10:9b:5d:24:05:8e:0f:
b6:25:30:0b:d6:1c:a1:8d:34:b1:e3:4e:7f:08:37:56:e2:43:
cd:f0:cc:23:d9:82:92:3c:1c:32:e6:40:0d:31:72:a9:b1:c3:
fc:b4:f9:32:c5:01:bc:35:42:4e:a1:67:dd:c8:8d:e2:ec:fb:
cf:5c:67:48:5b:fc:43:72:c2:8a:cf:51:35:46:65:77:73:37:
1c:3f:35:ed:e2:c3:49:30:68:49:90:d1:64:76:42:03:d9:b0:
57:53:55:79:9c:44:56:de:8d:e9:33:95:54:a0:35:49:e8:15:
de:c3:9a:e5:4b:27:68:cb:0c:f1:92:39:88:07:76:a0:a8:48:
4b:ba:82:06:a6:7f:dd:d3:6b:d2:cc:12:db:1e:06:ac:7b:aa:
b1:39:19:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 05:49:57 2024 by rpki-client on console-fra.rpki-client.org