Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mflTjWsnagWEx9dSEl_-8iL79Ug.roa
File: mflTjWsnagWEx9dSEl_-8iL79Ug.roa (raw, json)
Hash identifier: vIJxsP+bVF+26lfbcxJiPpAB2fJLbG6FQwAAp5B3J+M=
Subject key identifier: 99:F9:53:8D:6B:27:6A:05:84:C7:D7:52:12:5F:FE:F2:22:FB:F5:48
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019247CB261B08009E98C0FB69CDF002019D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mflTjWsnagWEx9dSEl_-8iL79Ug.roa
Signing time: Tue 01 Oct 2024 11:15:48 +0000
ROA not before: Tue 01 Oct 2024 11:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.134.0/24 maxlen: 24
5.83.141.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.48.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
77.90.60.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 02 Oct 2024 04:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:cb:26:1b:08:00:9e:98:c0:fb:69:cd:f0:02:01:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 1 11:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99f9538d6b276a0584c7d752125ffef222fbf548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:1f:fd:59:84:b5:39:ea:f5:ae:f4:81:fc:
59:5c:ca:0c:b4:8a:92:fd:e5:a2:19:56:32:6c:63:
57:87:a5:07:d4:b7:3b:94:4e:15:79:e0:26:cd:fd:
45:f1:5a:2d:c0:d1:3f:d1:26:05:a2:94:df:15:1a:
37:f1:fd:17:92:59:19:33:3c:fb:a2:4c:cd:57:fc:
75:f0:1a:91:e8:15:6e:e3:5a:39:02:3a:77:35:b3:
f9:61:09:4b:c2:7d:d1:4d:4d:fc:d3:ad:e4:74:c0:
3d:02:36:17:a8:7b:e3:3a:71:e7:72:d4:54:a7:90:
b3:31:7c:a1:aa:db:b1:6f:34:de:74:c0:90:cc:8f:
13:53:6f:c0:f5:49:c9:1f:d5:cd:ca:cd:76:05:c9:
09:23:d6:55:4a:ee:73:36:8a:ab:cb:fe:ba:f5:82:
d9:0f:e0:9a:9f:79:dd:e1:c7:e4:53:a1:b0:cd:d2:
7f:e5:b8:fa:83:a8:d4:1c:01:64:60:25:3f:e8:9f:
dc:18:9d:12:55:5b:27:8f:c5:15:9e:3d:bd:c5:43:
d7:5d:19:c7:fe:c5:f0:6a:5d:60:0f:29:cf:54:e5:
5e:0f:f1:00:f3:5e:7b:52:c9:3c:e7:62:4f:2e:d6:
ea:23:87:b8:ac:41:6b:06:22:4d:9d:dc:d8:24:0a:
32:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:53:8D:6B:27:6A:05:84:C7:D7:52:12:5F:FE:F2:22:FB:F5:48
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/mflTjWsnagWEx9dSEl_-8iL79Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
79:e6:1c:6b:e7:42:19:d8:61:3d:53:10:46:dc:27:60:87:0e:
d5:4e:72:40:78:35:92:08:4f:ee:fa:16:80:d7:c4:2f:43:37:
b4:15:c1:7b:13:42:99:38:8c:61:e8:1a:2d:25:40:ba:df:a2:
ec:41:a5:80:e1:75:ad:9a:18:6c:62:9a:8e:22:8a:42:bd:ed:
d0:81:9d:5f:2a:7b:75:b4:d5:ed:14:87:09:58:1e:8d:62:12:
fe:a0:75:eb:9e:82:20:d4:cc:a1:fc:ad:f2:d7:42:b2:d0:83:
e7:d6:65:df:f2:e0:74:b0:6f:0a:d0:c7:7b:a7:90:7f:0b:30:
d8:c3:08:89:02:b7:36:c0:aa:74:14:78:f2:90:2b:85:bc:55:
0f:0a:e2:4a:87:96:30:ac:b5:ba:a8:c0:54:ea:eb:b5:4a:53:
00:ce:7c:23:8c:b8:a4:b7:92:92:c7:59:8b:31:eb:24:43:86:
0f:7e:e5:da:97:71:ea:25:7a:df:13:bc:49:2a:67:16:ce:e3:
0a:4d:cf:55:8f:66:27:b0:cc:39:b6:7a:3d:48:12:77:a2:bd:
d4:a0:75:17:b5:e0:87:5d:9b:a0:df:0b:f4:a5:ee:00:e2:88:
c7:73:e2:1a:07:b0:7f:6c:43:16:43:fd:69:23:f8:56:cc:51:
58:f8:2f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 04:59:38 2024 by rpki-client on console-fra.rpki-client.org