Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-46IzB-Fv8ZSmEwT54ccYApAyY.roa
File: p-46IzB-Fv8ZSmEwT54ccYApAyY.roa (raw, json)
Hash identifier: eyYOzWhFed96EAm77T759f+k10pA06BF3rt/lbsf10c=
Subject key identifier: A7:EE:3A:23:30:7E:16:FF:19:4A:61:30:4F:9E:1C:71:80:29:03:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193388DB00D19CA121D77C7E165D715A16B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-46IzB-Fv8ZSmEwT54ccYApAyY.roa
Signing time: Sun 17 Nov 2024 05:17:09 +0000
ROA not before: Sun 17 Nov 2024 05:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sun 17 Nov 2024 21:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:38:8d:b0:0d:19:ca:12:1d:77:c7:e1:65:d7:15:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 17 05:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7ee3a23307e16ff194a61304f9e1c7180290326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:a2:92:df:30:73:91:7e:0c:74:6d:28:9e:
81:7b:90:d9:11:3f:20:3d:fe:c0:07:3d:a1:46:0c:
a3:b9:9f:5b:da:c2:ce:86:ce:6d:92:68:62:0e:38:
1d:6e:de:57:d2:3e:bd:a1:5a:67:be:a6:85:b3:e8:
0b:42:13:a6:be:c2:f9:4c:ed:df:70:20:2e:85:0b:
31:30:f9:03:f9:32:b5:67:fc:42:14:b4:9b:cd:ce:
e6:f9:ca:57:6c:8a:0b:ed:70:1b:35:50:5d:0d:a8:
c0:e3:29:d0:b1:92:cc:5b:a0:16:d8:ec:ed:24:c1:
da:4e:8f:8e:06:83:34:be:a7:07:8f:ba:2a:37:6b:
25:74:a1:3f:04:7d:d6:db:30:95:12:c1:f4:a4:a2:
71:ac:74:8c:9f:2d:57:cf:da:f5:27:7c:10:d6:26:
c0:de:c8:ae:83:33:08:c1:3a:46:da:14:52:2d:e7:
3f:e2:1a:e7:34:6b:49:5b:d0:33:87:52:9f:d0:17:
e0:b2:40:bb:6b:ae:48:9a:79:ee:a3:64:c7:16:53:
75:c4:b5:88:43:02:5f:7f:43:8e:de:d6:18:47:62:
0b:35:a9:82:bd:20:a6:98:a4:ad:47:bd:d0:26:ae:
e0:e5:86:c8:b9:86:c6:1b:25:32:a8:77:b3:a5:5b:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:3A:23:30:7E:16:FF:19:4A:61:30:4F:9E:1C:71:80:29:03:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/p-46IzB-Fv8ZSmEwT54ccYApAyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:92:67:5d:a1:b7:c2:56:67:5a:59:99:28:57:db:81:fe:d3:
d2:27:e5:62:c0:b2:b8:49:86:75:cb:3e:2b:62:a2:d8:d0:f7:
3a:3b:b0:b7:94:b0:c8:47:c8:15:17:32:86:57:2e:7f:14:fc:
48:75:6e:52:59:5d:4e:c4:ec:6e:b4:6a:6a:22:b0:3d:e9:86:
14:26:d1:e1:dd:28:ba:53:dc:01:a0:32:4a:18:1b:60:cb:89:
e0:e3:8c:06:06:47:52:2f:74:ad:b2:34:d6:78:94:97:32:f8:
8c:09:c2:f1:d2:fa:ce:27:a8:ba:1e:27:19:3e:79:01:8c:7b:
49:a2:7a:1e:2f:e6:29:e7:0a:17:45:7c:b9:d3:39:47:96:ea:
6e:81:48:8e:8b:06:56:94:f8:fa:ae:38:35:5f:2a:0b:12:e2:
65:76:20:b6:3d:ec:30:5e:5d:02:69:f6:c6:12:24:c6:88:bc:
4b:42:79:38:08:ee:07:37:22:9a:7e:b4:ab:73:50:38:db:64:
78:50:bb:ea:e0:55:61:ab:a8:a3:fc:25:c6:c9:9a:24:f4:fa:
a5:bd:b2:ba:7d:40:70:72:db:3f:58:6c:62:26:a0:12:4d:83:
46:84:87:7d:06:93:73:5d:22:ae:5a:e7:25:47:67:23:69:c4:
af:79:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 01:41:56 2024 by rpki-client on console-ams.rpki-client.org