Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/peInS9MVY2RK8sk0sqpO_1V8NeY.roa
File: peInS9MVY2RK8sk0sqpO_1V8NeY.roa (raw, json)
Hash identifier: AP9IFRaQUXz73M1loybTIqYJymXaA2ZG95/pu+Fgju0=
Subject key identifier: A5:E2:27:4B:D3:15:63:64:4A:F2:C9:34:B2:AA:4E:FF:55:7C:35:E6
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0193219F53A0CE95F9182302FAC487A20F19
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/peInS9MVY2RK8sk0sqpO_1V8NeY.roa
Signing time: Tue 12 Nov 2024 18:25:09 +0000
ROA not before: Tue 12 Nov 2024 18:25:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Thu 14 Nov 2024 05:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:21:9f:53:a0:ce:95:f9:18:23:02:fa:c4:87:a2:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 12 18:25:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5e2274bd31563644af2c934b2aa4eff557c35e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:12:a7:21:7a:2b:e6:aa:b7:d5:e4:fa:f4:84:
d4:19:89:ad:8c:72:20:88:53:a0:05:b8:ed:83:4d:
48:f7:8f:8d:83:da:bf:c7:e4:1f:a7:01:46:67:58:
0f:6b:55:1d:c7:0f:7f:68:e3:d5:d8:7f:02:ae:96:
cb:c2:36:f6:49:6d:4d:44:11:ad:b6:54:31:82:b9:
64:44:e9:10:f7:7a:08:cc:fe:da:b2:9e:0b:7f:d6:
c1:0c:d1:03:fe:2a:67:b9:b3:b0:9d:7a:62:2b:ca:
d0:02:01:40:a0:74:62:b3:53:3c:37:7f:69:31:1f:
ff:e2:77:87:92:32:a7:bc:27:03:91:05:27:2f:af:
fe:c0:8b:c1:01:26:28:72:92:ab:5b:7f:6b:48:f6:
fe:7c:0f:b3:df:a7:19:4c:2d:eb:25:6b:7a:e6:6c:
b4:ca:63:29:ba:1e:47:a3:35:ea:2f:29:42:b0:88:
a7:62:2f:9e:4f:76:4d:a3:93:d6:4d:ea:37:e4:ea:
3b:5e:63:14:39:ef:de:5a:db:83:c3:34:81:62:0c:
4a:86:df:68:41:14:37:6a:b9:7e:c0:32:5f:87:c7:
a6:53:11:bb:97:8c:80:15:9a:18:d7:a9:95:1e:eb:
09:94:e8:a5:d8:24:ba:31:a6:30:d5:d1:59:e4:89:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E2:27:4B:D3:15:63:64:4A:F2:C9:34:B2:AA:4E:FF:55:7C:35:E6
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/peInS9MVY2RK8sk0sqpO_1V8NeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:59:67:83:87:f2:1a:5a:9e:a7:33:87:64:2b:b6:5f:cc:8e:
68:b5:c7:7d:42:be:b4:ef:c4:b9:43:e6:7e:8c:99:2c:20:3a:
35:3e:5d:52:ae:28:3f:a3:2c:c3:7f:8a:7b:22:a9:bb:42:18:
8d:67:90:1b:af:42:04:49:4f:5e:14:7f:33:91:d0:7b:98:07:
52:c9:14:61:f1:ea:cf:f9:eb:e4:d9:66:34:a8:77:52:c9:24:
8f:2c:79:89:74:85:d2:7a:18:2d:9c:d6:50:cf:5d:45:12:73:
be:ac:b3:37:e5:4f:57:75:af:08:a8:c2:2e:7a:00:fe:9d:58:
2d:6d:d0:36:8d:7d:af:d5:10:3d:2f:fb:d1:62:71:72:b4:9c:
e3:45:fb:5f:23:18:17:d4:5a:e6:79:3c:e5:85:be:24:14:bc:
50:df:ad:ac:6f:fb:bb:80:7a:ba:e7:b1:0e:96:aa:72:d3:25:
b8:60:8f:e4:ff:83:07:48:8a:12:31:a5:18:b9:11:ae:91:3c:
49:83:e5:d0:0c:a6:01:f8:af:28:46:27:3a:69:e0:f4:c6:86:
c8:c3:1b:4e:b3:bc:f9:fc:27:92:50:5a:d5:51:48:d4:03:db:
57:92:53:b4:16:c0:20:5a:74:1f:e8:44:13:09:89:3c:d6:05:
02:a4:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 06:09:44 2024 by rpki-client on console-ams.rpki-client.org