Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r0IQKt0Pqz4_PT8B8Aafh3mc6G0.roa
File: r0IQKt0Pqz4_PT8B8Aafh3mc6G0.roa (raw, json)
Hash identifier: ToSf5sL+aE0psvMmNNH4HWCHLgzjvjCK6mJGY3j8Ucg=
Subject key identifier: AF:42:10:2A:DD:0F:AB:3E:3F:3D:3F:01:F0:06:9F:87:79:9C:E8:6D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191972F43385CDAFD8D3C4E2B08EF7C2174
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r0IQKt0Pqz4_PT8B8Aafh3mc6G0.roa
Signing time: Wed 28 Aug 2024 04:12:22 +0000
ROA not before: Wed 28 Aug 2024 04:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.83.157.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.28.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Wed 28 Aug 2024 11:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:2f:43:38:5c:da:fd:8d:3c:4e:2b:08:ef:7c:21:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 28 04:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af42102add0fab3e3f3d3f01f0069f87799ce86d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:86:de:b5:d8:7f:0e:ba:d6:94:8c:60:fc:20:
df:b5:ba:8b:7f:d9:51:22:33:39:1d:80:55:3d:f3:
47:ce:f3:24:73:a3:89:a6:1a:b8:bf:74:ee:ff:fe:
54:50:7c:df:57:94:57:38:0e:df:7a:10:3a:5c:d6:
91:37:d2:ef:e1:ea:ff:a6:26:87:9d:0d:af:4e:7d:
57:58:92:92:aa:ed:aa:19:9a:3d:8c:37:04:d3:5d:
b2:c6:e5:0e:15:eb:80:7c:3a:d4:5e:66:1b:57:49:
27:2f:9d:30:2c:0a:2c:f4:38:68:84:7d:be:f1:56:
cb:f2:61:73:b1:27:3e:a6:28:f3:22:4e:67:95:40:
65:9f:3a:e4:98:cf:af:c8:26:3f:54:5b:76:40:ab:
58:e8:80:89:32:7d:ab:e4:26:a8:d7:ee:26:6b:0d:
74:dc:b4:75:b7:19:fc:86:16:f0:69:35:08:3f:0b:
c0:4c:fd:e4:f8:cc:9f:95:d4:29:a7:2e:10:97:d0:
ed:e1:40:95:47:1a:de:c5:17:7a:5f:07:43:5e:24:
56:a1:bb:74:ef:fe:06:12:98:26:d0:3d:9c:38:54:
3b:ce:08:64:00:f2:06:12:08:1f:6c:31:b6:27:f9:
f6:ee:ca:d6:85:ba:9a:66:68:33:be:87:7c:cd:50:
73:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:10:2A:DD:0F:AB:3E:3F:3D:3F:01:F0:06:9F:87:79:9C:E8:6D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/r0IQKt0Pqz4_PT8B8Aafh3mc6G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
03:0c:5e:65:28:9b:04:8c:96:1a:2d:1b:f9:97:45:73:06:70:
99:3b:95:d6:07:67:58:76:93:02:83:8c:43:ee:59:0e:90:46:
00:c6:8a:96:d1:47:4d:8a:52:f2:c5:39:f7:1c:bd:ae:55:ae:
70:06:53:f0:cf:36:23:0a:ae:a6:63:86:73:1d:d0:60:0a:54:
2c:06:2c:bf:ed:ae:72:16:84:d9:31:a3:66:b1:d2:ba:1f:76:
7d:cf:d8:c3:72:5c:ee:de:7b:d0:0a:ed:b5:ac:eb:82:09:2e:
4a:fc:eb:4d:df:47:09:7b:77:9b:48:1d:34:11:9c:70:0c:76:
ee:e2:95:7f:26:eb:19:cc:f5:97:25:a1:f0:18:8d:4b:54:58:
cb:82:66:8c:ef:0e:1a:af:3b:9e:b3:00:0f:c7:75:9b:73:fa:
ee:fa:b6:b3:10:81:17:35:60:dc:ff:3e:3f:a8:37:4f:7d:5a:
af:78:1a:f5:87:d3:49:1c:4f:39:39:52:2b:4c:f5:76:ca:f1:
41:7c:ea:eb:da:b5:92:28:93:d0:10:b6:42:09:66:15:83:04:
6a:8d:d7:1f:23:bf:bc:73:47:41:9c:e1:87:21:1e:aa:16:d9:
83:0e:14:af:10:94:96:8a:9e:07:18:b3:74:0b:4b:9e:8d:80:
f9:85:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 14:17:30 2024 by rpki-client on console-ams.rpki-client.org