Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rsJt0jvminNPlqDQhf8pAfMVDTM.roa
File: rsJt0jvminNPlqDQhf8pAfMVDTM.roa (raw, json)
Hash identifier: HPGC0bfkVhmR+K6xw15cnrk4YozNKmV7c357xGytx3g=
Subject key identifier: AE:C2:6D:D2:3B:E6:8A:73:4F:96:A0:D0:85:FF:29:01:F3:15:0D:33
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01930E655305E2F6DE1E758A5143891A69F5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rsJt0jvminNPlqDQhf8pAfMVDTM.roa
Signing time: Sat 09 Nov 2024 00:49:01 +0000
ROA not before: Sat 09 Nov 2024 00:49:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.29.0/24 maxlen: 24
5.231.31.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 09 Nov 2024 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0e:65:53:05:e2:f6:de:1e:75:8a:51:43:89:1a:69:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 9 00:49:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aec26dd23be68a734f96a0d085ff2901f3150d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:8d:f6:e5:08:d4:51:88:24:f9:8c:c9:9f:
59:26:11:69:ce:39:c1:32:82:ea:2a:0b:25:37:99:
98:52:45:53:bf:14:10:9d:d8:ec:0e:22:08:c8:0f:
55:fa:c8:4f:bb:2e:d5:03:35:7f:93:ae:67:86:c5:
da:39:8e:f8:6a:36:a1:4e:71:f7:b3:6e:0a:7f:dc:
f3:12:c5:90:18:10:04:49:76:40:71:f2:fa:09:5f:
7a:2b:3e:a2:d2:d6:fd:d0:f2:10:06:e9:3d:7d:ff:
77:43:ab:28:ad:80:b6:e3:86:a4:a8:67:03:2b:0b:
9b:1e:22:69:0c:12:d6:68:db:a7:8c:6c:83:5d:d4:
4b:69:cd:64:1f:d0:f7:50:d6:61:a8:54:d7:c6:a9:
65:12:06:e5:6a:16:d2:e5:f3:99:7b:8f:1c:64:19:
8a:bb:91:0a:f3:5d:18:35:2c:69:5e:f5:e1:70:1d:
2b:17:30:a6:59:de:33:fa:d4:08:88:2b:36:07:7e:
27:88:ef:cd:9d:72:5c:af:f8:54:7a:a1:84:24:47:
ce:7f:5f:d3:0d:3f:67:8e:b4:61:4d:a4:0d:a1:e7:
0a:d9:dc:2d:f1:16:20:b1:d1:f2:89:70:c3:16:4e:
d0:4f:da:0c:de:ad:b4:85:21:b0:0a:45:62:26:8a:
dd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C2:6D:D2:3B:E6:8A:73:4F:96:A0:D0:85:FF:29:01:F3:15:0D:33
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/rsJt0jvminNPlqDQhf8pAfMVDTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a6:da:28:52:7b:08:f5:e2:0e:dd:c0:b6:4d:14:28:34:82:a9:
79:4b:c7:03:2f:83:58:fe:02:27:c4:a7:35:11:c5:87:13:c8:
a1:66:58:bc:e9:5d:a2:99:74:6a:01:ac:90:6d:02:b0:27:0b:
66:00:5d:ac:25:30:17:16:e7:d8:e0:02:ca:9c:b5:e9:62:ae:
a2:7b:06:54:0b:8f:9c:67:ca:5f:02:6d:62:f1:89:92:4f:ea:
cc:ea:41:d6:d4:7c:3d:b2:3d:50:d0:6f:7a:bc:44:1b:26:e2:
8f:ff:e0:16:b3:40:05:d0:49:f2:24:1b:d3:6b:a5:cf:8e:78:
a0:98:02:3c:5b:0e:e5:11:4a:0d:83:11:c0:2a:fd:5e:17:94:
aa:0e:6f:5b:cc:24:8b:63:78:27:af:27:da:11:73:01:e3:08:
bb:cd:a4:b6:b1:56:a5:92:e8:76:0d:cd:ac:a1:54:b7:fa:28:
34:10:9f:30:5a:c7:c1:89:65:6e:62:a5:11:25:9d:de:a2:c9:
17:b3:92:bd:99:6d:86:93:a6:af:3a:fe:47:89:f5:66:cd:a4:
b9:a2:79:41:6f:f5:82:fe:a7:2e:ae:c0:19:0f:4a:36:06:96:
30:f6:77:82:e2:62:fa:8b:5b:33:61:22:52:b5:10:1a:29:b8:
04:89:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:53:15 2024 by rpki-client on console-ams.rpki-client.org