Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sHir3kczll4iNIwB6VBN3p41gc0.roa
File: sHir3kczll4iNIwB6VBN3p41gc0.roa (raw, json)
Hash identifier: VKqshN+fl36z/XgjZKnqEMECgTs0SpwOb4btSy7Rx2U=
Subject key identifier: B0:78:AB:DE:47:33:96:5E:22:34:8C:01:E9:50:4D:DE:9E:35:81:CD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192C3826B6841B46FF7CD59A9D3061782CB
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sHir3kczll4iNIwB6VBN3p41gc0.roa
Signing time: Fri 25 Oct 2024 11:49:17 +0000
ROA not before: Fri 25 Oct 2024 11:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.129.0/24 maxlen: 24
5.83.134.0/24 maxlen: 24
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.136.0/24 maxlen: 24
5.175.139.0/24 maxlen: 24
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.25.0/24 maxlen: 24
5.231.26.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.45.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sat 26 Oct 2024 04:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:82:6b:68:41:b4:6f:f7:cd:59:a9:d3:06:17:82:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 11:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b078abde4733965e22348c01e9504dde9e3581cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7d:13:70:28:d7:3d:33:24:6e:86:62:a9:c1:
bd:8a:d1:e3:6e:5c:a3:17:77:22:b0:94:bd:a4:66:
50:69:21:ce:dd:ff:22:9d:b7:1f:70:8c:4e:63:5a:
65:39:0d:b9:9c:e6:88:e5:9a:1d:53:ed:5b:8f:75:
7a:48:1d:3c:10:5a:6b:2a:67:7f:8a:18:da:a8:3e:
ac:2a:e8:69:75:0e:ba:aa:cb:14:94:30:75:10:21:
33:b4:7d:67:60:74:de:99:bf:e8:92:03:b2:73:dd:
3b:27:09:1d:17:17:41:b7:a9:c7:65:fa:e3:07:10:
eb:cb:b9:82:02:1b:ce:c2:2c:02:d3:13:9b:50:23:
a4:88:80:c2:c2:76:12:24:94:fd:be:84:42:ed:41:
9c:b8:42:aa:47:02:aa:28:62:85:a0:c9:b6:33:2f:
62:33:ac:d0:5c:5f:b8:30:d3:4a:68:e0:bd:cd:5b:
da:9f:12:4d:df:b8:e1:67:d2:f5:50:b6:54:0f:94:
d2:11:fa:c0:36:0e:01:f7:b9:6a:f4:05:93:0f:5c:
7f:03:67:96:b3:71:42:51:81:3c:7d:c1:43:fc:82:
0a:d5:c7:88:e3:90:03:70:01:6c:e7:27:5b:ee:9b:
a1:b3:c5:8e:22:d6:cb:6d:96:49:c5:06:0a:3a:2e:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:78:AB:DE:47:33:96:5E:22:34:8C:01:E9:50:4D:DE:9E:35:81:CD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/sHir3kczll4iNIwB6VBN3p41gc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:77:0c:8b:ea:00:2f:18:76:ea:87:1b:b7:7d:aa:ab:49:ce:
c6:a2:4d:9d:5e:ce:cd:21:c0:78:36:53:35:b6:45:f7:8d:74:
7e:4d:1c:06:aa:db:4b:6a:5b:b1:1c:d2:9b:89:a1:a6:a4:5e:
e4:59:5b:dc:42:ca:54:b7:df:15:e3:ba:90:1a:d9:14:84:07:
98:1b:be:87:e4:02:c0:74:04:5c:cf:4d:48:85:f3:b1:de:36:
cc:13:74:d3:e5:b3:08:75:5d:3d:19:91:a4:98:72:b0:a0:21:
48:13:52:1b:52:8c:d1:66:da:94:a1:6a:fa:f9:26:7a:b6:33:
31:77:15:ce:3f:90:c3:4a:d7:a8:3b:da:46:7a:40:cc:17:2b:
fd:70:d4:99:c1:fc:16:dc:a8:25:50:b3:cd:b0:e6:72:5b:ce:
6c:db:47:68:61:de:e4:c4:5e:e9:37:68:91:7b:83:2d:e1:95:
ca:d4:d6:74:0e:12:60:1c:a5:b9:e8:bd:a6:76:8f:bc:f0:4f:
66:8f:66:74:2f:52:de:0f:93:0b:1c:ee:57:1f:72:b3:e3:11:
c8:4f:89:81:1c:29:56:c1:f4:09:ce:d6:da:d5:a6:c3:d4:06:
13:bb:98:c4:37:17:e0:e3:80:4d:7a:54:1b:14:d9:b5:a8:79:
3b:3e:bc:55
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZLDgmtoQbRv981ZqdMGF4LLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDI1MTE0OTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDc4YWJkZTQ3MzM5NjVlMjIzNDhjMDFlOTUwNGRkZTllMzU4MWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn0TcCjXPTMkboZiqcG9itHjblyj
F3cisJS9pGZQaSHO3f8inbcfcIxOY1plOQ25nOaI5ZodU+1bj3V6SB08EFprKmd/
ihjaqD6sKuhpdQ66qssUlDB1ECEztH1nYHTemb/okgOyc907JwkdFxdBt6nHZfrj
BxDry7mCAhvOwiwC0xObUCOkiIDCwnYSJJT9voRC7UGcuEKqRwKqKGKFoMm2My9i
M6zQXF+4MNNKaOC9zVvanxJN37jhZ9L1ULZUD5TSEfrANg4B97lq9AWTD1x/A2eW
s3FCUYE8fcFD/IIK1ceI45ADcAFs5ydb7puhs8WOItbLbZZJxQYKOi5CjQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLB4q95HM5ZeIjSMAelQTd6eNYHNMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvc0hpcjNrY3psbDRpTkl3QjZWQk4zcDQxZ2MwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHEBggrBgEFBQcBBwEB/wSBtDCBsTB9BAIAATB3AwQFBVOA
AwQHBa+AAwMBBeYDBAZNWgADBANT81ADBAVVXQADBANVdqADBANX74ADBAVZakAD
BAZZkAADBAReZ6ADBAde+YADBAJf1yADBASyEpADBAK5DZwDBAG5L4wDBAC5eUcD
BADBHPsDBAHDbg4DBATZRaAwMAQCAAIwKgMFAyoAEtgDBQMqABnQAwUAKgDNwAMF
AyoBvUADBQMqAgegAwUDKgIvwDANBgkqhkiG9w0BAQsFAAOCAQEAVXcMi+oALxh2
6ocbt32qq0nOxqJNnV7OzSHAeDZTNbZF9410fk0cBqrbS2pbsRzSm4mhpqRe5Flb
3ELKVLffFeO6kBrZFIQHmBu+h+QCwHQEXM9NSIXzsd42zBN00+WzCHVdPRmRpJhy
sKAhSBNSG1KM0WbalKFq+vkmerYzMXcVzj+Qw0rXqDvaRnpAzBcr/XDUmcH8Ftyo
JVCzzbDmclvObNtHaGHe5MRe6TdokXuDLeGVytTWdA4SYByluei9pnaPvPBPZo9m
dC9S3g+TCxzuVx9ys+MRyE+JgRwpVsH0Cc7W2tWmw9QGE7uYxDcX4OOATXpUGxTZ
tah5Oz68VQ==
-----END CERTIFICATE-----
Generated at Sat Oct 26 06:12:37 2024 by rpki-client on console-ams.rpki-client.org