Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/svm_8bRqY8nTBvdJUzY7g4ZeRyY.roa
File: svm_8bRqY8nTBvdJUzY7g4ZeRyY.roa (raw, json)
Hash identifier: 41+yWqAJCUi7ze2+QTqOOQP2cA6kqHEUvBcUcKjvQzk=
Subject key identifier: B2:F9:BF:F1:B4:6A:63:C9:D3:06:F7:49:53:36:3B:83:86:5E:47:26
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01933360019CEE607274E3EE64DB4BB29EAC
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/svm_8bRqY8nTBvdJUzY7g4ZeRyY.roa
Signing time: Sat 16 Nov 2024 05:09:10 +0000
ROA not before: Sat 16 Nov 2024 05:09:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
5.83.156.0/24 maxlen: 24
5.175.128.0/24 maxlen: 32
5.175.129.0/24 maxlen: 32
5.175.130.0/24 maxlen: 32
5.175.131.0/24 maxlen: 32
5.175.133.0/24 maxlen: 32
5.175.218.0/24 maxlen: 32
5.175.219.0/24 maxlen: 32
5.175.220.0/24 maxlen: 32
5.175.225.0/24 maxlen: 32
5.175.226.0/24 maxlen: 32
5.175.227.0/24 maxlen: 32
5.175.228.0/24 maxlen: 32
5.175.229.0/24 maxlen: 32
5.175.230.0/24 maxlen: 32
5.175.231.0/24 maxlen: 32
5.175.232.0/24 maxlen: 32
5.175.235.0/24 maxlen: 32
5.175.240.0/24 maxlen: 32
5.175.241.0/24 maxlen: 32
5.175.242.0/24 maxlen: 32
5.175.243.0/24 maxlen: 32
5.175.244.0/24 maxlen: 32
5.175.251.0/24 maxlen: 32
5.175.252.0/24 maxlen: 32
5.175.253.0/24 maxlen: 32
5.175.254.0/24 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.24.0/24 maxlen: 24
5.231.70.0/24 maxlen: 24
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.20.0/24 maxlen: 24
77.90.58.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Sun 17 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:33:60:01:9c:ee:60:72:74:e3:ee:64:db:4b:b2:9e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 16 05:09:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b2f9bff1b46a63c9d306f74953363b83865e4726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:11:73:1c:44:17:f6:20:6d:ed:4e:ba:18:
da:c6:3b:a9:36:b5:36:1d:9f:c0:1d:f6:16:79:6f:
60:fe:ae:df:df:05:04:f0:a8:a3:15:a0:15:3f:c4:
f2:94:29:e6:de:7a:63:c4:ab:3e:95:6e:91:7c:38:
b8:ce:b2:63:99:20:44:8c:45:2e:37:f3:37:20:f9:
52:2f:e4:96:3e:40:2e:86:7a:f8:19:d8:39:de:73:
5b:c1:a5:aa:71:95:55:95:cd:ea:af:e4:90:b4:25:
f2:2c:38:98:30:c9:59:45:9d:b7:04:91:cd:25:03:
b0:84:54:32:4f:28:5e:40:d6:cb:6b:79:b4:3f:bb:
14:49:86:b0:73:e5:18:a5:a1:7c:82:72:c0:00:d9:
da:f5:dd:e0:90:7d:21:78:bb:72:f4:f7:cd:4b:61:
f5:f0:95:bd:b8:81:df:86:31:83:2f:fa:93:5c:1d:
ca:19:13:ca:fb:89:f9:43:a4:a2:e3:5b:70:7e:87:
9c:22:4c:84:c7:6c:ea:d8:40:34:7d:76:99:e0:02:
c0:4c:cb:53:1b:58:f7:ec:0c:0f:f7:63:ba:9a:9b:
d0:3b:9f:cf:87:b2:69:9b:58:75:8e:31:c9:a9:e4:
17:f4:dc:bf:e7:0d:2f:c3:f0:b6:a2:39:c8:8c:8e:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F9:BF:F1:B4:6A:63:C9:D3:06:F7:49:53:36:3B:83:86:5E:47:26
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/svm_8bRqY8nTBvdJUzY7g4ZeRyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/22
5.175.133.0/24
5.175.218.0-5.175.220.255
5.175.225.0-5.175.232.255
5.175.235.0/24
5.175.240.0-5.175.244.255
5.175.251.0-5.175.255.255
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:29:6f:81:4c:d3:eb:62:17:2e:b0:ed:f5:c4:5c:16:03:5e:
49:25:62:b2:0e:ad:58:87:58:b2:f1:7b:1e:cf:76:e2:07:45:
cd:8c:6c:7e:e7:c8:2b:3f:1f:57:92:52:46:fa:39:3d:77:f3:
da:47:3c:26:2d:62:f5:c1:f6:1d:0f:83:aa:86:62:9f:ad:af:
7d:a1:d1:62:fd:dc:4e:21:82:88:ad:74:6e:55:4a:75:d5:e2:
69:fd:dc:d6:b9:9c:e9:a5:91:89:1d:41:e0:af:0c:93:83:d5:
d4:35:b2:09:2c:f1:77:33:5e:61:b5:ca:f6:41:44:1c:97:61:
1e:93:e6:db:e6:4a:11:c8:bb:47:f0:81:20:2d:ee:2e:8c:54:
3d:a6:ce:64:4b:7b:da:56:14:af:31:6e:f0:0b:93:31:90:7f:
7b:c8:86:1d:92:96:86:10:7d:a6:56:27:90:f7:c0:8f:20:ce:
85:09:25:60:60:f9:6f:70:45:a3:e8:11:25:3b:f5:85:5d:5d:
92:96:84:e6:9c:f0:8d:81:7d:eb:58:cd:fb:31:83:d9:0f:21:
c5:4c:95:95:85:98:b8:9f:80:1a:b7:15:f1:c7:1c:f5:04:44:
24:3f:28:cb:b6:24:57:93:9b:d8:ec:96:1f:df:19:20:e5:a7:
5c:3a:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 17 07:05:06 2024 by rpki-client on console-fra.rpki-client.org