Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tSQKZt2riCbInztXAcpduZ5LQbE.roa
File: tSQKZt2riCbInztXAcpduZ5LQbE.roa (raw, json)
Hash identifier: rs+8JXpZXtzhmh9N6bbhUhUbDPos3ua/EZFSdVMe5Zg=
Subject key identifier: B5:24:0A:66:DD:AB:88:26:C8:9F:3B:57:01:CA:5D:B9:9E:4B:41:B1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01933C1BB9B42B51A09DF059B251AF10AF79
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tSQKZt2riCbInztXAcpduZ5LQbE.roa
Signing time: Sun 17 Nov 2024 21:51:10 +0000
ROA not before: Sun 17 Nov 2024 21:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
5.175.138.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
77.90.55.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
94.249.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 00:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3c:1b:b9:b4:2b:51:a0:9d:f0:59:b2:51:af:10:af:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 17 21:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5240a66ddab8826c89f3b5701ca5db99e4b41b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:9d:d8:6a:e1:cc:f0:06:50:73:52:0a:fd:
fd:47:36:35:4a:d8:31:da:c2:4c:a5:94:39:f9:88:
3a:9d:ec:79:c4:ff:5a:f8:54:34:e6:3c:20:ba:ee:
8c:d4:b4:c8:9d:34:09:1e:20:5d:97:e2:83:c4:65:
82:8d:3e:b9:d6:77:57:9c:f6:45:d2:2c:6f:24:53:
87:fc:4d:7f:76:f3:43:e8:76:3a:a6:4f:da:29:da:
e1:05:9e:27:9a:69:e6:d6:3c:6a:54:27:aa:69:5f:
71:a2:3a:65:93:50:42:38:fa:e4:23:85:ed:01:18:
2f:dd:3f:3c:6b:45:60:5f:e2:e4:7f:5b:3f:26:ae:
25:95:40:da:67:b3:50:1f:1f:64:9f:0c:af:b8:94:
2f:72:4d:49:d2:32:5f:4c:e2:05:a2:1f:55:96:37:
bf:68:73:31:46:58:c6:e9:0a:48:c5:c5:97:09:8b:
70:08:2d:69:8e:70:af:7d:fe:eb:8c:8a:61:a3:e7:
43:16:1b:69:f4:7b:e3:0a:4e:67:f1:b0:f3:04:b9:
09:e9:d4:b1:3c:c9:02:15:65:46:9d:fc:6d:c9:4e:
ad:9f:c4:9c:92:75:d6:6d:b3:30:e0:2c:c7:20:6f:
82:81:47:fe:5e:1f:a3:b1:07:07:d8:a5:bd:35:26:
83:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:24:0A:66:DD:AB:88:26:C8:9F:3B:57:01:CA:5D:B9:9E:4B:41:B1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tSQKZt2riCbInztXAcpduZ5LQbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
5.175.138.0/24
77.90.54.0/23
85.118.162.0/24
87.239.131.0/24
94.249.138.0/24
94.249.148.0/24
Signature Algorithm: sha256WithRSAEncryption
80:1f:5a:74:dc:cc:e4:d6:df:d5:9f:d8:32:a8:2b:ff:b9:9c:
95:53:c5:42:1b:63:49:8d:d2:b6:14:38:1e:b8:c3:85:1c:8e:
79:a5:7a:4f:c7:82:39:b5:27:3b:22:75:c4:56:a0:c1:a3:40:
77:05:6f:1a:5f:b6:74:aa:c0:8c:4d:82:60:2a:d1:d0:df:d6:
92:dd:93:57:fd:89:fe:01:60:cb:42:34:f4:05:25:24:13:db:
9c:39:f6:fa:0f:73:ec:cd:d4:8a:ff:e4:0e:3d:e6:74:73:f5:
24:0c:e1:7b:d4:50:b6:e0:c8:15:ff:86:65:3f:93:ea:b0:7a:
a2:ed:f3:a2:58:9d:ef:25:74:1d:30:55:8d:0d:d0:37:f0:c8:
35:72:ef:40:c4:c5:a7:76:bb:58:12:a7:de:dd:b5:fa:1e:bc:
ed:6e:be:66:d4:cf:5f:13:a9:10:e0:3f:87:36:5b:34:b6:90:
24:ab:e6:e9:0c:7b:c7:43:48:07:68:d5:12:34:97:5e:2c:1f:
c9:bf:fb:fb:b7:cf:aa:38:2a:2b:e0:10:39:4b:c2:02:9e:eb:
7b:93:b6:6f:1d:01:dd:03:c2:25:61:5b:4b:51:2f:47:48:f2:
08:52:1c:a2:0d:a8:f4:57:75:bb:5d:07:38:d3:e9:b4:2b:80:
c9:b9:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:59:58 2024 by rpki-client on console-ams.rpki-client.org