Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tnhOv2cJ7gFrd0Vl8emblErILcQ.roa
File: tnhOv2cJ7gFrd0Vl8emblErILcQ.roa (raw, json)
Hash identifier: nXrpbJh3JDVQnQXGV2uqdfavhCFWvx+oof98qdSm/58=
Subject key identifier: B6:78:4E:BF:67:09:EE:01:6B:77:45:65:F1:E9:9B:94:4A:C8:2D:C4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191D305DD8C6567509F122B255DCA563EDD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tnhOv2cJ7gFrd0Vl8emblErILcQ.roa
Signing time: Sun 08 Sep 2024 19:04:22 +0000
ROA not before: Sun 08 Sep 2024 19:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/19 maxlen: 32
5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.83.156.0/24 maxlen: 24
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
77.90.29.0/24 maxlen: 24
77.90.30.0/24 maxlen: 24
77.90.31.0/24 maxlen: 24
77.90.35.0/24 maxlen: 24
77.90.36.0/24 maxlen: 24
77.90.37.0/24 maxlen: 24
77.90.38.0/24 maxlen: 24
77.90.40.0/24 maxlen: 24
77.90.41.0/24 maxlen: 24
77.90.42.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
77.90.45.0/24 maxlen: 24
77.90.46.0/24 maxlen: 24
77.90.47.0/24 maxlen: 24
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
87.239.131.0/24 maxlen: 24
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
94.249.138.0/24 maxlen: 24
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Mon 09 Sep 2024 04:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d3:05:dd:8c:65:67:50:9f:12:2b:25:5d:ca:56:3e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 8 19:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6784ebf6709ee016b774565f1e99b944ac82dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1f:b6:fe:5a:fe:30:a5:06:fa:02:f7:8f:96:
08:98:0f:73:da:09:d6:fa:c0:12:89:a1:a6:80:cb:
e1:5c:d9:51:4f:70:40:3f:83:df:e4:5f:8f:90:9f:
08:4e:61:f3:c1:65:b1:a8:70:0b:92:4a:31:72:25:
03:e1:18:1b:8f:6e:99:93:72:30:69:6c:0a:0c:f6:
f9:1e:b0:63:c3:1a:01:e8:ac:15:30:55:f3:f7:bf:
73:87:91:97:f5:58:d0:7c:a8:09:de:4b:55:85:60:
3b:62:79:e3:f8:50:08:5c:92:ac:33:8f:b5:0e:fc:
a2:c7:ea:45:ed:09:42:46:a7:05:7b:cb:5c:71:6e:
cf:1c:74:56:14:39:0a:7f:65:4c:c6:0b:df:4f:8c:
11:a6:64:ce:77:86:70:95:d2:3c:2a:78:df:2f:24:
42:20:87:11:da:c0:a0:c4:f3:b9:cb:be:1e:d7:20:
bd:d6:67:1a:59:33:d2:4c:3b:91:f3:8a:b5:49:da:
46:a9:fa:5f:07:56:d6:40:da:4e:5a:c2:10:4a:2b:
dc:39:8e:cb:11:d8:01:5d:83:d9:57:84:aa:63:8f:
e1:47:77:10:67:2f:77:4c:38:30:77:6a:8b:87:1c:
e5:8f:ec:1c:51:71:aa:87:a2:e6:39:57:55:35:ea:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:78:4E:BF:67:09:EE:01:6B:77:45:65:F1:E9:9B:94:4A:C8:2D:C4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/tnhOv2cJ7gFrd0Vl8emblErILcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/19
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
56:40:71:31:05:76:be:d2:a0:cc:41:6b:af:b3:47:d4:d4:f6:
44:77:f3:56:07:42:e3:ec:db:fc:fb:be:b1:12:68:21:4d:70:
bf:b1:e3:38:07:66:44:8c:04:12:78:57:4a:db:a8:31:22:24:
c0:50:8f:f1:00:8d:ce:a4:55:f6:e5:02:a7:4d:45:ab:8b:a9:
00:4d:67:8c:f0:7d:92:b3:db:39:42:1a:75:d3:73:86:5f:24:
2b:02:3a:d4:43:32:56:a2:c1:9e:2c:9d:83:fb:59:44:60:ce:
61:a6:8f:1f:9f:a6:6c:ff:8a:07:43:26:96:e7:7c:e6:68:b5:
3c:3b:12:61:a9:c2:e8:61:78:a0:dc:c2:b3:8c:e2:62:7a:22:
3f:da:f5:b9:cf:44:18:f7:cc:86:d1:9b:54:ec:0f:14:0e:75:
37:84:68:1c:7d:e7:a0:56:cf:ca:71:23:a3:a3:8b:8f:fa:0e:
5a:48:7a:dd:44:4b:f0:27:fa:60:52:58:b9:c8:db:c4:da:54:
4d:b5:47:cf:85:85:8e:82:f9:11:1f:19:a9:39:95:c0:22:94:
d9:9c:7b:a4:ab:a2:6a:02:15:a2:c3:f6:c7:45:71:8b:f1:4f:
f7:15:02:a2:76:9e:03:b5:e6:96:29:8b:7a:b7:d0:7f:cf:65:
c2:7b:9c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 05:19:31 2024 by rpki-client on console-fra.rpki-client.org