Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ts5EBM3ccwcZoHpM6dy4eo2XA6g.roa
File: ts5EBM3ccwcZoHpM6dy4eo2XA6g.roa (raw, json)
Hash identifier: JJzD1VY7VhsQJyC65EiVwfJ/Dm1sjwk+IpE/gaysisU=
Subject key identifier: B6:CE:44:04:CD:DC:73:07:19:A0:7A:4C:E9:DC:B8:7A:8D:97:03:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019329143481FF65F915B739F55F0D3AD168
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ts5EBM3ccwcZoHpM6dy4eo2XA6g.roa
Signing time: Thu 14 Nov 2024 05:10:10 +0000
ROA not before: Thu 14 Nov 2024 05:10:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214347
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
77.90.29.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Nov 2024 05:09:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:14:34:81:ff:65:f9:15:b7:39:f5:5f:0d:3a:d1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 14 05:10:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6ce4404cddc730719a07a4ce9dcb87a8d9703a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:e9:36:a4:5c:89:3a:84:26:2a:47:e0:ea:
ff:3c:e5:a9:e1:16:0c:1d:b9:5e:cc:b7:76:cc:8a:
9b:d3:a7:9b:80:e9:37:4f:6f:a8:13:50:60:f9:2d:
12:65:14:71:8d:3f:5b:52:ce:49:48:28:dd:04:79:
ff:e7:06:ec:88:75:96:a4:44:45:5f:b2:dd:0b:81:
6f:c9:24:b4:dc:16:23:13:a2:50:57:e1:66:1c:32:
fc:57:8b:c9:08:ef:bf:c4:80:62:c7:6d:96:f2:51:
3d:89:a7:24:e7:32:8f:63:62:69:a0:09:4f:f5:3a:
ef:dd:3b:c0:12:d9:c9:09:c5:9e:31:b7:27:19:8c:
fa:ce:fe:54:aa:39:d9:c0:37:fd:65:7f:f2:c2:3a:
15:f1:95:1a:60:a0:66:7f:a3:0c:e4:bf:37:0c:c3:
4b:7a:56:cc:37:c5:c5:bc:c7:36:40:c1:32:16:b9:
76:77:4a:81:ce:7b:fb:71:b7:53:20:1a:46:ed:98:
58:ed:e9:3d:6e:c4:2a:fa:89:d0:90:5b:01:6f:cd:
e1:6c:2f:80:0b:0e:eb:fe:dc:e1:90:a3:55:ad:5e:
1c:8b:18:d5:e7:31:87:f1:b9:2a:14:3b:67:2b:7b:
09:79:53:9c:28:9e:49:fb:40:e4:88:5a:d2:4e:b7:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:CE:44:04:CD:DC:73:07:19:A0:7A:4C:E9:DC:B8:7A:8D:97:03:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ts5EBM3ccwcZoHpM6dy4eo2XA6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.154.0/24
77.90.29.0/24
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:52:32:00:c6:9f:3e:21:0c:c2:c6:d7:f4:bf:ba:8e:d0:d6:
fc:bd:9c:37:0c:fd:27:73:c2:4b:47:12:61:ab:be:5e:43:49:
fd:e0:fc:d3:79:a3:4d:f3:8e:49:2c:21:bb:03:c4:df:00:48:
c8:8b:5e:e1:5f:06:d2:7e:75:83:7b:79:3f:11:df:6c:50:94:
58:ca:56:c9:fd:f9:77:a9:3e:4a:05:e6:d4:af:5b:f9:51:9f:
1e:a9:de:c5:36:7c:a3:60:5d:12:6f:91:50:86:3f:d1:cd:0c:
90:b6:93:f6:30:39:72:75:cd:c3:19:0e:bc:2a:80:1c:af:5c:
45:d6:3f:f4:43:f6:b1:c2:19:86:b8:b8:53:23:0a:44:fa:d2:
10:98:cb:ae:7a:a4:c0:c1:70:09:2e:14:27:9c:00:f1:d4:b6:
df:ab:7b:21:3c:3c:2a:e6:bf:6b:64:72:a0:31:3e:90:ea:45:
f3:5e:ac:7d:f3:e8:a4:4d:fc:dd:ff:5d:0d:38:41:ca:91:44:
92:87:7f:0c:58:7b:63:d5:b1:9a:ce:d7:d7:d6:98:eb:d0:c7:
6c:0b:20:ef:8c:8e:fc:b9:53:6c:7f:89:6b:ab:58:95:d6:df:
24:ba:bf:ea:0d:03:05:a2:bf:73:1f:48:34:9a:0a:94:1e:73:
c1:55:81:ef
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 16 06:36:35 2024 by rpki-client on console-fra.rpki-client.org