Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buz7-eaWvKMHBELizevbbcrkBuQ.roa
File: buz7-eaWvKMHBELizevbbcrkBuQ.roa (raw, json)
Hash identifier: 34pzd5eJF+38GHSfTNiLCITvjmLRflNuB6Pom+Gv2BI=
Subject key identifier: 6E:EC:FB:F9:E6:96:BC:A3:07:04:42:E2:CD:EB:DB:6D:CA:E4:06:E4
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018F2D34230DB187FBDEA7F0862E2CF7B7A2
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buz7-eaWvKMHBELizevbbcrkBuQ.roa
Signing time: Tue 30 Apr 2024 04:12:22 +0000
ROA not before: Tue 30 Apr 2024 04:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 5.83.128.0/20 maxlen: 32
5.83.151.0/24 maxlen: 32
5.175.128.0/17 maxlen: 32
5.175.255.0/24 maxlen: 32
5.230.0.0/15 maxlen: 32
5.230.6.0/24 maxlen: 32
5.230.11.0/24 maxlen: 32
5.230.102.0/24 maxlen: 32
5.230.224.0/24 maxlen: 32
5.231.233.0/24 maxlen: 32
77.90.0.0/18 maxlen: 32
83.243.80.0/21 maxlen: 32
85.93.0.0/19 maxlen: 32
85.93.20.0/24 maxlen: 32
85.118.160.0/21 maxlen: 32
87.239.128.0/21 maxlen: 32
89.106.64.0/19 maxlen: 32
89.144.0.0/18 maxlen: 32
94.103.160.0/20 maxlen: 32
94.249.128.0/17 maxlen: 32
95.215.32.0/22 maxlen: 32
178.18.144.0/20 maxlen: 32
178.18.151.0/24 maxlen: 32
185.13.156.0/22 maxlen: 32
185.47.140.0/24 maxlen: 32
185.47.141.0/24 maxlen: 32
185.121.71.0/24 maxlen: 32
193.28.251.0/24 maxlen: 32
195.110.14.0/23 maxlen: 32
217.69.160.0/20 maxlen: 32
2a00:12d8::/29 maxlen: 128
2a00:19d0::/29 maxlen: 128
2a00:cdc0::/32 maxlen: 128
2a01:bd40::/29 maxlen: 128
2a02:7a0::/29 maxlen: 128
2a02:2fc0::/29 maxlen: 128
Validation: Failed, certificate revoked on Tue 30 Apr 2024 09:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:34:23:0d:b1:87:fb:de:a7:f0:86:2e:2c:f7:b7:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 30 04:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eecfbf9e696bca3070442e2cdebdb6dcae406e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:bd:b1:e0:c4:22:61:a0:43:1b:ac:6f:a1:
8e:f2:0e:70:85:7b:94:63:d9:74:61:a8:d9:9e:c0:
29:76:5d:40:4b:0b:cb:9c:78:a0:27:a7:31:39:5d:
0e:49:9a:e7:da:21:42:95:11:c4:b1:4e:cc:1c:e7:
d0:61:ea:74:82:f9:6e:4a:f5:1e:8a:ed:bd:8e:32:
2b:83:1a:9c:82:00:6c:1c:37:e4:e3:a5:74:b4:96:
b9:de:2d:51:62:9f:42:61:81:9e:b8:8c:8b:eb:aa:
69:6c:4b:2f:85:6d:a9:94:8e:67:df:a5:42:c5:3c:
23:ad:9d:43:dc:ca:33:b2:cf:12:2f:5b:a0:91:53:
29:bc:c9:f0:47:84:2b:90:1c:51:a6:fa:88:97:e2:
c5:18:06:ab:9c:91:6c:79:e2:47:5a:b5:54:9a:7a:
33:8a:e5:90:ca:3a:8b:e2:bc:12:39:66:39:50:3d:
94:51:92:a9:15:54:ab:57:9e:30:aa:e5:d7:14:d1:
d8:75:79:77:43:0e:b6:91:ab:40:2b:18:c6:0f:f1:
88:22:a8:b6:e6:46:ba:64:45:c6:7f:18:74:4f:70:
85:37:dc:b2:7e:23:dd:ec:a5:80:33:a6:e8:af:ab:
65:8e:dd:db:e9:3e:63:46:2c:4d:be:69:34:f1:81:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:FB:F9:E6:96:BC:A3:07:04:42:E2:CD:EB:DB:6D:CA:E4:06:E4
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/buz7-eaWvKMHBELizevbbcrkBuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.128.0/20
5.83.151.0/24
5.175.128.0/17
5.230.0.0/15
77.90.0.0/18
83.243.80.0/21
85.93.0.0/19
85.118.160.0/21
87.239.128.0/21
89.106.64.0/19
89.144.0.0/18
94.103.160.0/20
94.249.128.0/17
95.215.32.0/22
178.18.144.0/20
185.13.156.0/22
185.47.140.0/23
185.121.71.0/24
193.28.251.0/24
195.110.14.0/23
217.69.160.0/20
IPv6:
2a00:12d8::/29
2a00:19d0::/29
2a00:cdc0::/32
2a01:bd40::/29
2a02:7a0::/29
2a02:2fc0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:73:4f:c4:b9:66:9f:44:39:12:35:31:c4:8b:12:67:89:99:
d0:b6:1e:0a:86:fe:d0:14:2d:3e:95:61:fd:dd:c6:ff:34:f4:
4c:6e:3b:8c:eb:62:3c:dd:0c:71:0b:06:95:25:c6:59:71:be:
30:ca:cd:f1:dc:c6:d4:21:50:d6:f8:f3:5d:c5:f0:48:3f:0f:
5c:7b:e2:71:65:5d:0b:e0:7d:62:1e:bc:9f:2a:e9:2c:80:d8:
f4:4f:7c:13:a2:a9:a6:42:17:aa:f5:90:3c:76:de:f3:cd:9e:
02:2d:2e:8c:6a:8b:6d:29:36:bc:73:53:c8:dd:f9:a9:87:c3:
2c:a6:06:ee:b2:cf:fe:9a:00:bc:8e:7b:0c:ee:0d:2c:d0:37:
0c:47:e8:65:d1:98:0d:7e:fe:5d:98:ef:5a:1e:7f:44:80:5b:
58:61:9c:f1:8e:0e:9a:12:c0:70:0a:ea:d1:57:47:58:00:58:
e7:c1:49:c9:30:69:df:47:24:90:74:1d:bd:3f:af:fe:a0:51:
94:97:0a:af:dd:1f:89:61:d6:49:3d:81:ee:7a:6f:03:92:42:
19:d2:a4:34:4f:e1:da:a4:0c:a7:29:fe:99:00:0a:20:87:8c:
8a:36:de:5a:00:6f:fa:ba:96:83:6e:1f:f5:95:9d:f7:a1:6a:
8a:72:f7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 22:25:25 2024 by rpki-client on console.sobornost.net