Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/e5mXYfiaownQ2nfkKOykgRUU0m0.roa
File: e5mXYfiaownQ2nfkKOykgRUU0m0.roa (raw, json)
Hash identifier: Y5/1OQuSmii7nDoHeumyjX9tGd2k6co1yPqz21hT93U=
Subject key identifier: 7B:99:97:61:F8:9A:A3:09:D0:DA:77:E4:28:EC:A4:81:15:14:D2:6D
Certificate issuer: /CN=cc5911433ba206f450ac9bd065c86c96608401c1
Certificate serial: 01856F5490A734889FEB08E76A41BF30A0A9
Authority key identifier: CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/e5mXYfiaownQ2nfkKOykgRUU0m0.roa
Signing time: Sun 01 Jan 2023 21:54:51 +0000
ROA not before: Sun 01 Jan 2023 21:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13002
IP address blocks: 213.159.96.0/19 maxlen: 19
213.159.113.0/24 maxlen: 24
213.159.118.0/24 maxlen: 24
213.159.119.0/24 maxlen: 24
213.159.124.0/24 maxlen: 24
213.159.125.0/24 maxlen: 24
213.159.122.0/24 maxlen: 24
213.159.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:90:a7:34:88:9f:eb:08:e7:6a:41:bf:30:a0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc5911433ba206f450ac9bd065c86c96608401c1
Validity
Not Before: Jan 1 21:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b999761f89aa309d0da77e428eca4811514d26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a5:9e:1b:ab:b6:78:1a:0b:13:42:2e:4c:10:
d3:6c:65:1a:35:44:96:51:24:c9:69:07:da:3e:09:
ad:f4:75:88:62:ef:29:53:a4:94:24:0d:c0:a5:67:
43:56:3d:eb:a5:db:d3:4a:f7:49:8f:94:f8:3e:2c:
14:fd:db:40:6f:43:c7:6f:c6:14:90:dd:21:01:24:
c4:5c:52:e5:bb:42:f5:e0:1a:b1:84:3c:81:a8:f3:
16:1e:fb:ac:49:07:f0:93:fd:39:eb:7b:71:63:f4:
ae:1c:49:c8:e5:47:03:93:a2:ff:a3:7c:42:3f:87:
f7:bb:6b:0c:c3:5f:d7:fd:2e:25:0f:fc:07:f3:15:
33:11:8f:3c:88:b1:b1:f2:11:4a:e1:28:5e:70:1e:
64:94:c7:5f:8d:1d:88:6a:12:04:90:1a:b2:0b:a2:
03:af:86:9d:e1:c6:08:54:45:c9:ba:c0:c9:d6:ca:
b1:7b:b9:16:45:f4:f7:18:bf:98:34:cc:30:8b:b0:
68:a4:dc:4b:4c:58:48:9d:ee:2b:c0:1d:e7:25:29:
5b:f1:2a:12:d8:ed:68:b7:07:1f:63:fe:43:15:48:
0c:d8:83:88:32:19:ef:4e:4a:38:e5:53:de:df:09:
5f:91:27:77:20:97:26:08:bc:7a:43:29:45:ef:fd:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:99:97:61:F8:9A:A3:09:D0:DA:77:E4:28:EC:A4:81:15:14:D2:6D
X509v3 Authority Key Identifier:
keyid:CC:59:11:43:3B:A2:06:F4:50:AC:9B:D0:65:C8:6C:96:60:84:01:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zFkRQzuiBvRQrJvQZchslmCEAcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/e5mXYfiaownQ2nfkKOykgRUU0m0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/360fdd-76ae-41f1-98c0-2b275043719f/1/zFkRQzuiBvRQrJvQZchslmCEAcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.159.96.0/19
Signature Algorithm: sha256WithRSAEncryption
37:60:55:28:bb:6c:b9:f6:b1:5c:c1:64:c8:87:4e:e2:64:67:
9f:41:a2:cc:ad:be:0f:f0:c9:4a:df:08:e4:62:31:a6:ef:d6:
33:7f:28:52:de:e8:3e:25:81:39:a6:e7:a6:7f:0e:aa:d6:b2:
72:80:9f:4d:e0:06:79:f6:6b:82:a7:df:ba:a7:91:cd:ab:f9:
66:9e:cd:bc:59:73:4f:ed:6e:01:53:45:be:77:09:69:ea:1b:
19:2a:cc:e4:69:27:2c:f6:33:5e:02:db:56:f8:63:01:cb:09:
a2:7d:80:00:f7:62:52:3f:ce:b8:07:bd:2c:c8:c2:76:5e:53:
0d:3e:44:53:9a:0a:43:3a:9a:51:d6:7c:11:db:3b:32:38:bb:
66:f8:5c:d3:63:b8:39:fa:69:cf:62:b3:63:47:fb:bd:d4:fc:
04:b8:3b:d0:9f:a4:6c:a2:3a:95:43:b9:aa:42:b3:72:b2:b0:
82:0a:7b:c7:b2:ad:25:83:68:a5:69:0b:7e:e3:ca:4b:75:22:
16:af:5c:9b:bb:f6:6d:8e:f8:5b:7e:38:47:90:dd:f6:97:5f:
43:5b:78:d2:17:96:4a:f1:c5:b3:e3:8e:a7:59:57:89:2b:0c:
23:38:97:fc:0d:03:27:5c:e8:dd:40:ef:2d:b8:5a:bc:4d:e6:
bf:98:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org