Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/5ZsmgoaoAktUCGYU0tusr2Lum18.roa
File: 5ZsmgoaoAktUCGYU0tusr2Lum18.roa (raw, json)
Hash identifier: +R50LoOVpoRa2h8G6W21h8z9CaNOVijDHmt0BNV1Czo=
Subject key identifier: E5:9B:26:82:86:A8:02:4B:54:08:66:14:D2:DB:AC:AF:62:EE:9B:5F
Certificate issuer: /CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Certificate serial: 0191563C0559A228D64B8424F2F2F62DC50F
Authority key identifier: CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/5ZsmgoaoAktUCGYU0tusr2Lum18.roa
Signing time: Thu 15 Aug 2024 13:30:59 +0000
ROA not before: Thu 15 Aug 2024 13:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 74.118.124.0/24 maxlen: 24
74.118.125.0/24 maxlen: 24
74.118.126.0/24 maxlen: 24
74.118.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 15:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:3c:05:59:a2:28:d6:4b:84:24:f2:f2:f6:2d:c5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd576d876e17e67aa3b1f1c10dab39db2935e22b
Validity
Not Before: Aug 15 13:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e59b268286a8024b54086614d2dbacaf62ee9b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:29:b4:0f:df:88:d8:25:b7:7a:73:f6:98:38:
ff:13:4d:1e:55:64:b2:90:a7:94:e9:01:b1:16:0b:
c2:94:6b:03:57:a9:b9:53:87:95:16:1c:77:d0:83:
17:a8:bf:88:74:c8:f4:65:9c:7a:96:85:b7:04:52:
9c:75:e2:3e:5e:4a:87:4b:c1:b2:d8:dc:f9:fa:70:
7f:da:6d:3e:5a:b4:32:f8:73:04:cf:c3:1f:e0:2b:
2b:58:30:30:59:e0:74:d8:9c:6f:ac:36:96:0c:cb:
d8:fa:9c:a5:e2:23:12:61:23:e0:ec:f2:f9:ab:79:
a9:82:60:60:07:50:2b:73:d4:c1:91:5e:c5:07:f8:
ab:06:7c:14:1b:ba:c1:b3:f6:87:aa:e2:41:ab:e8:
eb:0f:00:85:9e:8c:83:52:40:42:14:ca:a6:b7:fb:
9e:a1:d2:89:3d:86:bc:75:e5:14:f6:89:76:fc:9b:
04:d7:0d:71:0a:5e:61:58:de:bd:dd:12:a2:94:d6:
9f:40:a2:5e:60:81:1f:bd:80:22:04:f3:b1:62:35:
b9:24:47:13:8f:4e:ef:c9:4e:f4:c4:88:0b:30:e7:
36:90:6a:b6:8f:69:27:93:2c:aa:09:f9:f3:71:a6:
c6:91:b8:14:82:db:44:70:5a:12:3a:e6:a7:84:b6:
39:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:9B:26:82:86:A8:02:4B:54:08:66:14:D2:DB:AC:AF:62:EE:9B:5F
X509v3 Authority Key Identifier:
keyid:CD:57:6D:87:6E:17:E6:7A:A3:B1:F1:C1:0D:AB:39:DB:29:35:E2:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zVdth24X5nqjsfHBDas52yk14is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/5ZsmgoaoAktUCGYU0tusr2Lum18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/42f014-cd92-4205-aa53-1a80a2f7d7ea/1/zVdth24X5nqjsfHBDas52yk14is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.118.124.0/22
Signature Algorithm: sha256WithRSAEncryption
98:30:66:85:41:07:53:89:c7:51:04:b8:d9:56:55:13:99:d8:
97:7c:c9:81:f2:9c:ea:9f:0e:dd:e3:a0:4b:bc:a7:cb:5a:af:
5e:32:af:66:7d:b7:af:ac:e9:9d:9e:a0:47:2d:5a:7e:33:41:
5d:3b:0c:a8:dd:67:ef:2e:d6:91:7f:30:84:01:7f:7e:43:70:
97:53:df:f4:4a:c1:16:c2:8e:cc:92:e9:3d:f2:ed:18:47:76:
3e:bd:2e:0e:61:48:b5:8e:f2:ab:00:f1:8b:b9:44:7e:23:0a:
6c:a9:cb:ff:b4:bc:dc:0b:28:2f:a8:72:af:d0:92:a0:0b:ec:
b6:20:a4:46:cc:a8:f3:ea:f5:90:67:8c:cc:46:60:19:fb:e1:
15:9d:bc:7e:d6:5a:71:ac:6b:9f:4a:d4:3a:ab:01:0a:4f:38:
60:cb:6b:69:26:f0:51:0c:a4:57:f7:1c:92:72:e0:b5:68:c4:
8d:c4:3e:7a:9a:03:f3:5a:65:3b:27:02:86:ab:90:2f:e6:60:
8e:34:b8:57:ce:66:04:69:70:ed:16:fb:28:89:ae:b5:20:22:
71:c1:f8:f9:6c:14:2d:dd:d5:e2:29:05:4c:51:16:76:ba:22:
6c:e9:16:f0:d1:a4:4e:1d:8d:19:1b:0f:c6:63:c1:89:a2:6a:
97:85:bb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:40 2025 by rpki-client