Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/61PUeCHoGY0PTssrX35n8sjSR88.roa
File: 61PUeCHoGY0PTssrX35n8sjSR88.roa (raw, json)
Hash identifier: 3OEw457eXo4bvHxg3CsX7JKT3uGEImueAA1O1aIk0ms=
Subject key identifier: EB:53:D4:78:21:E8:19:8D:0F:4E:CB:2B:5F:7E:67:F2:C8:D2:47:CF
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 0189D0170ACB593304EA0004D998860386EE
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/61PUeCHoGY0PTssrX35n8sjSR88.roa
Signing time: Mon 07 Aug 2023 13:01:58 +0000
ROA not before: Mon 07 Aug 2023 13:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49902
IP address blocks: 213.55.0.0/18 maxlen: 18
109.122.128.0/18 maxlen: 18
185.147.224.0/22 maxlen: 22
5.57.96.0/19 maxlen: 19
5.57.110.0/24 maxlen: 24
2a00:a080::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:17:0a:cb:59:33:04:ea:00:04:d9:98:86:03:86:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Aug 7 13:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb53d47821e8198d0f4ecb2b5f7e67f2c8d247cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:f5:95:39:7e:a3:a0:a4:b4:a4:42:45:44:
26:a6:8d:3e:4e:f3:be:6d:a6:da:bd:71:cb:6f:1d:
e5:f9:54:1f:28:d8:fb:ab:03:ac:c6:0f:a9:a2:21:
59:45:53:f1:95:9c:5a:d7:33:0e:d0:a2:6c:0b:2e:
79:ee:ec:bc:ed:ea:26:35:08:89:44:b9:6c:49:73:
7b:36:43:f3:51:aa:d5:60:54:33:5f:ab:63:9f:47:
5f:8c:26:f5:5f:ea:11:2b:9b:1a:61:f2:25:97:d8:
59:d0:4a:59:56:cd:08:cf:52:1b:64:58:26:6d:20:
b1:b3:f4:20:0e:39:f3:70:a3:38:83:67:3e:3e:83:
f7:27:8b:00:10:48:8d:4c:00:a3:8b:e8:97:d4:51:
57:f2:6e:7f:d1:30:97:65:0e:80:64:74:8a:ec:4a:
c7:10:39:55:5b:df:c1:ec:6c:0a:40:49:68:4c:85:
98:5f:cd:a3:d2:a1:98:1f:85:c1:5b:3f:6a:16:0c:
18:d7:fc:12:25:19:c6:b8:35:c6:21:71:f3:2a:10:
68:e6:90:96:a3:17:8b:6b:77:bf:30:dc:11:6b:a7:
5b:73:eb:93:73:f0:95:39:aa:58:ef:b9:27:78:5f:
4f:e2:92:a2:4e:4e:0f:db:aa:81:59:48:94:65:fc:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:53:D4:78:21:E8:19:8D:0F:4E:CB:2B:5F:7E:67:F2:C8:D2:47:CF
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/61PUeCHoGY0PTssrX35n8sjSR88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
185.147.224.0/22
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
07:a5:1a:66:e2:ac:d7:e2:a3:52:38:ef:aa:cb:68:5a:65:d0:
a4:36:fb:e7:a3:15:c4:7e:db:13:56:9c:12:24:ff:64:70:3b:
68:9e:8b:43:3b:55:62:e6:65:e7:87:6b:40:a5:4a:7d:0f:46:
1e:97:46:a1:c4:dd:e3:e3:ad:c9:14:da:49:03:cd:8d:fd:19:
14:67:a5:38:0c:e3:08:1b:45:8b:2f:3f:4d:f8:ba:c7:66:78:
d2:bb:a3:88:ee:f0:92:72:02:6e:98:71:2b:ac:02:f8:c2:9f:
1c:34:1e:7a:57:e5:ba:b2:2b:de:5d:17:ed:31:9b:75:1f:08:
11:c6:a4:6b:da:77:bd:a3:d7:58:99:0f:f7:eb:a0:bb:7c:4e:
b3:4b:83:9b:45:f6:85:15:be:88:48:87:c0:8b:ec:27:2c:c3:
f4:fd:68:c8:3f:d9:bd:ba:71:72:14:d9:5c:2c:82:57:7d:ec:
5e:40:b2:ed:6c:c2:b4:a6:aa:be:4a:22:09:a7:33:d9:1d:3d:
88:9a:8b:11:04:40:5e:ce:a8:7b:69:8d:eb:b3:75:7a:ed:70:
d9:f7:67:78:42:06:e4:a5:4b:92:a3:fc:63:40:ef:aa:78:4e:
b1:cc:7e:38:13:05:ea:5f:ac:d0:29:20:35:33:bb:74:d2:50:
1d:4b:6f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:57 2024 by rpki-client on console-ams.rpki-client.org