Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/R3Alu6ulgAk6dHHIlGIMNiAvOks.roa
File: R3Alu6ulgAk6dHHIlGIMNiAvOks.roa (raw, json)
Hash identifier: nC4hIWCuS2bWl9KyGXO1ekiyYFnfiCl/iHWQz9MewAk=
Subject key identifier: 47:70:25:BB:AB:A5:80:09:3A:74:71:C8:94:62:0C:36:20:2F:3A:4B
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 01941F8BFED01B039F26FF59936E2C4B78CD
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/R3Alu6ulgAk6dHHIlGIMNiAvOks.roa
Signing time: Wed 01 Jan 2025 01:47:35 +0000
ROA not before: Wed 01 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49902
IP address blocks: 5.57.96.0/19 maxlen: 20
5.57.110.0/24 maxlen: 24
109.122.128.0/18 maxlen: 19
185.147.224.0/22 maxlen: 22
213.55.0.0/18 maxlen: 19
2a00:a080::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 08 Jan 2025 08:45:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8b:fe:d0:1b:03:9f:26:ff:59:93:6e:2c:4b:78:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=477025bbaba580093a7471c894620c36202f3a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:95:0b:9d:e3:be:73:24:e7:a7:e3:e6:92:
06:23:d1:7a:01:4f:95:77:82:b6:cd:b2:d5:6f:99:
7b:72:35:1a:7d:14:aa:d2:db:46:ac:8c:ca:ae:ae:
25:3b:c7:6e:0d:8b:95:7e:9e:f5:21:06:3f:ae:d2:
f8:fb:19:53:46:dd:ae:3d:6e:99:a6:0a:7f:86:f0:
44:88:a3:a6:1a:b5:1b:74:12:15:7c:17:aa:69:e4:
da:2c:50:62:5c:c1:1d:ae:9c:14:42:ec:b9:24:1c:
4e:fd:9d:53:5b:50:17:ff:45:6e:0c:fc:fc:5d:cf:
79:0f:2d:4b:0a:1c:12:12:f9:d8:f9:0d:84:0d:21:
8a:93:78:3d:0c:3d:cf:9b:e0:64:0d:fb:ee:38:66:
6b:5a:00:cd:fe:58:6a:04:27:6b:16:04:09:eb:e6:
5f:a5:83:10:e4:e4:67:8a:db:68:7e:20:5c:78:d9:
1c:68:37:03:a8:e1:8d:c6:54:eb:4b:cb:59:b1:64:
ed:98:9d:2d:b9:e7:b4:1d:95:36:74:c5:04:aa:93:
0e:1c:34:da:ad:23:a7:c5:ad:20:51:06:80:27:99:
42:4f:dc:c0:4b:56:44:98:d1:df:90:9b:37:e3:51:
35:66:ef:64:b5:cc:b8:43:22:4f:28:fa:67:80:f6:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:25:BB:AB:A5:80:09:3A:74:71:C8:94:62:0C:36:20:2F:3A:4B
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/R3Alu6ulgAk6dHHIlGIMNiAvOks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
185.147.224.0/22
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
0b:03:c8:b4:6f:3c:41:8f:4e:38:16:8d:ad:ad:5f:29:af:71:
58:40:6d:bd:63:21:b5:7b:8b:4c:30:0f:7c:7b:ee:1e:dd:91:
e4:2a:03:86:05:31:7f:22:86:24:24:e7:bd:21:83:92:f0:11:
c7:40:01:72:a5:0d:8e:1d:1b:fb:fd:48:19:07:69:fd:ef:3d:
42:ba:c2:80:10:13:83:c0:15:59:2e:c6:d7:eb:aa:45:52:b6:
58:bc:c6:ea:0f:3e:af:79:38:84:2c:c1:eb:b8:e4:0c:d9:f5:
34:96:9b:65:e1:e4:ab:2f:e6:ae:81:25:5b:b5:1c:31:73:18:
03:96:5c:6c:7e:49:65:ee:4c:2c:e4:68:77:a1:f0:1c:46:07:
66:d6:86:ef:de:97:fc:17:23:b6:2b:20:06:dc:d0:15:a2:36:
6d:56:5b:d6:ed:8c:7e:b5:8c:8a:af:d7:ee:71:5e:60:cf:84:
d4:32:07:11:48:04:4a:c6:36:ec:1e:e4:51:5e:22:50:f7:be:
9e:79:eb:c0:38:78:cd:0d:e3:58:03:6d:12:18:02:5a:01:f5:
aa:bc:b7:3e:21:11:d8:8a:ed:3c:44:41:1e:f6:10:ef:04:e1:
45:07:00:dd:94:3a:de:0b:46:50:b6:c5:3d:dc:50:52:93:13:
92:95:29:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:03 2025 by rpki-client