Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XMo_fu3B-9boYNKxLG5ifbdiMxM.roa
File: XMo_fu3B-9boYNKxLG5ifbdiMxM.roa (raw, json)
Hash identifier: 7mKCcOl5peOKWJf6x4HemVdXBWdHIUO5RgrCRYwmwgk=
Subject key identifier: 5C:CA:3F:7E:ED:C1:FB:D6:E8:60:D2:B1:2C:6E:62:7D:B7:62:33:13
Certificate issuer: /CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Certificate serial: 01856B9360CF575ED2921EA1860160BF3602
Authority key identifier: 57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XMo_fu3B-9boYNKxLG5ifbdiMxM.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49902
IP address blocks: 213.55.0.0/18 maxlen: 18
109.122.128.0/18 maxlen: 18
185.147.224.0/22 maxlen: 22
5.57.96.0/19 maxlen: 19
2a00:a080::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 07 Aug 2023 13:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:60:cf:57:5e:d2:92:1e:a1:86:01:60:bf:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b80e60b5adf45aeba5c0c8abccc63997a0f1db
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5cca3f7eedc1fbd6e860d2b12c6e627db7623313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:8c:26:79:9c:6b:e2:11:49:a6:c5:2a:50:
2f:c7:d7:71:a1:8a:a2:f8:11:b1:ab:d2:b2:a0:87:
cf:bb:5c:5d:75:b9:18:8b:69:47:45:2d:5d:d9:ec:
21:32:fe:4d:42:4e:39:3d:06:04:0a:d5:bd:63:03:
0a:ea:40:c7:d0:fb:91:6c:b4:4b:04:80:c8:31:9b:
ad:c4:f6:b6:75:46:8d:19:b8:4b:28:b5:4c:df:20:
37:06:49:80:7f:d8:7a:fa:27:ca:8d:4b:bd:1c:95:
ca:3d:25:02:07:26:de:66:a5:f4:ba:dc:92:67:a6:
88:43:9a:5c:e3:da:77:d7:dd:9b:8b:ac:02:ba:3a:
79:4f:46:52:a8:14:9c:20:27:48:e3:b2:6e:99:9b:
a5:c5:7c:d7:94:7c:6d:cf:fe:9c:90:6f:da:46:00:
bf:1f:24:bb:96:bd:a6:b8:2e:65:04:a7:5a:08:38:
21:00:ab:cb:b2:68:72:4a:90:20:dc:c4:31:35:4b:
83:03:a3:c5:a7:15:32:91:b6:33:2b:ea:65:c2:ae:
bf:fd:6d:44:35:30:15:c4:74:72:1e:9b:13:b2:fe:
db:e3:e9:ef:9a:ca:14:95:42:59:38:ab:b6:bf:77:
35:56:3f:30:6d:5c:f1:25:2c:c5:0c:0b:f7:31:c5:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CA:3F:7E:ED:C1:FB:D6:E8:60:D2:B1:2C:6E:62:7D:B7:62:33:13
X509v3 Authority Key Identifier:
keyid:57:B8:0E:60:B5:AD:F4:5A:EB:A5:C0:C8:AB:CC:C6:39:97:A0:F1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7gOYLWt9FrrpcDIq8zGOZeg8ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/XMo_fu3B-9boYNKxLG5ifbdiMxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/79dd9c-ce64-4b25-8f23-e6e8aae34826/1/V7gOYLWt9FrrpcDIq8zGOZeg8ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.96.0/19
109.122.128.0/18
185.147.224.0/22
213.55.0.0/18
IPv6:
2a00:a080::/32
Signature Algorithm: sha256WithRSAEncryption
50:e9:ec:fe:e7:c4:c7:9c:a0:c3:43:75:9a:7f:39:cd:64:77:
c2:59:08:fd:04:32:4b:6f:ba:5e:35:48:4d:86:5a:4c:48:4a:
72:63:5e:f2:4b:97:bf:dd:9e:80:f0:d8:5c:4a:82:f1:73:26:
66:00:46:0b:fa:62:3a:96:0b:7f:26:90:4d:52:e8:7c:f7:5b:
3d:58:e8:30:db:e6:f7:fd:80:3c:cd:61:e5:d2:a0:80:06:be:
ff:af:0e:4d:9d:26:15:fc:e7:7c:e5:c8:e1:1f:65:b8:ee:99:
83:e7:08:a3:40:17:47:d4:07:0c:7b:27:dd:df:f0:6f:56:9f:
c0:d0:be:d6:ce:8b:f4:5a:f6:c9:48:42:8f:7d:02:a3:7d:a7:
cb:64:14:ba:d6:05:4b:7b:c6:e0:dc:ae:63:51:08:26:30:1d:
70:0f:0b:47:6c:93:2c:35:f0:46:c5:0c:f8:e1:dc:e9:1c:fa:
68:21:e8:4c:bd:d8:78:31:98:b6:26:4f:ed:fc:f1:7d:89:c6:
7f:df:5b:fc:70:d0:7c:5c:3a:64:37:d8:66:80:c3:d0:ed:09:
00:a8:1d:a6:a8:31:f0:43:88:c6:47:6b:73:10:31:c7:62:02:
d7:75:ab:16:19:bd:25:05:7c:7e:27:77:3c:d1:bf:c0:3e:4e:
b8:e8:b9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:36 2024 by rpki-client on console-fra.rpki-client.org