Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sY7CNElRLJ1SFqgE3ZA4rQuAy5E.roa
File: sY7CNElRLJ1SFqgE3ZA4rQuAy5E.roa (raw, json)
Hash identifier: /D4o4xVOy2g6WwQ4Cf1nzelddZHX48bKWvyis6A31Hs=
Subject key identifier: B1:8E:C2:34:49:51:2C:9D:52:16:A8:04:DD:90:38:AD:0B:80:CB:91
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018E514BCC16E3A1183D56887BB3A93CF5A0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sY7CNElRLJ1SFqgE3ZA4rQuAy5E.roa
Signing time: Mon 18 Mar 2024 11:21:45 +0000
ROA not before: Mon 18 Mar 2024 11:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.58.99.0/24 maxlen: 24
91.240.33.0/24 maxlen: 24
109.196.104.0/24 maxlen: 24
109.196.105.0/24 maxlen: 24
109.196.106.0/24 maxlen: 24
109.196.107.0/24 maxlen: 24
109.196.108.0/24 maxlen: 24
109.196.109.0/24 maxlen: 24
109.196.110.0/24 maxlen: 24
109.196.111.0/24 maxlen: 24
176.101.56.0/24 maxlen: 24
176.101.57.0/24 maxlen: 24
176.101.58.0/24 maxlen: 24
176.101.59.0/24 maxlen: 24
176.101.60.0/24 maxlen: 24
176.101.61.0/24 maxlen: 24
176.101.62.0/24 maxlen: 24
176.101.63.0/24 maxlen: 24
213.109.108.0/24 maxlen: 24
213.109.109.0/24 maxlen: 24
213.109.110.0/24 maxlen: 24
213.109.111.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 18:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:4b:cc:16:e3:a1:18:3d:56:88:7b:b3:a9:3c:f5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 18 11:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b18ec23449512c9d5216a804dd9038ad0b80cb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6b:7c:78:52:ab:7c:3a:7f:76:16:6b:8b:35:
82:3d:60:a2:c9:81:84:f5:19:aa:e5:e9:dd:18:82:
b5:44:3a:ad:16:02:72:b1:6c:68:76:74:ef:d0:cc:
c6:f7:45:0e:dd:0e:42:d1:62:69:8e:0d:c6:15:1b:
1b:c9:f8:5d:4c:5d:85:16:df:58:79:b2:fd:3f:09:
89:ca:c8:a9:76:7b:1a:68:e8:2b:75:d1:ba:b4:f8:
7e:2a:52:ea:b8:cf:97:37:d5:75:68:c6:9f:5e:fb:
a4:f9:21:3f:f1:4c:a3:7d:76:c8:9e:b8:74:92:f3:
6e:b4:8b:82:7c:8c:f6:1c:9d:ab:dc:8d:59:e7:59:
5b:3b:ce:d3:ed:93:41:73:c9:a6:ce:9a:e7:14:85:
8b:b4:96:95:57:b6:ed:40:81:db:c3:59:ad:9d:bc:
50:11:3d:97:4c:31:a1:dd:52:8e:ef:66:dd:ae:10:
ee:be:d6:b5:7e:ca:6d:3d:5a:8c:cd:a0:cc:bc:81:
ad:9b:3f:e8:41:87:51:78:f1:de:f9:a4:08:04:62:
e9:f8:11:28:77:25:3c:a1:6b:5d:54:33:d1:24:57:
22:69:02:98:d2:ef:71:0a:df:1b:85:42:12:56:89:
1d:2a:55:92:2b:12:6c:50:2f:1a:6b:1e:46:d1:90:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:C2:34:49:51:2C:9D:52:16:A8:04:DD:90:38:AD:0B:80:CB:91
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/sY7CNElRLJ1SFqgE3ZA4rQuAy5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.99.0/24
91.240.33.0/24
109.196.104.0/21
176.101.56.0/21
213.109.108.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3f:6a:b6:06:65:3b:3e:ed:4e:39:83:2d:68:28:9e:61:4f:
8d:e4:7c:32:77:e0:96:59:35:28:38:36:cf:b2:3e:7f:48:25:
68:83:ce:69:4b:3c:77:5a:df:5e:89:b5:ab:35:49:c3:80:6a:
26:69:1c:40:bd:41:5a:e2:4e:14:25:5e:fe:9a:2f:90:cb:87:
14:a9:8c:a8:b0:aa:66:83:11:a1:94:b4:48:7f:d1:60:f5:c7:
b9:81:12:29:6c:e7:ce:14:bb:db:e3:cb:c7:52:aa:ec:fb:77:
47:83:87:fc:a2:02:86:99:fb:2c:9f:51:f1:53:da:f3:8e:cb:
08:5c:50:d4:18:58:ce:e9:40:ad:46:fa:2a:bf:30:5b:65:af:
2b:d1:22:fa:17:94:9e:41:df:36:0f:f1:15:f3:c4:74:d0:20:
30:e8:16:8d:8b:17:e6:ea:10:91:1c:c0:13:89:8d:ea:b1:d8:
13:d5:fb:cd:f0:1f:32:cf:3a:30:53:0f:f2:b6:99:5a:0c:79:
2f:04:1c:98:b9:86:91:29:cd:95:55:d2:cb:65:38:23:1b:a2:
9f:55:67:f4:b0:80:83:78:4c:34:09:1d:f9:8c:b0:4c:9d:82:
04:f4:cd:c8:b8:9a:64:15:78:8a:95:d2:7c:b1:0b:56:ad:8e:
3f:32:87:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 21:47:55 2024 by rpki-client on console-ams.rpki-client.org