Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/61j8TMMIYSpy7tW08BK9CD0qf4I.roa
File: 61j8TMMIYSpy7tW08BK9CD0qf4I.roa (raw, json)
Hash identifier: KyeJu5A59pPDv1HZFGG9MF2j8rENBUGaVupT3jubq3g=
Subject key identifier: EB:58:FC:4C:C3:08:61:2A:72:EE:D5:B4:F0:12:BD:08:3D:2A:7F:82
Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Certificate serial: 01940D589E91D36BC6385A3E1E31783A4731
Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/61j8TMMIYSpy7tW08BK9CD0qf4I.roa
Signing time: Sat 28 Dec 2024 12:58:19 +0000
ROA not before: Sat 28 Dec 2024 12:58:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202063
IP address blocks: 185.55.48.0/22 maxlen: 22
185.55.50.0/24 maxlen: 24
185.55.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:58:9e:91:d3:6b:c6:38:5a:3e:1e:31:78:3a:47:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0
Validity
Not Before: Dec 28 12:58:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb58fc4cc308612a72eed5b4f012bd083d2a7f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fa:29:e4:a0:d8:bd:75:a9:dc:87:c0:e5:be:
a5:54:57:79:bf:ba:90:0f:ea:9e:05:28:4e:1d:64:
f5:dc:84:ca:7a:66:fb:78:cc:8b:04:23:dc:4f:a4:
cb:7b:77:20:ff:6c:2c:f3:b6:f7:84:83:ec:2d:88:
bc:ac:52:9d:1c:af:e1:b5:1f:82:a0:eb:d6:2e:8a:
52:4d:98:6e:20:d9:5a:a6:b0:25:46:1f:d2:dd:20:
c2:8f:30:9e:5d:54:17:bb:cb:22:5d:17:fb:1a:0a:
16:60:d3:9f:cf:73:78:88:45:84:35:5f:50:3f:d8:
05:44:b9:4a:6a:a7:e6:8d:f0:13:94:5d:7d:60:ac:
cb:23:20:83:ac:44:9e:45:fc:c6:2c:12:19:f5:ab:
57:80:02:21:f3:66:a4:00:64:d1:56:68:cd:ae:19:
f1:db:5a:91:cd:f2:ed:b0:bc:d7:2c:9a:ac:df:b8:
be:88:c7:13:9a:08:1e:85:35:60:55:e5:6c:77:1b:
28:63:e5:55:f0:00:fe:dd:9d:67:f6:4a:f9:98:f8:
02:1c:ec:b1:31:24:66:11:1a:f3:90:ed:3f:f8:29:
c0:92:c9:fe:ef:56:f1:68:d6:53:77:07:9d:a7:a6:
63:3c:82:76:c3:5d:a1:dd:91:ca:6f:f2:69:1f:03:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:58:FC:4C:C3:08:61:2A:72:EE:D5:B4:F0:12:BD:08:3D:2A:7F:82
X509v3 Authority Key Identifier:
keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/61j8TMMIYSpy7tW08BK9CD0qf4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:7a:f7:3c:5b:55:20:15:64:49:2e:17:51:db:9d:9f:24:63:
5e:61:b5:07:f3:f4:98:d9:7a:bb:04:01:10:e4:c9:a1:e2:73:
46:ae:b3:2b:97:aa:12:89:16:47:b0:d6:0b:0b:4f:29:77:80:
9f:a5:96:29:fe:bf:32:71:c7:ab:53:50:41:8a:0a:cc:3c:c0:
2a:c4:ac:8c:ac:39:f5:c8:3c:c5:5c:11:ef:6d:3c:76:58:26:
4c:38:ed:3b:54:b5:93:e6:57:0a:59:16:8a:cc:92:d7:06:43:
03:57:2e:87:dd:00:fb:e8:58:96:81:3a:17:16:ac:26:3c:9f:
a1:3d:9b:9c:42:d8:e7:18:86:1e:bf:b3:f4:d2:aa:cb:1e:07:
9e:60:88:7a:c8:9e:48:a8:cc:d4:74:58:a6:f9:29:b9:fe:97:
c9:49:26:4e:fd:88:42:1d:93:9a:35:d8:62:24:16:5a:de:15:
15:32:38:34:cb:36:06:ab:8e:1b:73:48:8e:a6:70:bd:19:df:
ec:60:fa:c9:9a:d0:b6:09:26:e6:8d:32:9d:3e:e1:29:c0:64:
45:f6:8c:6c:43:21:03:18:aa:c8:b6:25:ac:be:55:1c:0f:7c:
08:da:bf:32:09:ae:8b:cf:78:a3:8c:6e:82:7c:7e:80:2e:35:
3a:5c:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:32:13 2025 by rpki-client