Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-HQQ4QgDu4wZ6QIt8Y3xpNOyN7g.roa
File: 1-HQQ4QgDu4wZ6QIt8Y3xpNOyN7g.roa (raw, json)
Hash identifier: 3zwC2nJkPYorAajVVCeQdfDIy9R6HLpAb4elExu+EwU=
Subject key identifier: F8:74:10:E1:08:03:BB:8C:19:E9:02:2D:F1:8D:F1:A4:D3:B2:37:B8
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01878F07218E981B5E6389F31D38016B433F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-HQQ4QgDu4wZ6QIt8Y3xpNOyN7g.roa
Signing time: Mon 17 Apr 2023 11:43:41 +0000
ROA not before: Mon 17 Apr 2023 11:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 64.137.29.0/24 maxlen: 24
64.137.114.0/24 maxlen: 24
64.137.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:07:21:8e:98:1b:5e:63:89:f3:1d:38:01:6b:43:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 17 11:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f87410e10803bb8c19e9022df18df1a4d3b237b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3f:32:47:a2:cc:5a:6c:8e:9a:0d:41:56:66:
25:cb:dd:d5:88:6c:58:91:b1:2e:33:f1:b5:b2:e6:
7d:5a:89:0d:24:28:9d:3b:43:68:6a:68:7e:a7:38:
c0:ae:d9:f1:de:a4:c1:5b:60:68:d4:47:88:0d:85:
dd:39:c0:d1:f4:33:58:f5:ad:ec:4b:9a:d5:8d:8e:
37:73:9d:ab:91:f4:6d:e6:41:af:39:a6:e1:9d:8c:
2e:81:cc:a4:0a:e2:3c:3d:d8:29:bb:d6:d1:f6:f4:
f2:5e:1e:15:29:fc:35:c2:e7:94:d9:f1:d6:33:12:
84:1e:de:bc:d1:24:f2:49:57:37:9b:d0:b4:d4:36:
39:b2:04:e7:be:ee:6c:de:d0:44:6d:09:a9:2f:23:
2a:ea:8b:fe:d2:cb:1c:26:9f:03:34:c9:92:ee:fd:
4d:f0:8a:68:16:45:76:7e:55:bd:57:18:2f:76:51:
67:b5:c2:29:65:11:1d:aa:f6:e9:76:da:30:ba:6f:
94:c7:85:61:fd:72:c1:9e:40:39:0f:27:16:05:57:
51:1c:86:15:fe:45:44:8a:3a:63:42:22:b9:3f:6d:
d3:41:a2:7e:9d:e0:26:b5:f6:06:d8:6a:3a:e4:9c:
0e:5c:51:86:56:17:7b:44:a0:aa:0d:6c:f2:93:ee:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:74:10:E1:08:03:BB:8C:19:E9:02:2D:F1:8D:F1:A4:D3:B2:37:B8
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-HQQ4QgDu4wZ6QIt8Y3xpNOyN7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
64.137.114.0/24
64.137.116.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:eb:1d:84:14:6a:c2:93:dd:e5:66:8b:d9:57:9f:db:71:fe:
e3:02:86:52:44:c1:d0:45:ce:fc:94:cc:ed:be:88:e9:36:ab:
c4:4f:d7:8e:b3:be:a7:5b:ef:4a:79:7c:5e:d1:78:e9:46:ab:
69:ab:21:97:be:c2:8d:71:b9:a5:a5:5c:9f:7e:65:f7:ca:dd:
eb:2f:ca:ed:a8:07:9c:8a:2b:15:bc:2f:b9:02:9c:b8:38:79:
c6:83:53:ae:88:94:45:89:ee:63:62:72:ad:7e:02:7a:9e:9b:
3f:4a:ad:c2:df:44:18:6a:df:69:73:03:72:6c:e0:fd:ba:b5:
1e:83:43:56:7d:61:82:1b:26:90:a8:dc:8c:ba:50:15:34:26:
3e:56:db:1d:01:ba:8e:2c:f7:ca:30:1c:3e:22:bf:f7:e0:68:
8f:25:44:10:db:45:30:e9:73:46:cf:13:aa:6f:21:cc:e6:4a:
78:c5:db:69:69:3c:34:be:b0:23:c6:84:0d:06:77:4b:31:2b:
06:20:24:f2:28:67:a5:71:a1:e7:84:97:e8:76:c3:ef:d6:2c:
29:06:e6:2e:3b:77:56:ce:f4:3c:bf:96:5b:70:84:50:9b:92:
74:6e:0a:74:07:8c:2a:a3:22:b2:b5:f2:06:d8:ec:77:3f:05:
77:dd:ff:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org