Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-XSyXR--Xj2fGyshbhlSXu8tzDk.roa
File: 1-XSyXR--Xj2fGyshbhlSXu8tzDk.roa (raw, json)
Hash identifier: /xTGXu1vJ/7l9oh6oPvpuv0wD2MyBkC8nnAq3PBySZc=
Subject key identifier: F9:74:B2:5D:1F:BE:5E:3D:9F:1B:2B:21:6E:19:52:5E:EF:2D:CC:39
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0186C23009B7F7A29F4CD1943E6C9086D4E5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-XSyXR--Xj2fGyshbhlSXu8tzDk.roa
Signing time: Wed 08 Mar 2023 17:06:13 +0000
ROA not before: Wed 08 Mar 2023 17:06:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205964
IP address blocks: 104.239.0.0/23 maxlen: 23
104.239.4.0/23 maxlen: 23
104.239.2.0/23 maxlen: 23
104.239.6.0/23 maxlen: 23
64.137.70.0/23 maxlen: 23
64.137.105.0/24 maxlen: 24
64.137.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:30:09:b7:f7:a2:9f:4c:d1:94:3e:6c:90:86:d4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 8 17:06:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f974b25d1fbe5e3d9f1b2b216e19525eef2dcc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:31:08:05:2e:27:76:a9:c9:78:41:5d:f5:
5a:6b:1a:3d:5e:8d:3a:de:6d:e0:6f:9b:b7:48:a5:
4f:a0:c1:6a:4c:c7:b7:69:3d:d0:d0:b0:13:7e:88:
3a:7c:fa:a2:f8:eb:b0:b3:97:35:d4:fd:df:15:68:
e0:8a:b0:6c:5c:8c:6c:45:e3:47:09:10:66:b0:84:
e0:06:01:a4:69:71:a7:8e:f3:68:64:db:2c:88:45:
f3:3a:21:02:7d:0e:49:2b:8d:af:4a:46:88:dc:3f:
96:d4:d6:38:f5:e6:b5:60:f1:2c:10:70:91:b0:76:
3c:0e:c6:b6:8d:4f:f9:25:1c:86:8f:e5:91:b8:a0:
cb:2a:0d:59:4c:9a:b6:5d:f2:4b:7e:f8:8e:fd:9f:
d1:c5:38:3d:0e:8d:3e:67:93:44:5e:6d:73:d6:59:
14:aa:d8:4c:84:1d:08:cc:b1:a4:4b:f6:3a:b7:df:
be:0b:60:bf:66:25:77:ff:26:aa:ce:71:61:e7:39:
f1:57:e2:04:dc:5d:43:2a:16:1a:63:e3:0c:ed:1d:
05:7d:f0:39:3d:4a:5c:b4:39:a0:99:1f:09:46:22:
44:e5:21:d0:1d:5d:f2:b8:bd:50:c8:ed:d7:d2:7d:
85:a7:4c:e3:db:22:60:6f:4d:bf:37:28:90:77:8d:
f3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:74:B2:5D:1F:BE:5E:3D:9F:1B:2B:21:6E:19:52:5E:EF:2D:CC:39
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/1-XSyXR--Xj2fGyshbhlSXu8tzDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.70.0/23
64.137.105.0/24
64.137.107.0/24
104.239.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:ef:5a:10:83:4f:27:01:da:d7:84:d9:9f:38:60:af:e4:df:
5e:ae:31:a5:a7:09:e1:7d:66:f0:e5:f6:ad:5d:6a:77:27:5c:
9f:d1:a3:25:ef:f0:cd:cb:ea:f8:bf:f9:f0:44:09:99:08:03:
8f:ad:06:03:d3:34:91:25:1a:22:84:10:db:ff:6a:fe:99:48:
f4:15:48:f5:52:f7:52:9e:d8:89:27:70:82:06:ef:d4:ef:c3:
3c:6e:e5:a6:ab:38:d2:c7:1e:c8:8a:63:90:fe:9c:54:e1:5c:
4d:7a:08:8f:d6:91:7b:b6:19:5e:2d:65:ef:f1:60:f6:c5:32:
a0:bb:e7:b6:03:dc:95:ff:29:64:8e:09:00:16:69:1e:b5:aa:
d9:da:45:d1:cf:53:e2:51:80:20:2d:df:78:f1:d8:dd:59:d2:
70:28:cb:b7:6e:a3:f0:f1:d8:3e:61:66:ac:16:1f:b3:4b:ab:
04:04:07:37:0f:85:2f:49:51:bf:89:1b:e1:12:79:07:14:b8:
8e:52:7e:b4:44:f1:d8:ba:dc:ef:9b:b5:81:f0:bc:a4:3c:2d:
00:e9:8a:0a:a6:56:21:34:aa:3b:8a:cd:89:d2:12:4e:99:44:
c7:60:87:50:ec:16:6d:05:c7:c5:f5:67:da:ac:2c:6d:4c:87:
d2:21:ed:5d
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYbCMAm396KfTNGUPmyQhtTlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjMwMzA4MTcwNjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc0YjI1ZDFmYmU1ZTNkOWYxYjJiMjE2ZTE5NTI1ZWVmMmRjYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ0xCAUuJ3apyXhBXfVaaxo9Xo06
3m3gb5u3SKVPoMFqTMe3aT3Q0LATfog6fPqi+Ouws5c11P3fFWjgirBsXIxsReNH
CRBmsITgBgGkaXGnjvNoZNssiEXzOiECfQ5JK42vSkaI3D+W1NY49ea1YPEsEHCR
sHY8Dsa2jU/5JRyGj+WRuKDLKg1ZTJq2XfJLfviO/Z/RxTg9Do0+Z5NEXm1z1lkU
qthMhB0IzLGkS/Y6t9++C2C/ZiV3/yaqznFh5znxV+IE3F1DKhYaY+MM7R0FffA5
PUpctDmgmR8JRiJE5SHQHV3yuL1QyO3X0n2Fp0zj2yJgb02/NyiQd43zBQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPl0sl0fvl49nxsrIW4ZUl7vLcw5MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvMS1YU3lYUi0tWGoyZkd5c2hiaGxTWHU4dHpEay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNWEvZmRkNjMzLWM2NTgtNDljNS05ZThmLWZiMDc5NTVmM2Fh
YS8xL1lGZ2VaejJBOTBkSk5ySVROLXI4d2IzRGhlay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAUCJRgME
AECJaQMEAECJawMEA2jvADANBgkqhkiG9w0BAQsFAAOCAQEAXe9aEINPJwHa14TZ
nzhgr+TfXq4xpacJ4X1m8OX2rV1qdydcn9GjJe/wzcvq+L/58EQJmQgDj60GA9M0
kSUaIoQQ2/9q/plI9BVI9VL3Up7YiSdwggbv1O/DPG7lpqs40sceyIpjkP6cVOFc
TXoIj9aRe7YZXi1l7/Fg9sUyoLvntgPclf8pZI4JABZpHrWq2dpF0c9T4lGAIC3f
ePHY3VnScCjLt26j8PHYPmFmrBYfs0urBAQHNw+FL0lRv4kb4RJ5BxS4jlJ+tETx
2Lrc75u1gfC8pDwtAOmKCqZWITSqO4rNidISTplEx2CHUOwWbQXHxfVn2qwsbUyH
0iHtXQ==
-----END CERTIFICATE-----
Generated at Fri Aug 25 10:33:24 2023 by rpki-client on console-fra.rpki-client.org