Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ypVaZLMcC-gR7ijhDtYsqHp3JY.roa
File: 4ypVaZLMcC-gR7ijhDtYsqHp3JY.roa (raw, json)
Hash identifier: 1AsctH1AOJcSX2o/NQFuR/8/uuI1pb4xqSfb78HfLw0=
Subject key identifier: E3:2A:55:69:92:CC:70:2F:A0:47:B8:A3:84:3B:58:B2:A1:E9:DC:96
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018608ED452916076548BBC14ABF79C88254
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ypVaZLMcC-gR7ijhDtYsqHp3JY.roa
Signing time: Tue 31 Jan 2023 17:43:32 +0000
ROA not before: Tue 31 Jan 2023 17:43:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.102.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
216.173.106.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:ed:45:29:16:07:65:48:bb:c1:4a:bf:79:c8:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 31 17:43:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e32a556992cc702fa047b8a3843b58b2a1e9dc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:02:d5:bc:9f:eb:00:a5:96:40:30:67:f8:5c:
fb:d6:df:36:e6:0c:dd:c9:ea:c2:9d:c9:6f:4e:47:
89:7e:79:ef:99:9c:bb:7a:10:9b:bd:39:a4:c8:01:
a9:20:72:38:d0:d6:1d:32:9f:91:7f:8c:a1:a7:f2:
11:34:d4:01:62:9d:5b:61:80:31:4c:1c:7a:8a:91:
7d:82:94:6b:9c:85:06:dd:a7:ba:4d:5c:7e:40:61:
53:00:e1:6b:18:d0:93:b9:16:ac:d4:3b:a5:d3:c4:
f9:b8:1a:fa:63:3b:4a:64:0c:8a:fc:87:a1:89:5c:
23:2e:b9:1c:54:93:d0:f0:6f:c3:da:84:97:35:68:
6a:fc:72:a2:23:30:c9:0a:e1:a4:9a:2c:13:e8:38:
dc:3c:5e:ca:51:16:b0:9c:8a:50:bd:bd:23:ac:a7:
6c:fb:10:38:e6:b8:07:9d:aa:3d:e7:55:59:d8:8b:
f7:9b:48:5d:e3:e4:6c:a6:5a:28:77:d5:aa:5f:ca:
10:8b:fb:02:31:df:23:16:b0:98:ae:55:c9:55:7d:
19:71:51:f9:3a:dd:ff:d6:64:5b:df:9f:86:42:2a:
e2:20:f8:eb:40:e8:ad:6f:c3:9e:f9:b5:e5:99:71:
f1:b3:92:21:6a:55:75:e8:f6:c0:3a:01:16:ca:71:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:55:69:92:CC:70:2F:A0:47:B8:A3:84:3B:58:B2:A1:E9:DC:96
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/4ypVaZLMcC-gR7ijhDtYsqHp3JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.8.0-104.238.10.255
104.239.10.0/23
104.239.30.0/23
104.239.75.0/24
104.239.78.0/24
104.239.80.0/23
104.239.94.0/24
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0/24
216.173.106.0/23
216.173.110.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ae:8d:67:c8:46:b4:4f:4d:26:b1:6f:17:4a:1e:fa:06:93:
a9:81:17:56:4b:85:00:17:de:d9:a8:1a:6b:d7:29:8f:ba:e5:
80:fd:83:82:81:c2:14:ce:45:fa:94:d2:e9:48:a5:ec:4a:a2:
cc:8f:2b:aa:cd:92:4a:75:dc:43:3d:50:0b:8b:13:20:c8:53:
05:38:2b:72:5c:b7:02:16:73:b6:b2:55:da:6f:e4:e2:e9:aa:
af:4d:5d:d9:a6:e4:11:b0:1d:f7:e2:75:43:35:17:66:31:ca:
f2:c3:f1:7a:26:fe:71:46:0f:6d:52:65:ab:3f:d7:7a:92:db:
95:a6:1d:79:7f:d8:e7:33:ba:24:de:a6:fa:11:65:30:51:d5:
58:ec:41:eb:28:f4:32:a0:55:f4:4a:bd:8b:e0:9c:f6:8c:a2:
9f:d4:48:25:19:96:be:b4:b9:65:c9:5d:24:9c:3a:49:af:2b:
d4:3b:27:1e:cc:a2:c0:73:cc:dc:2e:75:40:f5:ab:81:73:12:
aa:bd:35:30:0a:c8:68:3d:5e:e5:79:e7:f6:5f:26:e8:34:45:
b5:88:3a:27:aa:3e:06:37:9d:21:13:94:67:70:46:01:cd:1f:
9f:f7:ed:48:c7:5c:20:02:ce:d1:01:1a:1c:c8:fd:cd:0d:36:
d9:22:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org