Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6bHWRlIMTeQAyItCfmAv68Jtm3I.roa
File: 6bHWRlIMTeQAyItCfmAv68Jtm3I.roa (raw, json)
Hash identifier: +fSowoNYr87TGkO3L+bKjeIJK4RSZk56APmfajV7zEo=
Subject key identifier: E9:B1:D6:46:52:0C:4D:E4:00:C8:8B:42:7E:60:2F:EB:C2:6D:9B:72
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01864AE5FCEA24408B3627EB95BFAE58D507
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6bHWRlIMTeQAyItCfmAv68Jtm3I.roa
Signing time: Mon 13 Feb 2023 13:10:31 +0000
ROA not before: Mon 13 Feb 2023 13:10:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205659
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
45.43.167.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.96.0/22 maxlen: 22
216.173.102.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.80.0/23 maxlen: 23
104.233.12.0/22 maxlen: 22
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:e5:fc:ea:24:40:8b:36:27:eb:95:bf:ae:58:d5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 13 13:10:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9b1d646520c4de400c88b427e602febc26d9b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:b7:3c:28:fd:c8:33:82:d9:39:56:80:1b:
64:63:cb:a3:70:14:ea:62:78:87:63:7d:d9:fb:82:
ce:97:54:11:bb:b1:d4:31:9d:d8:4b:96:33:90:d9:
af:4d:de:6c:5a:a8:dd:e0:bf:8b:c8:4b:7b:6f:6e:
aa:aa:87:b3:35:d3:2c:2f:3c:de:4f:3c:97:df:1c:
0e:6b:13:64:b9:84:46:83:2a:5e:a5:f0:11:0e:02:
70:b6:ce:c9:7a:2a:e2:8a:fd:84:b9:bb:dc:a6:5e:
ac:8b:85:d4:2e:cd:40:d5:21:68:08:66:bb:bf:77:
0c:74:03:c9:a6:ac:48:30:5d:62:e9:ce:1b:15:58:
1d:f0:50:36:ba:f4:26:3c:7c:23:2e:2b:64:25:52:
98:ba:c8:46:66:2c:43:19:be:6c:d6:09:65:70:16:
ee:a5:c6:fb:75:e8:48:28:53:25:51:4d:79:fa:bb:
5f:ae:e2:15:73:b4:28:0c:4e:f4:0d:f4:8f:44:53:
55:0e:29:99:18:d7:d3:39:7f:a5:00:16:a8:d0:ab:
f4:12:ec:b5:42:3a:9a:4e:e4:85:54:bd:59:ef:09:
19:a6:34:41:9c:fb:0c:82:63:f4:2c:6e:5b:fc:95:
8c:bc:71:aa:bc:2e:47:16:e0:c4:11:bd:32:33:05:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B1:D6:46:52:0C:4D:E4:00:C8:8B:42:7E:60:2F:EB:C2:6D:9B:72
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/6bHWRlIMTeQAyItCfmAv68Jtm3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.167.0/24
104.233.12.0/22
104.233.24.0-104.233.26.255
104.238.10.0/24
104.239.10.0/23
104.239.75.0-104.239.78.255
104.239.80.0/23
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
216.173.76.0/24
216.173.82.0/24
216.173.96.0/22
216.173.102.0/24
216.173.106.0/23
216.173.110.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a9:52:e5:cd:0e:11:e8:0c:e6:33:78:c2:fc:25:34:8f:39:
6d:a1:af:16:ca:6e:77:42:1a:4b:b4:e3:93:5b:47:41:58:bb:
ae:02:6e:f3:9a:fb:33:ed:28:8d:ad:43:2f:08:29:df:f3:45:
d4:fc:a3:81:4e:a7:04:92:f2:de:6f:0c:01:26:bc:d3:e7:aa:
ef:0f:b1:7b:74:c3:ff:26:73:1f:69:ae:20:ee:fd:b4:e6:a0:
cd:82:20:3b:2b:55:5e:c1:da:c2:0f:94:eb:55:8c:99:d3:03:
03:16:dd:8f:f1:07:b8:3f:e9:5f:69:5c:e5:8d:a9:47:c5:4a:
4b:0c:bf:75:b2:fa:4f:9a:b3:e9:55:2d:b2:b5:a3:84:72:15:
59:24:d2:9a:66:55:fd:51:0a:0c:08:89:38:1f:39:ba:4f:33:
99:18:2b:16:6a:a5:af:cf:83:31:42:97:d9:fd:d6:ad:af:cc:
31:2f:fb:35:a0:ed:68:18:ee:bb:48:a2:62:a6:b3:97:f1:6d:
50:87:21:c3:fa:2b:29:3a:cd:1f:04:04:b5:45:45:3c:ff:0b:
ce:36:c2:7d:ac:da:b9:af:ec:c6:43:cd:29:df:c3:73:e3:09:
0e:38:c9:bf:f6:b7:98:60:f9:39:35:8d:7b:7b:3b:53:e6:73:
0b:6c:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:40 2024 by rpki-client on console-fra.rpki-client.org