Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m3Knl_N1qzMEV3WuUKJ35_GQKo.roa
File: 8m3Knl_N1qzMEV3WuUKJ35_GQKo.roa (raw, json)
Hash identifier: iF2nZSxeTFcprgz5mdypVsVsGMrxCHR0TnJdBt2pel4=
Subject key identifier: F2:6D:CA:9E:5F:CD:D6:AC:CC:11:5D:D6:B9:42:89:DF:9F:C6:40:AA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0187371A2AB2D54D06EE55D5CA8A6578C330
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m3Knl_N1qzMEV3WuUKJ35_GQKo.roa
Signing time: Fri 31 Mar 2023 09:57:54 +0000
ROA not before: Fri 31 Mar 2023 09:57:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 64.137.45.0/24 maxlen: 24
64.137.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:37:1a:2a:b2:d5:4d:06:ee:55:d5:ca:8a:65:78:c3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 31 09:57:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f26dca9e5fcdd6accc115dd6b94289df9fc640aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:ee:9f:92:73:84:22:8f:4b:de:a0:0d:81:
b1:04:21:bf:6a:5f:2d:69:6b:1e:0c:3e:3c:86:a2:
60:87:11:ed:2f:3d:80:8f:ce:03:cf:18:3d:b9:64:
be:d4:74:ae:96:b5:d4:bd:e7:88:64:b6:60:7e:18:
66:83:d9:92:0f:bb:e2:f8:df:8e:94:c8:e8:6c:b6:
17:92:0a:85:0f:c7:37:b7:54:a2:1a:3e:2a:18:d2:
5d:62:b1:9d:19:57:ac:1f:d0:6d:98:92:8d:a9:90:
ff:8e:3f:3e:43:56:55:49:d0:d9:37:d1:5c:4e:4b:
a1:fb:ab:09:78:f2:0f:96:0f:63:56:4f:31:a3:40:
a7:06:1a:eb:30:49:35:02:cc:af:15:e4:0b:21:0c:
31:ef:98:88:6f:53:7a:27:3d:04:e0:d6:a0:d9:33:
00:b4:94:c7:85:81:55:67:59:fb:c6:26:42:25:8b:
92:8b:12:53:5c:10:85:01:75:4e:3c:df:d5:94:63:
cd:61:3d:9b:0c:85:81:48:fe:48:8e:8b:db:2c:a2:
6c:d8:8f:47:2b:5e:6c:d5:6c:e5:a5:25:79:3a:d7:
e9:f7:b0:28:54:5a:ea:b7:79:5d:9f:bd:73:4e:4c:
ec:e8:80:64:f5:14:4c:f1:d9:cd:da:f8:20:72:8d:
05:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6D:CA:9E:5F:CD:D6:AC:CC:11:5D:D6:B9:42:89:DF:9F:C6:40:AA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/8m3Knl_N1qzMEV3WuUKJ35_GQKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.45.0/24
64.137.87.0/24
Signature Algorithm: sha256WithRSAEncryption
95:4c:43:e1:31:2d:3f:2f:1d:dd:54:11:e1:a5:c4:55:da:42:
87:6b:40:d5:2a:45:02:fa:8e:8e:f4:44:a7:73:70:48:75:b0:
71:90:95:51:e7:f3:fe:ea:6b:69:71:a2:5a:18:19:79:9b:2c:
cd:26:43:96:d2:ed:16:9a:f9:8a:13:01:ac:99:da:1e:cb:e1:
00:70:04:1c:18:53:3c:cc:15:40:84:46:67:30:8e:09:28:13:
96:79:f2:94:30:4f:bd:0c:fd:42:cc:36:c6:d5:6d:68:69:3f:
a8:f6:19:91:ce:83:9a:99:12:92:4d:64:ea:f5:12:d2:1e:8f:
43:cf:31:36:ed:74:bb:37:6d:2b:50:7d:48:bf:46:5a:d3:4d:
60:ed:bd:ed:86:c8:c8:51:11:3f:96:0f:30:d2:12:14:df:dd:
a4:83:60:dc:3a:e9:84:b0:4e:77:68:9a:0a:3e:48:1c:b8:31:
56:23:c4:f3:c0:78:59:98:fc:60:4b:fb:5d:6c:e6:20:50:16:
8d:53:da:a2:fa:c5:d6:8a:62:8f:4b:ac:2f:95:42:2c:ab:20:
38:c4:16:6d:17:24:fb:19:07:ef:93:bf:97:7e:d0:2a:8b:35:
7c:8f:99:e9:e7:0e:99:3c:f8:be:9d:7b:b2:e6:60:12:e2:42:
0a:e0:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org