Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9pwziCXxDPuqY3RVn6WK3kAFUqs.roa
File: 9pwziCXxDPuqY3RVn6WK3kAFUqs.roa (raw, json)
Hash identifier: TOE9y/O0hvWjamPnGrub+UyyO1JiGBCmBJ7szSIeHqk=
Subject key identifier: F6:9C:33:88:25:F1:0C:FB:AA:63:74:55:9F:A5:8A:DE:40:05:52:AB
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018896AD2FDA4311B2DBF137863567EDE02B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9pwziCXxDPuqY3RVn6WK3kAFUqs.roa
Signing time: Wed 07 Jun 2023 16:25:12 +0000
ROA not before: Wed 07 Jun 2023 16:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 64.137.120.0/24 maxlen: 24
64.137.69.0/24 maxlen: 24
64.137.67.0/24 maxlen: 24
64.137.76.0/24 maxlen: 24
64.137.102.0/24 maxlen: 24
64.137.113.0/24 maxlen: 24
64.137.117.0/24 maxlen: 24
64.137.115.0/24 maxlen: 24
64.137.23.0/24 maxlen: 24
64.137.22.0/24 maxlen: 24
64.137.32.0/24 maxlen: 24
64.137.33.0/24 maxlen: 24
64.137.50.0/23 maxlen: 23
64.137.47.0/24 maxlen: 24
64.137.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:96:ad:2f:da:43:11:b2:db:f1:37:86:35:67:ed:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 7 16:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f69c338825f10cfbaa6374559fa58ade400552ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:1a:d9:43:1d:2e:59:38:1c:61:85:7a:ed:
19:cd:60:5a:40:41:e6:75:66:28:4c:c9:04:be:17:
04:1d:3d:ed:a7:b7:ab:a1:cb:26:3c:06:95:bb:30:
bb:7b:d3:4f:a8:84:8d:53:ff:3d:e3:b3:97:b5:a3:
e7:83:fc:0c:12:bd:62:0c:6d:de:1e:d4:93:fb:0a:
f4:04:ae:60:01:b1:5f:2e:fb:af:38:ba:27:f5:d6:
83:8f:be:75:03:bc:75:6e:7b:43:e7:39:38:ab:bc:
5b:15:2e:1c:30:f4:48:7e:59:6c:a4:24:bf:87:b8:
19:83:9e:48:8c:01:0c:8b:dd:ed:47:27:66:17:e9:
fa:6a:47:3f:00:22:bc:76:95:70:a5:9a:76:d1:9d:
19:cb:e0:14:fd:df:1a:5c:92:7a:36:71:12:37:b1:
ea:45:a2:fe:12:3a:59:81:f9:c6:8b:ff:21:28:f7:
af:06:f7:91:a8:c0:07:99:69:13:7d:a0:29:91:e4:
b7:47:c6:76:12:f8:92:57:a1:53:1c:16:ce:fd:ec:
b4:f0:65:9e:6e:df:09:75:6e:05:fa:60:e8:b5:05:
98:10:da:94:ba:c2:03:68:7b:b3:3d:e4:0f:78:72:
1c:45:29:0f:05:f5:d5:e7:b8:0b:9a:16:e4:65:96:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9C:33:88:25:F1:0C:FB:AA:63:74:55:9F:A5:8A:DE:40:05:52:AB
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/9pwziCXxDPuqY3RVn6WK3kAFUqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.22.0/23
64.137.32.0/23
64.137.47.0/24
64.137.50.0/23
64.137.55.0/24
64.137.67.0/24
64.137.69.0/24
64.137.76.0/24
64.137.102.0/24
64.137.113.0/24
64.137.115.0/24
64.137.117.0/24
64.137.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:ef:68:fe:48:4a:1e:b9:9e:89:40:a0:45:c7:f9:f0:34:d7:
8e:ac:f6:b0:2e:d0:30:08:22:c4:21:a6:dc:d9:2b:20:65:8f:
8f:9c:0c:bc:24:77:bb:9e:62:d8:5d:42:fc:b0:72:3b:2a:16:
0d:a6:02:37:b1:7d:b8:fc:3b:27:78:6a:f7:58:c2:a0:e3:f3:
9a:25:fe:51:3c:48:a3:6c:e2:8b:f6:b0:69:c5:d6:e8:ad:13:
85:1c:bd:09:ed:8a:f3:d1:7d:3c:4d:db:82:88:50:e2:04:cb:
99:32:e9:b1:dd:86:1a:b7:75:29:d0:98:91:b4:ea:9f:65:81:
4e:35:aa:f9:74:e6:f5:24:1f:d6:51:b2:89:1d:c7:a5:13:d8:
3d:b4:26:52:d4:86:64:f8:7a:9b:c1:b0:ca:db:8e:23:b5:61:
16:2f:3a:bc:dd:8c:31:cf:87:fb:eb:ce:6c:48:4b:45:94:1e:
b8:99:50:94:54:95:92:05:c2:6d:35:40:03:00:87:1d:f0:da:
f0:0e:d6:36:b7:08:36:57:a8:71:db:0d:78:db:64:d6:9a:35:
cd:39:e1:1b:2e:c4:06:ad:2f:06:a4:ae:62:f2:6a:de:57:7e:
8b:4c:be:24:92:25:78:d2:0e:60:dd:d0:7b:60:87:ed:8f:d8:
d1:80:b8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:54 2024 by rpki-client on console-ams.rpki-client.org