Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BNsPgsKqis07y1R0LM0_YXlFh40.roa
File: BNsPgsKqis07y1R0LM0_YXlFh40.roa (raw, json)
Hash identifier: G/i+TpLO9yLLh6yI7nuJM6vNAAFhLtrKX8Bf4RxYOm8=
Subject key identifier: 04:DB:0F:82:C2:AA:8A:CD:3B:CB:54:74:2C:CD:3F:61:79:45:87:8D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019368CC281F51C63759E24096E21CF831EC
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BNsPgsKqis07y1R0LM0_YXlFh40.roa
Signing time: Tue 26 Nov 2024 14:07:10 +0000
ROA not before: Tue 26 Nov 2024 14:07:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214223
IP address blocks: 104.238.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:cc:28:1f:51:c6:37:59:e2:40:96:e2:1c:f8:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 26 14:07:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=04db0f82c2aa8acd3bcb54742ccd3f617945878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4b:f6:be:b4:3a:f1:1b:9f:f4:77:92:d4:c3:
41:1d:7e:a4:06:2f:48:a4:e6:86:22:93:9d:03:a9:
20:d5:f2:5b:82:fc:06:84:25:7f:b6:b6:f1:16:9e:
f5:4e:16:2f:1f:3a:18:01:35:38:e9:a2:b4:fa:6b:
53:a2:b8:e0:78:7b:cc:06:bf:59:92:d2:84:cd:84:
c9:09:99:1e:79:4c:92:1a:07:8f:5b:71:c1:4f:e4:
ac:48:ff:6e:45:e3:be:0d:e4:1d:d7:6a:4b:45:93:
60:4c:33:41:41:6d:53:40:bd:35:f1:8e:12:18:87:
8e:73:69:0f:6a:4e:86:06:2c:32:fa:3a:8b:1a:87:
bb:6c:26:7c:83:ee:d7:e1:02:21:53:c0:d5:92:c3:
a6:f5:9d:66:12:d0:d4:9b:29:f1:ea:c2:03:34:ae:
42:10:a5:8b:64:bc:d5:ca:da:94:c1:92:b3:31:94:
f0:37:36:fd:a0:c4:2d:ee:df:69:0b:97:05:3b:62:
01:f7:c7:52:d3:ae:3d:cf:ff:0a:03:a7:4e:8f:63:
7a:92:fa:34:ab:47:40:c9:57:cd:07:0e:c8:4b:54:
61:21:27:e7:96:01:84:64:a5:1b:b5:a7:a1:6e:14:
32:52:37:d4:ab:5e:91:ce:d3:32:48:ac:65:eb:46:
ff:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:0F:82:C2:AA:8A:CD:3B:CB:54:74:2C:CD:3F:61:79:45:87:8D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/BNsPgsKqis07y1R0LM0_YXlFh40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.26.0/24
Signature Algorithm: sha256WithRSAEncryption
57:ae:91:66:d0:b9:06:ae:7e:d9:ca:78:78:b2:f1:7b:45:e7:
ec:4d:bb:ff:e4:dd:b3:ea:3b:5d:f0:e0:60:82:02:25:34:40:
95:9e:a0:0e:2a:db:24:f5:28:0a:5c:8b:a4:e8:70:5a:87:a5:
32:19:af:f9:78:1b:7a:7e:5b:76:04:70:67:b8:6c:77:bd:d2:
96:a5:01:49:4d:3d:f7:dd:56:8c:54:53:0b:98:4b:52:64:41:
e1:80:8f:4c:b4:22:45:2d:8d:0a:7e:f5:c5:bb:81:24:b4:ff:
dc:51:b6:0a:0c:98:ef:d7:66:0e:95:13:20:23:6b:14:e9:79:
3b:7d:08:15:95:24:62:c4:8f:3a:4c:a3:6c:04:61:24:12:6c:
af:4e:85:96:4b:c8:48:21:76:27:e7:76:52:60:85:01:70:a4:
cc:cd:d2:52:c4:1e:a0:d9:1a:a4:5f:96:05:87:3b:3d:a2:a0:
05:7b:9a:87:75:ad:3a:9d:c9:eb:b3:51:04:91:4f:57:18:20:
86:1c:bc:50:3d:e6:8f:ee:c3:da:00:dd:f0:8c:21:62:9a:e5:
1e:2c:50:ec:48:71:5f:ba:3b:a8:26:6b:7d:1c:f0:a1:3c:f8:
70:05:04:4e:fa:2c:73:50:24:04:8a:40:b7:e0:61:41:f3:17:
47:b4:66:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNozCgfUcY3WeJAluIc+DHsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQxMTI2MTQwNzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGRiMGY4MmMyYWE4YWNkM2JjYjU0NzQyY2NkM2Y2MTc5NDU4NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0v2vrQ68Ruf9HeS1MNBHX6kBi9I
pOaGIpOdA6kg1fJbgvwGhCV/trbxFp71ThYvHzoYATU46aK0+mtTorjgeHvMBr9Z
ktKEzYTJCZkeeUySGgePW3HBT+SsSP9uReO+DeQd12pLRZNgTDNBQW1TQL018Y4S
GIeOc2kPak6GBiwy+jqLGoe7bCZ8g+7X4QIhU8DVksOm9Z1mEtDUmynx6sIDNK5C
EKWLZLzVytqUwZKzMZTwNzb9oMQt7t9pC5cFO2IB98dS0649z/8KA6dOj2N6kvo0
q0dAyVfNBw7IS1RhISfnlgGEZKUbtaehbhQyUjfUq16RztMySKxl60b/6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFATbD4LCqorNO8tUdCzNP2F5RYeNMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvQk5zUGdzS3FpczA3eTFSMExNMF9ZWGxGaDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaO4aMA0G
CSqGSIb3DQEBCwUAA4IBAQBXrpFm0LkGrn7Zynh4svF7RefsTbv/5N2z6jtd8OBg
ggIlNECVnqAOKtsk9SgKXIuk6HBah6UyGa/5eBt6flt2BHBnuGx3vdKWpQFJTT33
3VaMVFMLmEtSZEHhgI9MtCJFLY0KfvXFu4EktP/cUbYKDJjv12YOlRMgI2sU6Xk7
fQgVlSRixI86TKNsBGEkEmyvToWWS8hIIXYn53ZSYIUBcKTMzdJSxB6g2RqkX5YF
hzs9oqAFe5qHda06ncnrs1EEkU9XGCCGHLxQPeaP7sPaAN3wjCFimuUeLFDsSHFf
ujuoJmt9HPChPPhwBQRO+ixzUCQEikC34GFB8xdHtGb8
-----END CERTIFICATE-----
Generated at Wed Apr 23 03:41:38 2025 by rpki-client