Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CIZErrjn9zBdYCWb9QBumMTQq_M.roa
File: CIZErrjn9zBdYCWb9QBumMTQq_M.roa (raw, json)
Hash identifier: mWARz3DKm4Mv8WW18ayfsbfBkxjpvt0okVxaXTIYaNA=
Subject key identifier: 08:86:44:AE:B8:E7:F7:30:5D:60:25:9B:F5:00:6E:98:C4:D0:AB:F3
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018E8B74332E50DDF5183B663BC0C2FFD1FD
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CIZErrjn9zBdYCWb9QBumMTQq_M.roa
Signing time: Fri 29 Mar 2024 18:23:52 +0000
ROA not before: Fri 29 Mar 2024 18:23:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 104.222.190.0/24 maxlen: 24
104.249.32.0/22 maxlen: 24
216.173.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 15:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8b:74:33:2e:50:dd:f5:18:3b:66:3b:c0:c2:ff:d1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 29 18:23:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088644aeb8e7f7305d60259bf5006e98c4d0abf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8d:1f:d9:8b:b4:9c:5b:0e:0a:a8:01:0c:42:
d2:3a:77:98:82:03:9c:37:83:e9:c9:e8:d8:1b:c4:
f5:6d:6f:ba:75:b5:a8:e1:71:87:6b:7e:66:20:7f:
99:8d:70:bf:f3:3a:66:8a:6b:f8:48:af:f4:a0:fd:
fd:7b:24:08:8f:03:3c:bf:f1:a2:67:0a:3c:a9:e0:
ae:a7:a5:21:f2:33:c4:b3:89:af:27:a6:e1:96:04:
f9:14:c5:e0:00:8c:86:5f:31:9f:93:55:e3:bf:b7:
4d:a5:8c:70:ee:22:19:69:5e:af:39:3c:1e:0d:fe:
97:28:4d:0e:2b:70:01:c4:9d:5f:1c:ae:62:78:5c:
e3:e2:d6:26:34:66:02:4c:03:dc:38:38:63:9f:cd:
23:fa:fd:73:2e:96:2c:c9:84:c5:0d:86:5d:18:c4:
98:b7:ad:9e:11:c7:79:41:18:cf:11:1e:17:2e:12:
a2:37:44:39:fe:91:26:a6:f3:7b:70:0e:0c:36:fd:
9f:79:06:95:e8:fd:8b:2e:59:80:f7:e0:ee:6b:04:
d5:b8:63:c3:6f:ef:ab:5c:9d:7a:53:69:e3:80:78:
a0:aa:64:fe:58:9a:76:01:62:d5:f0:82:e3:d9:52:
d1:b5:2f:91:33:ec:8b:78:87:42:37:4e:5f:03:81:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:44:AE:B8:E7:F7:30:5D:60:25:9B:F5:00:6E:98:C4:D0:AB:F3
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/CIZErrjn9zBdYCWb9QBumMTQq_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.222.190.0/24
104.249.32.0/22
216.173.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a4:56:b8:b5:f0:15:09:b0:68:52:0b:19:21:10:5e:3c:79:
7a:e2:11:e4:01:01:de:12:9e:80:23:63:b3:f8:be:e6:6a:3a:
8c:0d:db:2e:02:00:87:91:cc:4b:cf:48:bf:61:98:04:65:cb:
fd:30:8d:ea:ce:5d:29:a0:ae:80:dd:01:ff:07:c6:b4:6c:a3:
a7:c6:bd:6a:07:55:c3:6e:76:78:be:d6:22:17:84:96:73:ca:
84:6c:82:38:01:ac:1f:ec:9f:71:05:f2:f6:72:f2:8b:e9:f0:
3f:a1:e0:25:70:d4:11:36:89:c9:cc:0b:04:3b:fe:3c:e5:02:
03:12:6b:f7:ec:e7:85:86:78:0c:d4:ef:7b:89:b9:64:0f:da:
58:97:62:9a:7e:28:cf:30:14:0d:57:19:98:de:2a:ca:62:e4:
0f:66:c3:76:5a:8d:ad:4a:7d:d3:17:bd:53:38:7a:e7:3b:bd:
c7:74:b6:e7:32:5f:5e:57:ef:b4:5a:46:19:0f:2f:51:3a:3f:
57:0d:2c:4c:c3:8b:35:f5:b1:67:9b:50:78:cb:c2:60:05:d0:
1d:3c:60:23:90:34:7e:6d:a9:8d:4c:c7:3c:3b:d1:76:42:f7:
58:e7:4f:bc:4d:63:33:4e:0c:a8:00:3e:86:fb:5a:e4:34:f2:
25:56:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:12 2024 by rpki-client on console-ams.rpki-client.org