Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6tcKft9E_vcBB0b7YEAotAeOSw.roa
File: G6tcKft9E_vcBB0b7YEAotAeOSw.roa (raw, json)
Hash identifier: jXDDhBKgLevhfrFpZJp43p2jn8O0PmXb22F5ntCbnLw=
Subject key identifier: 1B:AB:5C:29:FB:7D:13:FB:DC:04:1D:1B:ED:81:00:A2:D0:1E:39:2C
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0188776A929B86A879092BFD7B58CCA37E0D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6tcKft9E_vcBB0b7YEAotAeOSw.roa
Signing time: Thu 01 Jun 2023 14:44:12 +0000
ROA not before: Thu 01 Jun 2023 14:44:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 64.137.29.0/24 maxlen: 24
64.137.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:6a:92:9b:86:a8:79:09:2b:fd:7b:58:cc:a3:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jun 1 14:44:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bab5c29fb7d13fbdc041d1bed8100a2d01e392c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ce:72:3e:be:1e:39:f0:5d:cf:e4:72:68:96:
dd:b0:a5:e7:e9:64:cd:ef:74:48:74:3f:af:3f:98:
ad:2b:87:1e:dd:76:07:91:83:29:33:33:06:f6:9e:
b3:ac:bd:96:8f:d9:98:09:fa:c2:41:98:b4:dc:1d:
2f:02:4a:09:7d:b0:ba:13:1f:ea:d8:96:62:13:fb:
58:e2:c7:09:86:5f:3a:6d:54:4c:46:34:a3:1c:da:
c0:b5:02:c7:82:a5:06:72:da:26:64:c7:6b:e4:4c:
f1:df:2a:a4:41:4f:8b:4b:ef:aa:71:ff:99:ff:7f:
4a:1d:c0:3b:5e:80:c9:cf:69:0f:1a:ca:43:40:8f:
21:26:6f:c0:f3:8a:50:9d:3c:e4:d6:ff:08:9a:d8:
40:86:fa:98:ca:da:b7:0f:1e:77:a2:fe:8f:47:07:
b0:7d:bf:e2:d6:04:2d:41:85:7f:fb:84:6d:07:76:
22:20:a0:d8:99:69:f3:02:5c:6b:41:06:7c:5b:61:
26:90:3e:37:3d:b9:b5:3c:0d:97:bc:48:61:80:1b:
a3:f0:2b:2a:b5:dd:0c:97:59:6a:bd:c0:28:ff:c8:
1a:02:10:cf:bb:ca:62:1f:a0:66:49:de:df:d5:1e:
98:a2:49:2d:30:33:46:94:ed:5d:1a:f0:e1:09:ed:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AB:5C:29:FB:7D:13:FB:DC:04:1D:1B:ED:81:00:A2:D0:1E:39:2C
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/G6tcKft9E_vcBB0b7YEAotAeOSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
64.137.114.0/24
Signature Algorithm: sha256WithRSAEncryption
73:94:6a:47:19:ec:05:fc:32:7d:d5:2b:8e:3e:7a:42:d2:9b:
a7:8e:ba:f2:56:78:99:22:ae:89:8f:08:c5:4c:6b:2f:77:9c:
8a:22:fa:c3:5b:68:b3:5a:e5:38:14:38:76:45:08:b7:f4:5e:
e1:5a:86:e3:99:bb:32:87:56:60:df:d0:2c:33:1b:ba:d1:2a:
81:cf:fc:ae:eb:0e:cb:94:c5:fc:9c:73:d1:9e:49:90:71:e2:
1c:0a:49:3c:35:bd:eb:33:39:af:ac:79:ff:0e:0a:36:23:ab:
34:e6:7e:a5:9f:f8:69:da:19:fd:b7:d4:2f:7e:0e:55:7d:34:
20:e9:ff:b5:87:48:9a:c5:a8:e7:f3:06:72:f0:fb:d2:6a:06:
c8:21:4a:a1:37:02:7e:db:04:d0:6b:92:cf:d4:28:ac:b9:83:
60:ec:f3:30:2e:2e:8a:ab:25:e9:cc:11:ab:1e:af:98:1f:ab:
1f:8e:fa:c9:d5:c3:1e:16:b7:5e:f1:14:56:b2:71:5c:93:c7:
ca:75:32:0d:e2:a9:0a:fe:d7:04:cc:54:06:e5:ac:4e:3e:1c:
1c:e4:4c:2b:d0:29:25:32:06:8a:90:df:18:f6:d4:af:e0:17:
85:0c:8b:cd:91:00:5c:4c:ec:7e:af:6e:e7:58:d0:e2:70:96:
c3:76:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org