Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HD2iqgsMczgBnD5muuzOX2oGvDI.roa
File: HD2iqgsMczgBnD5muuzOX2oGvDI.roa (raw, json)
Hash identifier: ivoYZdF0R7Z01r41XmGd06CMf+i92cFQArhwNsKb/IY=
Subject key identifier: 1C:3D:A2:AA:0B:0C:73:38:01:9C:3E:66:BA:EC:CE:5F:6A:06:BC:32
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EB578193D93B1F369DC19F41F81E7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HD2iqgsMczgBnD5muuzOX2oGvDI.roa
Signing time: Mon 02 Jan 2023 12:04:47 +0000
ROA not before: Mon 02 Jan 2023 12:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.103.0/24 maxlen: 24
216.173.104.0/24 maxlen: 24
216.173.102.0/24 maxlen: 24
216.173.105.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.239.28.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
104.239.94.0/24 maxlen: 24
104.239.98.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
104.239.44.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.73.0/24 maxlen: 24
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.239.88.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
104.238.4.0/24 maxlen: 24
104.238.7.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:b5:78:19:3d:93:b1:f3:69:dc:19:f4:1f:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c3da2aa0b0c7338019c3e66baecce5f6a06bc32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:9f:4d:a3:fa:3a:5d:d7:12:cd:9d:c6:fd:
02:c9:d0:59:45:2e:2c:df:ff:b9:ea:24:30:6f:7c:
ba:82:26:17:af:54:82:d3:80:8b:f0:9a:c1:16:75:
ef:57:80:15:16:2b:2c:49:27:d3:7f:36:e5:73:c3:
c6:fc:7d:25:13:4d:b5:0e:dc:11:b8:8b:7b:3f:0d:
7d:a4:e1:21:7e:84:07:50:1d:c8:1b:0c:ea:89:b5:
fc:3e:13:8c:d1:25:c7:2f:5f:22:18:79:3d:c0:d5:
e1:2d:14:c1:f3:90:f9:4c:6b:8d:60:11:b9:f0:2b:
91:22:d3:be:41:34:9a:36:3a:ba:2a:2c:4d:ab:82:
e9:7e:f9:e2:b9:a0:4d:3a:1a:b0:e5:b1:33:b3:02:
2d:0e:d9:51:c8:44:7e:3e:10:5a:2e:9b:fe:76:05:
b6:ae:0e:f9:91:a9:d4:ee:23:fb:98:ab:9d:11:aa:
84:a8:c0:01:e2:28:28:db:1b:72:0e:76:a8:a4:2c:
fb:74:f4:19:98:dc:20:0a:94:58:d2:72:4c:b2:0f:
9a:18:a2:c6:df:91:36:13:44:45:93:8e:10:9f:bf:
17:26:9c:bd:06:76:3a:9a:29:fc:7d:02:33:05:bb:
0b:4a:ca:e8:b7:18:b4:7d:6f:f1:73:e7:23:75:4f:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:A2:AA:0B:0C:73:38:01:9C:3E:66:BA:EC:CE:5F:6A:06:BC:32
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/HD2iqgsMczgBnD5muuzOX2oGvDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.7.0-104.238.10.255
104.239.10.0/23
104.239.28.0/24
104.239.30.0/23
104.239.44.0/24
104.239.73.0/24
104.239.75.0-104.239.78.255
104.239.80.0-104.239.82.255
104.239.86.0/24
104.239.88.0/24
104.239.90.0/23
104.239.94.0/24
104.239.98.0/24
104.239.101.0/24
104.239.104.0-104.239.108.255
104.239.111.0/24
104.239.124.0-104.239.126.255
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0-216.173.110.255
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:67:de:f0:18:35:17:36:ad:7d:83:54:dc:90:76:42:b8:c0:
85:28:47:b8:1b:47:01:f7:a0:2b:06:b0:1f:3d:0e:61:82:0a:
ad:54:d6:06:a1:59:d6:a8:1d:2e:a4:71:c2:a9:f4:33:24:c3:
1a:78:34:85:7b:24:69:bb:cf:f6:f3:5f:ef:17:85:b2:08:e0:
0a:76:4c:d5:24:74:89:64:0b:2d:b8:d2:1b:61:84:a2:fe:dd:
67:95:f5:0a:0a:d9:19:d6:44:e1:e2:97:36:6a:9a:b7:bd:6f:
0c:18:51:29:05:1c:30:5d:10:24:c7:41:ec:90:a8:e3:92:b0:
9d:d1:5b:a1:42:0f:77:c5:62:5a:ec:9a:42:33:b8:28:15:d5:
04:ea:6c:f3:af:98:7f:64:20:81:cc:77:bc:ef:3d:09:c5:9a:
78:4d:3d:b0:ea:5a:39:62:01:5e:8f:43:5e:c2:7a:53:89:91:
e6:39:ca:59:20:b1:2f:03:8c:9e:bd:8e:bb:85:d2:83:c2:d5:
12:a7:78:80:3f:e6:6c:48:df:96:5a:f4:56:47:8f:87:9d:95:
d9:54:1f:85:15:8c:05:91:ba:7d:f3:47:d3:6f:e4:ad:e2:23:
10:e6:02:f0:27:63:d3:1a:f1:0a:6c:21:c5:b7:ab:b1:66:98:
d8:dc:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org