Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Hy_eoo4tdkKVvdBPtQeeAH6Kftg.roa
File: Hy_eoo4tdkKVvdBPtQeeAH6Kftg.roa (raw, json)
Hash identifier: HaA1LBPUgu31OqkM5g4aZEORWMdEtzHG7aTtmH+nZGM=
Subject key identifier: 1F:2F:DE:A2:8E:2D:76:42:95:BD:D0:4F:B5:07:9E:00:7E:8A:7E:D8
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794CB67777A30167E718080EA7E36C2
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Hy_eoo4tdkKVvdBPtQeeAH6Kftg.roa
Signing time: Tue 02 Jan 2024 00:31:06 +0000
ROA not before: Tue 02 Jan 2024 00:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 104.239.92.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.167.0.0/24 maxlen: 24
216.173.122.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.233.20.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
104.239.16.0/22 maxlen: 22
104.239.20.0/22 maxlen: 22
216.173.108.0/24 maxlen: 24
104.239.36.0/22 maxlen: 22
104.239.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 20 Mar 2024 16:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:cb:67:77:7a:30:16:7e:71:80:80:ea:7e:36:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2fdea28e2d764295bdd04fb5079e007e8a7ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:63:6d:2e:96:a4:7f:27:56:c8:a3:07:ac:
a2:72:4e:9e:6e:5b:9f:dc:f5:ea:59:c8:3a:06:e1:
8e:74:1b:51:7c:82:05:26:5d:1e:1b:94:82:a1:d4:
9c:6e:83:21:b4:46:9b:5a:f5:0a:03:df:3e:d5:d8:
99:35:d2:8b:0a:05:64:c1:0c:76:b0:3f:5c:d1:bd:
5e:1f:3a:4d:90:6e:ec:79:07:d4:fd:6f:58:d2:72:
13:09:eb:f0:f6:73:5a:3a:b3:79:ed:a5:ae:ed:69:
9f:e0:19:17:02:35:c9:71:38:b7:15:fb:59:03:c5:
ac:61:f0:49:ce:58:f9:95:bf:09:44:c8:5b:7d:50:
c2:89:0a:dd:e5:78:59:5a:e7:84:bf:35:01:24:7f:
09:d6:15:29:9a:eb:82:98:8c:ec:62:21:be:4b:2b:
5a:5c:07:09:9a:16:47:dd:ce:aa:6a:ac:85:60:f8:
3c:a8:ac:64:c7:c1:91:07:33:fa:fb:f4:56:f5:ec:
14:33:6f:ca:bc:09:88:1c:2b:b0:00:2c:cd:ff:11:
4f:72:cc:68:5b:d7:32:2d:ee:a4:f3:34:ac:fb:f0:
f0:e6:87:74:4d:ac:d2:73:73:86:c6:cc:79:bf:95:
ec:7b:1a:df:96:4f:3a:6c:16:f4:64:2b:e1:1f:a5:
d8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:DE:A2:8E:2D:76:42:95:BD:D0:4F:B5:07:9E:00:7E:8A:7E:D8
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Hy_eoo4tdkKVvdBPtQeeAH6Kftg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.0.0/24
104.233.20.0/24
104.239.13.0/24
104.239.16.0/21
104.239.32.0/21
104.239.82.0/24
104.239.90.0-104.239.93.255
104.239.98.0/24
216.173.80.0/23
216.173.88.0/23
216.173.108.0/24
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
81:c6:2b:89:ab:7b:c7:2d:84:13:d5:c4:e2:49:3c:99:3a:4e:
f9:a2:cd:64:fa:db:e7:f7:26:b6:e6:8e:b4:96:8d:d4:d2:18:
78:f0:b4:0e:e9:18:6e:3d:de:4f:d3:1e:6a:f6:99:b5:b9:ad:
ad:77:b3:c4:9a:1b:3e:3c:7e:51:78:d1:57:e1:9b:b2:05:f8:
51:c7:03:d8:75:0c:f9:4f:6a:09:45:07:a0:7c:0a:5a:3b:ea:
0d:df:19:8a:bb:71:54:a1:2d:11:cc:17:5f:19:52:44:06:ec:
0e:e9:bf:41:62:cd:c7:03:5e:97:2d:df:8c:4d:f9:e7:fa:6a:
4a:31:d8:e7:26:6a:8d:fd:af:23:d4:42:26:35:5e:cc:4b:7f:
b2:f8:ba:6c:c5:98:a7:36:d5:cb:8b:1a:34:d3:db:65:8a:0d:
72:9d:cb:3d:ef:c5:64:82:e3:78:3b:25:fc:78:77:bf:09:af:
af:42:90:5e:17:71:3d:43:9c:4b:99:ed:06:06:09:96:1c:dc:
e6:52:f9:99:d1:2b:de:be:71:25:96:33:8d:7b:72:51:24:2f:
74:8e:7c:20:e4:4d:8f:2d:07:57:86:ba:e3:40:57:c2:e9:65:
05:0f:7c:47:b9:9b:20:cf:0f:ce:65:46:bd:b4:47:37:73:96:
af:ab:08:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 20 19:58:05 2024 by rpki-client on console-ams.rpki-client.org