Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ImWuvB1kHnIMQDD8b45lsDeXFWI.roa
File: ImWuvB1kHnIMQDD8b45lsDeXFWI.roa (raw, json)
Hash identifier: Mu5zDFbYOA4QMMwE2dWjBjZSQ/dTnKAGngFQLPo6CK4=
Subject key identifier: 22:65:AE:BC:1D:64:1E:72:0C:40:30:FC:6F:8E:65:B0:37:97:15:62
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0189D49F03C1B119D0959F4AE21F9EBAE362
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ImWuvB1kHnIMQDD8b45lsDeXFWI.roa
Signing time: Tue 08 Aug 2023 10:08:58 +0000
ROA not before: Tue 08 Aug 2023 10:08:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50304
IP address blocks: 64.137.64.0/23 maxlen: 23
104.143.252.0/24 maxlen: 24
64.137.68.0/24 maxlen: 24
64.137.79.0/24 maxlen: 24
64.137.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:9f:03:c1:b1:19:d0:95:9f:4a:e2:1f:9e:ba:e3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 8 10:08:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2265aebc1d641e720c4030fc6f8e65b037971562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:01:79:82:d5:e9:51:9a:e4:45:50:5f:04:
1f:ed:cf:85:9a:20:b8:91:94:da:12:7c:3b:72:8e:
2c:8f:7a:30:de:f0:72:2e:99:e1:20:e4:16:9f:aa:
1c:2b:7f:44:93:89:f1:16:b5:70:1c:17:72:b6:fd:
c9:b7:82:9c:a5:61:a1:4b:0e:08:fb:3d:b6:3a:21:
fe:37:0b:89:ab:35:97:7f:38:c9:73:8c:2d:1f:21:
18:fd:f5:d2:e5:9f:be:02:c0:1b:c9:35:c3:32:be:
4b:06:b4:bb:20:02:54:10:f2:f8:de:5e:57:19:ad:
de:f8:6f:9e:00:24:a4:51:c9:94:81:7e:4a:2d:39:
b9:08:7d:80:cc:86:ea:73:52:dd:65:44:eb:33:55:
88:f2:b5:a7:d7:08:50:77:0b:52:52:df:16:cf:13:
21:bd:3e:b5:c3:cc:60:80:a5:1e:f0:7b:c0:76:04:
22:81:c8:b0:ed:d2:8f:44:60:af:a5:18:9a:a4:0b:
50:71:47:a1:e5:78:da:2d:eb:53:25:ec:0f:74:e1:
34:23:78:73:1c:b7:7d:57:cc:0f:66:7d:7d:4f:b6:
df:f2:b0:78:ad:3a:4c:4d:63:6a:a8:c1:57:24:37:
5e:17:c5:46:54:f4:22:77:0e:a2:9d:52:49:13:ba:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:65:AE:BC:1D:64:1E:72:0C:40:30:FC:6F:8E:65:B0:37:97:15:62
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/ImWuvB1kHnIMQDD8b45lsDeXFWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.64.0/23
64.137.68.0/24
64.137.79.0/24
64.137.87.0/24
104.143.252.0/24
Signature Algorithm: sha256WithRSAEncryption
77:74:cd:50:4a:67:24:55:8f:00:98:7f:07:44:58:8e:77:c4:
49:8e:be:5a:84:7a:68:a5:80:d0:4b:68:48:e0:fe:72:40:be:
62:53:0c:e4:d3:f8:58:01:cd:b8:3e:54:d6:12:73:40:65:8d:
e1:be:39:f5:0d:92:a8:7a:d5:18:72:d0:4d:58:8f:4f:56:d0:
88:85:ef:1e:56:c7:7e:75:1a:38:62:48:4a:f1:cb:59:2a:4d:
b3:c5:54:ed:e2:04:14:73:2a:ef:c5:9e:09:cc:33:32:f7:62:
e8:97:2b:02:50:8e:21:5b:f2:ca:bb:09:0e:59:0f:91:5e:8b:
82:48:4f:71:b1:34:31:35:8e:5a:f8:e9:6f:c8:65:04:d3:6e:
89:73:e4:49:86:6d:49:db:65:0d:5e:9e:f5:e5:b8:3d:3d:a4:
8a:8f:3d:39:44:43:b0:1c:11:bc:25:a3:2d:35:40:f7:16:38:
05:94:ca:d9:4d:83:ed:46:8b:89:6e:5e:f5:92:eb:1d:f6:ac:
0f:50:ba:8f:21:86:22:bb:3f:4e:66:fa:f0:70:ab:f1:99:14:
e2:85:37:31:e1:7e:ce:a6:87:fa:0d:fa:6f:a8:db:73:bf:6c:
9d:9e:79:4c:78:45:75:6f:04:20:59:36:1b:66:1d:a6:d5:67:
48:da:e3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 11:03:27 2023 by rpki-client on console-ams.rpki-client.org