Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/KKFHi0QUJ20dTkGM4e6X_MzTW0g.roa
File: KKFHi0QUJ20dTkGM4e6X_MzTW0g.roa (raw, json)
Hash identifier: V+cWkuqqNI0UK6ZAWUYoth5ThVYZR6UdgpwiSE4thoI=
Subject key identifier: 28:A1:47:8B:44:14:27:6D:1D:4E:41:8C:E1:EE:97:FC:CC:D3:5B:48
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185E9A0964CC3CCE1E06993264F00FEC46B
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/KKFHi0QUJ20dTkGM4e6X_MzTW0g.roa
Signing time: Wed 25 Jan 2023 15:51:33 +0000
ROA not before: Wed 25 Jan 2023 15:51:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 104.239.92.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
104.167.0.0/24 maxlen: 24
216.173.122.0/23 maxlen: 23
104.239.76.0/23 maxlen: 23
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.86.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
216.173.84.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
104.239.13.0/24 maxlen: 24
216.173.103.0/24 maxlen: 24
216.173.108.0/24 maxlen: 24
216.173.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:a0:96:4c:c3:cc:e1:e0:69:93:26:4f:00:fe:c4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 25 15:51:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28a1478b4414276d1d4e418ce1ee97fcccd35b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:4c:b1:58:29:6c:61:b6:4f:bf:57:cf:b1:
a3:1e:c5:83:7a:af:23:b0:3b:52:e7:c0:84:55:e9:
53:f7:36:67:31:bf:1a:bf:4a:c1:62:d0:01:83:33:
2a:b7:c5:1f:a6:2b:64:c0:f3:73:32:b9:e5:86:e2:
4b:05:25:e7:be:3f:56:bf:c3:3d:44:55:e5:25:e1:
1a:96:6c:1b:96:e6:1b:c5:ad:6c:d4:92:16:4b:0f:
36:e9:63:3a:4a:cb:32:a8:ab:37:24:6b:2b:f5:5c:
ac:fd:9f:0e:e7:16:fb:66:44:3c:50:0a:29:5c:ad:
6c:93:90:df:3c:b2:b8:f0:de:ba:29:bf:86:d1:69:
9c:ba:2b:23:5d:2d:8a:05:74:35:9b:41:4a:63:13:
10:6d:c2:f2:1d:bd:6f:b5:9f:42:63:db:b1:f5:e1:
b6:3a:03:80:41:49:10:de:7e:7d:70:14:bc:52:04:
2c:dd:58:5e:9e:10:19:bf:15:6b:68:20:a4:ae:2a:
cd:64:c0:09:b1:78:c4:a1:f4:d7:df:5b:b7:11:81:
f0:34:86:c4:ea:7f:d8:c5:e0:df:67:ff:e5:a2:a3:
53:5a:8f:5c:99:e4:d5:aa:e8:01:86:8e:9f:ae:a8:
d3:33:36:4b:0f:68:82:5c:1d:67:5d:d8:5f:45:bf:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:A1:47:8B:44:14:27:6D:1D:4E:41:8C:E1:EE:97:FC:CC:D3:5B:48
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/KKFHi0QUJ20dTkGM4e6X_MzTW0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.0.0/24
104.233.20.0/24
104.239.13.0/24
104.239.76.0/23
104.239.82.0/24
104.239.86.0/24
104.239.90.0-104.239.93.255
104.239.98.0/24
104.239.101.0/24
104.239.108.0/24
216.173.80.0/23
216.173.84.0/24
216.173.88.0/23
216.173.103.0/24
216.173.108.0/23
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:49:59:fa:3d:85:87:d0:31:43:a7:48:f5:4c:e6:13:a9:84:
99:a0:8e:57:d5:eb:e4:db:83:27:1d:93:89:5a:b5:85:e6:45:
70:92:52:ae:c1:1f:50:96:5f:d8:51:89:86:87:9a:c3:d6:07:
87:da:5f:93:2d:cc:07:0a:28:44:68:8f:a9:a9:df:ad:14:c0:
1d:71:c0:40:bc:a2:01:9c:72:34:7d:9d:68:cc:ab:c4:99:2e:
77:27:06:3c:9a:3c:eb:ee:58:b2:f4:88:3b:2d:1e:c8:70:23:
8f:6f:67:7b:30:b8:c6:36:a9:40:83:ac:fd:22:11:60:2f:ce:
20:9a:53:7d:da:ad:7e:f8:db:c7:fe:f3:1d:9c:69:46:0d:e0:
25:58:bf:71:e8:c0:1b:30:94:15:96:24:4d:a4:11:1b:cf:b3:
94:7f:03:88:f9:25:6c:f2:1f:aa:bc:38:e3:13:56:81:98:4b:
c6:8d:f4:1b:eb:ad:07:2b:fc:85:79:dd:1b:3c:8f:23:20:7b:
80:69:70:9c:31:9a:78:c9:75:55:3b:b0:cd:5c:92:6b:d5:5a:
90:38:8e:dc:2b:57:c5:10:7b:5b:d6:46:5e:23:2f:6d:b4:8e:
30:a8:94:ed:84:91:f3:a2:a1:8c:55:2b:74:d5:a9:28:f2:a1:
6e:5e:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org