Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L2BtRFpTIzsqkD_sshy13fL4wQQ.roa
File: L2BtRFpTIzsqkD_sshy13fL4wQQ.roa (raw, json)
Hash identifier: dGBV00YhkgsxRU7b/vo35EfkkPahjWLw3EUJOBvtFgg=
Subject key identifier: 2F:60:6D:44:5A:53:23:3B:2A:90:3F:EC:B2:1C:B5:DD:F2:F8:C1:04
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EB636148F743AE42664E1CDF25EC9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L2BtRFpTIzsqkD_sshy13fL4wQQ.roa
Signing time: Mon 02 Jan 2023 12:04:47 +0000
ROA not before: Mon 02 Jan 2023 12:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 104.249.56.0/22 maxlen: 22
45.43.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:b6:36:14:8f:74:3a:e4:26:64:e1:cd:f2:5e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f606d445a53233b2a903fecb21cb5ddf2f8c104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b0:36:0a:27:5b:b8:f3:c1:09:b4:d9:93:8b:
b6:36:fa:70:a1:2f:b0:ee:37:ce:92:f1:02:1b:91:
55:b1:22:64:74:51:09:33:be:b0:6b:b0:93:b2:60:
0c:89:3c:5b:68:e8:f1:0b:8a:f7:d2:8c:66:2f:c4:
7a:98:39:77:71:e6:8c:33:26:36:12:08:3a:9b:55:
17:c0:fc:6f:11:da:be:61:91:ac:5f:f4:8a:a2:c3:
d3:5f:29:6b:37:28:6d:6e:46:f4:fc:b4:e8:80:92:
c5:3d:13:58:76:a7:44:7a:3a:61:b1:2f:a7:23:93:
87:08:ac:e9:c2:2f:a2:79:c6:d8:26:86:4e:11:85:
d3:59:4b:31:17:2e:69:95:d6:76:0f:b5:d3:a9:71:
b0:3d:93:26:0b:30:86:00:1f:e1:f1:ab:24:09:52:
ce:e2:71:cb:cf:36:dd:2f:aa:56:6a:a4:ed:da:e9:
5f:a9:a6:67:b9:66:1d:86:ed:7f:93:83:18:ab:3e:
14:7f:34:8d:c9:d0:67:49:53:76:49:b8:e4:62:5d:
df:82:de:e5:89:e6:22:2a:6d:0b:e9:c6:2d:d3:8c:
23:02:a8:48:d0:a9:80:6c:95:57:c3:d0:6c:03:8b:
90:e2:f5:f0:90:ee:70:ce:4f:84:50:69:fe:22:de:
f3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:60:6D:44:5A:53:23:3B:2A:90:3F:EC:B2:1C:B5:DD:F2:F8:C1:04
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L2BtRFpTIzsqkD_sshy13fL4wQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:7c:fc:9b:f4:69:0f:1b:f5:4b:95:b7:e3:61:32:76:cb:9a:
ff:b4:5d:91:e8:d8:e8:46:e7:28:bc:88:e7:bc:82:fe:9a:1b:
2e:8f:3b:e5:0e:f4:51:38:83:31:8f:8b:ac:38:de:75:e5:1a:
91:56:d5:39:5d:94:c2:40:02:cf:6c:95:50:5d:7d:c9:25:db:
90:03:2b:af:9c:a1:59:56:e5:57:e5:3f:a7:31:3a:03:85:6c:
b0:a0:c8:84:08:a2:d6:69:f6:27:c7:6c:07:e7:ab:06:0d:5d:
a5:db:09:27:f7:3b:bc:f1:73:d2:64:06:09:ad:e1:0d:f5:6a:
ba:b0:9a:bc:b6:74:ae:eb:2e:ff:ee:b5:5c:dc:f9:d0:a9:3f:
2b:75:52:db:94:01:52:ef:fc:74:4f:f5:5c:16:d0:e3:01:98:
32:65:60:83:ca:3e:94:ed:be:6d:d4:49:7c:77:69:8e:72:73:
4b:21:d4:05:39:03:ef:5d:95:0c:30:48:c5:5e:83:33:db:7b:
e3:29:37:46:ed:1e:51:0c:18:0d:0c:fb:f2:06:07:96:a4:88:
6a:eb:a6:95:94:5d:37:08:9d:ab:ea:ea:f4:d4:0b:7f:b0:12:
39:53:91:d9:43:c2:11:87:2a:c0:d7:24:3e:45:0b:b3:1c:cf:
3d:77:5a:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyXrY2FI90OuQmZOHN8l7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjMwMTAyMTIwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjYwNmQ0NDVhNTMyMzNiMmE5MDNmZWNiMjFjYjVkZGYyZjhjMTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLA2CidbuPPBCbTZk4u2NvpwoS+w
7jfOkvECG5FVsSJkdFEJM76wa7CTsmAMiTxbaOjxC4r30oxmL8R6mDl3ceaMMyY2
Egg6m1UXwPxvEdq+YZGsX/SKosPTXylrNyhtbkb0/LTogJLFPRNYdqdEejphsS+n
I5OHCKzpwi+iecbYJoZOEYXTWUsxFy5pldZ2D7XTqXGwPZMmCzCGAB/h8askCVLO
4nHLzzbdL6pWaqTt2ulfqaZnuWYdhu1/k4MYqz4UfzSNydBnSVN2SbjkYl3fgt7l
ieYiKm0L6cYt04wjAqhI0KmAbJVXw9BsA4uQ4vXwkO5wzk+EUGn+It7zmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFC9gbURaUyM7KpA/7LIctd3y+MEEMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvTDJCdFJGcFRJenNxa0Rfc3NoeTEzZkw0d1FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLSuEAwQC
aPk4MA0GCSqGSIb3DQEBCwUAA4IBAQAbfPyb9GkPG/VLlbfjYTJ2y5r/tF2R6Njo
RucovIjnvIL+mhsujzvlDvRROIMxj4usON515RqRVtU5XZTCQALPbJVQXX3JJduQ
AyuvnKFZVuVX5T+nMToDhWywoMiECKLWafYnx2wH56sGDV2l2wkn9zu88XPSZAYJ
reEN9Wq6sJq8tnSu6y7/7rVc3PnQqT8rdVLblAFS7/x0T/VcFtDjAZgyZWCDyj6U
7b5t1El8d2mOcnNLIdQFOQPvXZUMMEjFXoMz23vjKTdG7R5RDBgNDPvyBgeWpIhq
66aVlF03CJ2r6ur01At/sBI5U5HZQ8IRhyrA1yQ+RQuzHM89d1pi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:03 2024 by rpki-client on console-fra.rpki-client.org