Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L7ncx2xbnhhEO42YI_9gv9N512k.roa
File: L7ncx2xbnhhEO42YI_9gv9N512k.roa (raw, json)
Hash identifier: ZXEMLj4Pw4/VwpUjD4pBBWvbHtyy7sfzKojg16HSQwA=
Subject key identifier: 2F:B9:DC:C7:6C:5B:9E:18:44:3B:8D:98:23:FF:60:BF:D3:79:D7:69
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CC794D2CE75041AE7E1CA9843E399EE4C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L7ncx2xbnhhEO42YI_9gv9N512k.roa
Signing time: Tue 02 Jan 2024 00:31:08 +0000
ROA not before: Tue 02 Jan 2024 00:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 64.137.74.0/24 maxlen: 24
64.137.73.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.89.0/24 maxlen: 24
64.137.96.0/22 maxlen: 22
64.137.94.0/23 maxlen: 23
64.137.92.0/23 maxlen: 23
64.137.100.0/23 maxlen: 23
104.249.29.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.36.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
104.143.232.0/21 maxlen: 21
64.137.42.0/23 maxlen: 23
104.143.240.0/22 maxlen: 22
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
104.143.248.0/21 maxlen: 24
64.137.60.0/22 maxlen: 22
104.238.0.0/22 maxlen: 22
104.233.0.0/21 maxlen: 21
138.128.151.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
138.128.153.0/24 maxlen: 24
64.137.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 15:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:d2:ce:75:04:1a:e7:e1:ca:98:43:e3:99:ee:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 00:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fb9dcc76c5b9e18443b8d9823ff60bfd379d769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:5a:44:95:c1:0f:56:98:5b:f6:e3:4a:ea:
37:07:cb:a3:08:ed:68:f4:ca:b2:5f:9a:46:7c:2a:
11:13:d5:73:d1:c6:53:f1:e3:08:19:5b:0f:3d:9a:
49:78:55:b9:4a:79:29:83:f6:54:e7:ad:a3:e4:3d:
c8:13:41:d0:ef:31:9a:73:13:b8:7e:b6:a1:da:34:
cc:ed:ed:65:73:25:77:27:23:db:a2:32:fa:e3:fc:
0a:f9:b6:23:1a:86:c6:d0:c5:ba:41:f5:ad:29:cc:
db:3b:93:4e:fe:d2:8e:be:72:5e:85:b2:23:da:b9:
1d:3f:23:7c:c2:9a:a3:88:35:3f:8c:db:3f:a3:86:
ba:13:bd:50:d5:1f:ee:29:dd:93:31:0b:e4:97:71:
b2:0c:8a:08:1e:bf:c8:10:6a:dc:d5:d6:69:21:04:
a4:b8:ba:fa:08:36:b9:50:32:c4:7e:93:87:01:44:
ec:3b:79:2c:d4:46:f1:11:e2:ab:f8:ee:ea:93:87:
d5:71:48:e0:27:2a:02:21:fd:03:98:8f:9b:07:47:
d6:06:18:7b:38:aa:12:d9:6c:5c:0f:e4:98:fa:2b:
f4:0a:06:92:31:e9:a8:27:da:49:53:c3:32:2e:ed:
a3:42:fd:e8:84:91:37:f3:9c:f4:e2:c9:6f:9c:b9:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:B9:DC:C7:6C:5B:9E:18:44:3B:8D:98:23:FF:60:BF:D3:79:D7:69
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/L7ncx2xbnhhEO42YI_9gv9N512k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.74.255
64.137.77.0-64.137.78.255
64.137.80.0/22
64.137.89.0/24
64.137.92.0-64.137.101.255
104.143.232.0-104.143.243.255
104.143.248.0/21
104.233.0.0/21
104.238.0.0/22
104.239.95.0/24
104.249.29.0/24
104.249.36.0/23
104.249.55.0/24
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
34:36:67:7b:54:c3:a6:8e:fe:f0:e0:9d:af:6f:1b:a0:e7:c4:
63:fa:2c:74:ad:c1:1d:af:25:26:1e:f8:29:d6:65:48:20:c6:
c6:57:7d:8f:53:59:34:7e:18:c6:c6:84:9d:6f:17:ab:71:b4:
19:ae:8b:6f:b7:ab:b6:b4:43:b5:03:52:e9:0c:65:56:e1:79:
59:b5:5b:c1:63:9f:94:a1:66:a2:55:31:cf:ea:33:56:80:d9:
04:41:8e:b9:2a:dc:a8:20:56:50:9c:83:e2:c8:5d:46:11:19:
98:6c:10:6a:48:8a:81:4b:5b:a2:d4:db:54:31:88:ef:91:ad:
27:9e:19:99:a7:32:98:6f:06:f2:3f:3b:c4:d4:fa:00:aa:56:
7c:0f:51:7e:b1:b3:45:4c:d1:f1:bf:0b:a4:08:18:ee:6c:38:
87:fd:b8:fc:5b:14:38:de:da:1f:e4:bd:47:1f:9b:72:45:42:
8d:c9:77:2b:e4:b9:2c:f9:a7:26:90:1d:36:05:53:a8:da:03:
21:af:df:f7:ba:73:08:0b:97:76:61:ae:21:f1:56:96:d0:2e:
ad:3b:f4:8f:5c:16:d4:15:09:1e:6a:7f:37:9b:96:fe:14:4d:
f7:5d:ec:f7:74:74:3a:2c:f4:d3:fa:a1:46:05:0e:37:28:0a:
02:de:9d:ad
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAYzHlNLOdQQa5+HKmEPjme5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQwMTAyMDAzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmI5ZGNjNzZjNWI5ZTE4NDQzYjhkOTgyM2ZmNjBiZmQzNzlkNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJVaRJXBD1aYW/bjSuo3B8ujCO1o
9MqyX5pGfCoRE9Vz0cZT8eMIGVsPPZpJeFW5Snkpg/ZU562j5D3IE0HQ7zGacxO4
frah2jTM7e1lcyV3JyPbojL64/wK+bYjGobG0MW6QfWtKczbO5NO/tKOvnJehbIj
2rkdPyN8wpqjiDU/jNs/o4a6E71Q1R/uKd2TMQvkl3GyDIoIHr/IEGrc1dZpIQSk
uLr6CDa5UDLEfpOHAUTsO3ks1EbxEeKr+O7qk4fVcUjgJyoCIf0DmI+bB0fWBhh7
OKoS2WxcD+SY+iv0CgaSMemoJ9pJU8MyLu2jQv3ohJE385z04slvnLnXHQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFC+53MdsW54YRDuNmCP/YL/TeddpMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvTDduY3gyeGJuaGhFTzQyWUlfOWd2OU41MTJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHPBggrBgEFBQcBBwEB/wSBvzCBvDCBuQQCAAEwgbIDBABA
iQgDBAFAiQoDBAFAiQ4DBAFAiRIDBAFAiSoDBAFAiTAwDAMEAUCJOgMEBkCJADAM
AwQAQIlJAwQAQIlKMAwDBABAiU0DBABAiU4DBAJAiVADBABAiVkwDAMEAkCJXAME
AUCJZDAMAwQDaI/oAwQCaI/wAwQDaI/4AwQDaOkAAwQCaO4AAwQAaO9fAwQAaPkd
AwQBaPkkAwQAaPk3AwQAioCXAwQAioCZAwQA2K1vMA0GCSqGSIb3DQEBCwUAA4IB
AQA0Nmd7VMOmjv7w4J2vbxug58Rj+ix0rcEdryUmHvgp1mVIIMbGV32PU1k0fhjG
xoSdbxercbQZrotvt6u2tEO1A1LpDGVW4XlZtVvBY5+UoWaiVTHP6jNWgNkEQY65
KtyoIFZQnIPiyF1GERmYbBBqSIqBS1ui1NtUMYjvka0nnhmZpzKYbwbyPzvE1PoA
qlZ8D1F+sbNFTNHxvwukCBjubDiH/bj8WxQ43tof5L1HH5tyRUKNyXcr5Lks+acm
kB02BVOo2gMhr9/3unMIC5d2Ya4h8VaW0C6tO/SPXBbUFQkean83m5b+FE33Xez3
dHQ6LPTT+qFGBQ43KAoC3p2t
-----END CERTIFICATE-----
Generated at Thu Apr 4 20:08:12 2024 by rpki-client on console-ams.rpki-client.org