Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LYypcj2gyVu3LVbqOrci5ZVP08E.roa
File: LYypcj2gyVu3LVbqOrci5ZVP08E.roa (raw, json)
Hash identifier: s/FQSKGFXehq7/JVDka4IaV4sqOuHj5VqjWwf/Tuf84=
Subject key identifier: 2D:8C:A9:72:3D:A0:C9:5B:B7:2D:56:EA:3A:B7:22:E5:95:4F:D3:C1
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EBB15C5FFFA7C2E53E9E7385B8C1C
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LYypcj2gyVu3LVbqOrci5ZVP08E.roa
Signing time: Mon 02 Jan 2023 12:04:48 +0000
ROA not before: Mon 02 Jan 2023 12:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149428
IP address blocks: 64.137.17.0/24 maxlen: 24
104.239.96.0/23 maxlen: 23
64.137.28.0/24 maxlen: 24
104.238.14.0/24 maxlen: 24
104.239.84.0/23 maxlen: 23
138.128.159.0/24 maxlen: 24
104.238.19.0/24 maxlen: 24
104.238.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 16:50:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:bb:15:c5:ff:fa:7c:2e:53:e9:e7:38:5b:8c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d8ca9723da0c95bb72d56ea3ab722e5954fd3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:5c:43:d5:1c:d6:f6:48:05:eb:b8:9f:ee:
af:5a:e1:67:07:08:02:9f:dc:59:3b:3b:42:f0:53:
db:eb:4f:64:8e:7a:e4:1d:7a:1c:3e:52:a3:d1:cd:
1f:12:fa:bc:06:13:c4:a1:2c:02:c0:c1:ab:b6:b2:
46:82:1a:81:3e:38:e8:48:30:31:53:46:2b:f6:65:
e0:a8:0a:b5:91:74:f2:73:2c:64:b4:c4:88:b0:2b:
dd:e9:c8:8a:5c:db:01:0d:0a:75:16:ac:27:f0:37:
8e:5e:a3:ac:86:0e:7c:93:c5:61:fd:27:90:a6:2a:
86:2a:67:58:55:aa:4c:6a:2d:b8:e4:7e:ee:e1:87:
ac:9d:53:2a:40:3b:81:5b:3a:b2:58:3f:3c:f6:08:
95:db:4f:61:db:23:8e:11:03:ce:a3:ab:63:28:82:
72:08:3e:3c:a4:7d:a3:d1:6b:e3:73:f1:03:be:33:
87:5f:17:a1:7a:69:e5:ef:6d:81:7b:23:bd:4b:26:
0b:d2:b7:55:e8:01:26:b7:4a:75:55:dc:0c:59:66:
74:2a:de:e5:43:34:3e:fb:e4:36:18:ec:d3:fa:d5:
04:89:16:9a:08:7e:28:41:fb:72:c0:5e:4e:75:b6:
aa:14:a1:3e:6c:1b:0a:ec:b8:11:63:85:22:f3:b7:
94:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:8C:A9:72:3D:A0:C9:5B:B7:2D:56:EA:3A:B7:22:E5:95:4F:D3:C1
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LYypcj2gyVu3LVbqOrci5ZVP08E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.17.0/24
64.137.28.0/24
104.238.14.0/24
104.238.19.0-104.238.20.255
104.239.84.0/23
104.239.96.0/23
138.128.159.0/24
Signature Algorithm: sha256WithRSAEncryption
40:75:fd:c6:10:69:de:5a:bf:94:bc:f3:1e:29:53:2e:83:8a:
56:bc:88:4a:e9:96:18:53:68:2a:a1:0e:c6:12:d7:ea:b6:27:
b5:5a:5d:1b:db:cd:0b:c7:18:1a:9a:ce:78:a2:f2:7f:a0:34:
cb:bc:bb:bb:2e:98:d6:23:e0:8e:60:fd:7e:53:d0:34:c4:b3:
d7:fa:c7:c8:b6:0e:e9:6b:f7:b0:e1:47:e0:c8:86:2c:82:a4:
87:7d:60:05:02:ba:dd:36:df:76:30:d4:4f:f5:8a:08:3e:29:
06:0a:96:1c:50:41:54:70:c3:e8:24:94:7a:b8:a4:0b:38:a6:
80:82:cc:48:78:a9:2f:7a:b8:b2:67:c5:24:c6:42:2e:b6:6c:
d8:fc:1f:56:04:e7:2e:fc:aa:76:2d:04:32:2c:78:1c:37:32:
54:eb:5d:76:58:d9:6c:b0:ed:5b:5b:c6:61:e4:68:75:87:a5:
e3:a4:78:1c:cb:b0:99:26:be:14:a3:ff:1f:52:fa:97:58:07:
af:5d:a1:86:27:da:da:d0:44:b2:03:1d:18:54:02:06:cf:ce:
83:3c:a3:2f:4b:11:b5:01:15:22:89:8f:05:17:b2:2f:f2:4b:
e8:dd:91:1c:00:01:b1:71:8c:68:9a:49:a6:cd:0a:ff:6d:14:
69:fb:a0:22
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYVyXrsVxf/6fC5T6ec4W4wcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjMwMTAyMTIwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDhjYTk3MjNkYTBjOTViYjcyZDU2ZWEzYWI3MjJlNTk1NGZkM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1JcQ9Uc1vZIBeu4n+6vWuFnBwgC
n9xZOztC8FPb609kjnrkHXocPlKj0c0fEvq8BhPEoSwCwMGrtrJGghqBPjjoSDAx
U0Yr9mXgqAq1kXTycyxktMSIsCvd6ciKXNsBDQp1Fqwn8DeOXqOshg58k8Vh/SeQ
piqGKmdYVapMai245H7u4YesnVMqQDuBWzqyWD889giV209h2yOOEQPOo6tjKIJy
CD48pH2j0Wvjc/EDvjOHXxehemnl722BeyO9SyYL0rdV6AEmt0p1VdwMWWZ0Kt7l
QzQ+++Q2GOzT+tUEiRaaCH4oQftywF5OdbaqFKE+bBsK7LgRY4Ui87eU3wIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFC2MqXI9oMlbty1W6jq3IuWVT9PBMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvTFl5cGNqMmd5VnUzTFZicU9yY2k1WlZQMDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAQIkRAwQA
QIkcAwQAaO4OMAwDBABo7hMDBABo7hQDBAFo71QDBAFo72ADBACKgJ8wDQYJKoZI
hvcNAQELBQADggEBAEB1/cYQad5av5S88x4pUy6Dila8iErplhhTaCqhDsYS1+q2
J7VaXRvbzQvHGBqaznii8n+gNMu8u7sumNYj4I5g/X5T0DTEs9f6x8i2Dulr97Dh
R+DIhiyCpId9YAUCut0233Yw1E/1igg+KQYKlhxQQVRww+gklHq4pAs4poCCzEh4
qS96uLJnxSTGQi62bNj8H1YE5y78qnYtBDIseBw3MlTrXXZY2Wyw7VtbxmHkaHWH
peOkeBzLsJkmvhSj/x9S+pdYB69doYYn2trQRLIDHRhUAgbPzoM8oy9LEbUBFSKJ
jwUXsi/yS+jdkRwAAbFxjGiaSabNCv9tFGn7oCI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:44 2024 by rpki-client on console-ams.rpki-client.org