Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LiiGZqxMZF6ImneMhK-Jv_e2jF8.roa
File: LiiGZqxMZF6ImneMhK-Jv_e2jF8.roa (raw, json)
Hash identifier: tNVKljDYWFI7aA2V7hL5TXN2Fb+7UNqEUqqtuioSnx4=
Subject key identifier: 2E:28:86:66:AC:4C:64:5E:88:9A:77:8C:84:AF:89:BF:F7:B6:8C:5F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EBFB2CC8B2F44A063457C03F84717
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LiiGZqxMZF6ImneMhK-Jv_e2jF8.roa
Signing time: Mon 02 Jan 2023 12:04:50 +0000
ROA not before: Mon 02 Jan 2023 12:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 104.249.24.0/24 maxlen: 24
216.173.83.0/24 maxlen: 24
104.249.28.0/24 maxlen: 24
104.249.27.0/24 maxlen: 24
104.249.26.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.143.228.0/24 maxlen: 24
216.173.101.0/24 maxlen: 24
104.249.56.0/22 maxlen: 22
104.143.253.0/24 maxlen: 24
45.43.128.0/21 maxlen: 21
45.43.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:bf:b2:cc:8b:2f:44:a0:63:45:7c:03:f8:47:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e288666ac4c645e889a778c84af89bff7b68c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:0c:59:48:f0:ca:16:f6:42:13:d9:e3:45:
52:1b:69:81:f3:7e:af:24:25:22:53:de:73:b4:7f:
f8:ad:60:20:f3:f2:0d:8b:66:e3:b3:c0:81:a2:32:
f5:0a:2f:c2:59:b0:bb:f3:15:c1:fb:4e:b8:4a:c3:
53:b4:9b:af:b3:58:06:9f:07:71:60:41:3d:0d:eb:
22:47:06:9a:a1:7c:a3:82:26:4c:75:d0:7e:60:63:
64:50:5e:c8:c8:11:e4:87:6e:87:8d:f6:3d:8c:67:
29:e3:6b:ca:9f:01:d7:7a:f8:35:7f:91:ea:19:2e:
06:24:b6:56:ae:ac:06:5a:e2:96:f3:09:3c:54:b2:
9c:9f:66:0d:36:12:d8:c7:fb:76:52:92:50:e0:5e:
08:7b:58:7b:c4:3c:a8:c7:14:61:ac:2c:f5:82:ec:
12:5c:d5:17:a8:00:b5:ba:1f:91:81:16:d4:ce:3f:
98:57:a7:06:f9:2a:00:49:b4:3b:65:04:b2:97:1d:
e7:53:87:c1:42:4a:50:69:84:8b:06:8f:b9:8c:96:
e4:34:62:c5:a4:78:f9:c4:00:b0:37:34:b1:ae:e6:
c8:9c:26:ea:93:32:9f:61:ae:c7:b5:c9:6c:b1:5a:
ac:d6:b2:ce:78:c4:de:69:1f:71:c7:4a:45:1b:70:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:28:86:66:AC:4C:64:5E:88:9A:77:8C:84:AF:89:BF:F7:B6:8C:5F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/LiiGZqxMZF6ImneMhK-Jv_e2jF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.128.0/21
104.143.228.0/24
104.143.253.0/24
104.249.24.0/24
104.249.26.0-104.249.28.255
104.249.32.0/22
104.249.56.0/22
216.173.83.0/24
216.173.101.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1c:c8:53:42:25:22:74:b2:e5:fa:19:d5:28:13:a7:d3:51:
ff:14:41:3c:5d:0a:c0:0c:4d:f0:f4:ca:50:56:93:e1:22:b1:
2c:5d:6d:df:ad:c8:1e:fe:2d:bc:c8:e8:97:2f:ae:de:eb:0c:
1b:a9:b7:b4:7a:61:c5:b6:00:d6:46:dd:50:5d:2a:e7:4a:79:
ed:70:a3:e3:7a:a6:7e:23:4b:f9:3d:34:d9:a5:ab:11:4d:7a:
2a:28:3c:a4:5d:33:e4:4d:2b:7c:ec:d6:a7:c3:e6:64:98:f4:
3d:06:ea:cd:12:a4:63:bb:a3:f9:df:9c:07:e5:b8:0f:cf:dd:
f3:93:53:6b:b0:58:4a:4e:4d:ad:fc:15:89:a3:fa:b9:a8:c1:
4f:f9:60:9a:dc:ee:9f:27:f5:5c:aa:fb:19:98:3b:61:a3:1c:
da:f6:a7:d4:e7:3f:be:2f:14:dd:95:56:92:e9:a1:1c:69:ce:
8b:2d:68:5d:76:d5:63:35:65:c8:bb:27:e5:27:95:47:fe:7b:
6f:4d:69:65:21:f6:c5:70:e0:df:e4:2f:a3:11:0b:bf:34:dd:
84:cd:b4:6a:6a:98:f3:2c:ed:31:fc:08:ef:54:f4:81:8e:00:
67:b6:d5:ce:a3:40:ef:4a:69:3a:54:71:9a:56:ea:bc:16:aa:
61:ab:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org