Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Mh2_qgUh3o964x9VPGp_Ol9YSC4.roa
File: Mh2_qgUh3o964x9VPGp_Ol9YSC4.roa (raw, json)
Hash identifier: 99IVZuZ39PrzkrXbD2tf8a//BVdj+NdfggD1v+XnWMY=
Subject key identifier: 32:1D:BF:AA:05:21:DE:8F:7A:E3:1F:55:3C:6A:7F:3A:5F:58:48:2E
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0187C2B73E2E0FF40DE763D3A0F1F408E91F
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Mh2_qgUh3o964x9VPGp_Ol9YSC4.roa
Signing time: Thu 27 Apr 2023 12:36:41 +0000
ROA not before: Thu 27 Apr 2023 12:36:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 64.137.119.0/24 maxlen: 24
64.137.125.0/24 maxlen: 24
64.137.127.0/24 maxlen: 24
64.137.29.0/24 maxlen: 24
64.137.34.0/23 maxlen: 23
64.137.40.0/23 maxlen: 23
84.246.108.0/24 maxlen: 24
64.137.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:b7:3e:2e:0f:f4:0d:e7:63:d3:a0:f1:f4:08:e9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 27 12:36:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=321dbfaa0521de8f7ae31f553c6a7f3a5f58482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:30:ad:f4:64:d3:38:36:59:55:a2:c4:19:
a9:e5:ed:0c:b7:94:c3:8a:54:4e:54:20:39:28:f2:
f9:20:10:56:7b:da:2d:1e:66:6d:c2:9e:1c:82:e3:
a4:33:af:26:6a:d4:f9:5a:6f:f0:5c:5d:66:de:e3:
aa:a0:e1:3b:d7:88:e4:97:14:f8:02:76:99:e8:e7:
4f:91:26:2a:f7:2b:2d:16:a1:7c:36:00:2a:40:4a:
d0:73:42:3b:3e:e6:8e:9b:db:7e:a5:24:f3:c6:1c:
0a:f3:18:70:6e:75:bb:bf:72:81:8e:70:83:ac:ff:
dd:e0:bd:7c:0e:e2:87:18:ca:32:5a:7a:73:df:d8:
ef:5b:da:1e:13:94:5f:94:15:48:d5:79:5f:b7:e8:
f1:c7:78:5c:c6:9c:97:cf:e0:88:1a:95:da:3b:81:
58:14:bd:4e:b7:f4:35:b5:49:8a:cd:0c:d4:bb:d1:
a5:0c:2e:6d:99:73:4d:9f:ad:b6:02:10:7e:15:d8:
32:ca:d5:d8:45:b0:3e:16:f1:16:8b:86:fa:0f:e3:
1a:66:87:61:a1:f4:71:09:13:dc:db:88:37:bc:fc:
4a:30:c2:88:62:17:bc:80:f7:24:b5:83:d9:27:83:
37:10:c0:f5:37:95:ba:e0:4e:17:11:8d:d0:2e:23:
f8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:BF:AA:05:21:DE:8F:7A:E3:1F:55:3C:6A:7F:3A:5F:58:48:2E
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Mh2_qgUh3o964x9VPGp_Ol9YSC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.29.0/24
64.137.34.0/23
64.137.40.0/23
64.137.114.0/24
64.137.119.0/24
64.137.125.0/24
64.137.127.0/24
84.246.108.0/24
Signature Algorithm: sha256WithRSAEncryption
80:25:02:88:e3:8a:94:75:f9:64:68:1f:9a:37:b1:c7:6b:20:
01:24:c6:56:db:de:7d:16:0b:84:29:3b:a5:3d:b4:05:43:16:
6b:52:d7:7e:42:15:85:47:6b:8c:83:f8:89:cf:b0:6a:4a:ed:
92:c9:09:32:1d:6b:d0:0a:cf:1f:ac:87:bb:89:c9:9c:44:d0:
00:3e:51:e4:6e:83:76:f3:63:37:c0:c3:99:b4:21:ae:9a:eb:
aa:b3:79:33:80:7e:fa:5a:98:75:fc:84:9e:36:31:bb:71:4b:
1e:50:7c:6d:36:a2:f3:5f:1b:12:8f:58:2e:cf:47:5c:f0:91:
4d:54:fe:42:45:10:bd:b0:5e:25:e3:82:fb:9b:ad:fb:0b:e5:
05:b1:e0:1a:35:a3:73:30:8d:c4:ef:96:56:be:5a:13:2b:47:
53:36:78:b0:e6:bb:e6:5f:93:87:5a:25:74:fd:51:bb:da:eb:
a3:cb:8a:91:c4:46:bb:25:f9:c4:eb:b5:f7:a9:c6:57:c1:99:
80:21:17:f6:60:ce:40:2d:df:7c:18:ea:01:1d:26:8c:6c:d7:
50:10:2d:87:71:78:2b:ba:ae:6b:63:64:b6:d2:33:cd:8f:56:
8d:b2:1b:24:9a:eb:b3:6b:87:09:16:2b:be:ac:6f:7a:1c:fb:
88:0b:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:40 2024 by rpki-client on console-fra.rpki-client.org