Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Nvmq_Jgh28bnCv6I5ELLTgsNwXc.roa
File: Nvmq_Jgh28bnCv6I5ELLTgsNwXc.roa (raw, json)
Hash identifier: LIaPb0K9QcY3bXSfYFWSS77ooZGUh12d53dNDgGOSpg=
Subject key identifier: 36:F9:AA:FC:98:21:DB:C6:E7:0A:FE:88:E4:42:CB:4E:0B:0D:C1:77
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018EC23F9C1A76A52E486BF2A24EC62742B7
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Nvmq_Jgh28bnCv6I5ELLTgsNwXc.roa
Signing time: Tue 09 Apr 2024 09:45:32 +0000
ROA not before: Tue 09 Apr 2024 09:45:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 104.233.10.0/24 maxlen: 24
104.233.28.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.233.63.0/24 maxlen: 24
104.238.26.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.239.47.0/24 maxlen: 24
104.239.49.0/24 maxlen: 24
104.239.50.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 09:55:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:3f:9c:1a:76:a5:2e:48:6b:f2:a2:4e:c6:27:42:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 9 09:45:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36f9aafc9821dbc6e70afe88e442cb4e0b0dc177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:4a:ab:57:2f:4b:e8:a1:59:a8:33:fe:3c:
0d:8a:ce:4f:2c:f6:f1:0b:04:87:18:87:47:8b:0d:
d6:7a:2f:87:7e:32:bf:ef:fa:d3:51:9e:aa:cb:36:
00:4a:af:f8:31:eb:a2:c4:30:1a:4c:1a:5a:58:18:
47:3b:92:c1:3c:e5:fa:83:d4:0b:8c:59:62:75:7b:
30:50:6a:0e:f6:df:73:e7:3b:23:f3:9a:38:8d:da:
4e:a9:43:65:70:e7:5b:40:bc:bf:86:a9:99:d7:8e:
36:52:a4:4a:30:63:70:ab:81:33:fd:57:c3:60:4d:
c5:6c:fb:e0:4a:cd:ed:4f:8e:b4:c8:29:38:5c:f3:
2e:e7:38:e1:11:8b:c6:ce:0c:dc:4f:56:a4:08:07:
fc:58:64:8c:3a:99:d6:ec:9b:7d:08:87:5f:47:a2:
9e:b0:9b:8c:71:9a:a9:3d:ac:f7:03:83:91:7e:1e:
82:5d:71:9b:82:2c:70:0a:71:85:86:27:d1:40:8d:
e7:8d:13:e9:20:dd:5e:3e:61:86:8b:39:3d:1f:b4:
39:a7:48:c1:0f:03:18:21:5f:c6:fd:e5:ea:a9:5a:
7f:af:d1:88:25:92:fe:8f:b4:14:d7:e2:76:b9:34:
d1:79:f0:89:88:b7:80:f1:3c:a7:76:63:e1:6d:e3:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F9:AA:FC:98:21:DB:C6:E7:0A:FE:88:E4:42:CB:4E:0B:0D:C1:77
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Nvmq_Jgh28bnCv6I5ELLTgsNwXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.10.0/24
104.233.28.0/24
104.233.60.0/22
104.238.26.0/24
104.238.29.0/24
104.239.47.0/24
104.239.49.0-104.239.51.255
Signature Algorithm: sha256WithRSAEncryption
0d:22:93:c8:fc:8e:1e:3b:19:c1:c4:c3:7b:c2:0d:68:a5:72:
90:1f:64:a4:e3:fc:bc:fd:5a:68:f9:ca:d3:a9:f1:e9:da:d6:
1c:56:d1:c6:b9:57:de:7c:1d:44:68:72:36:0c:6b:95:fb:34:
ee:0e:ce:b2:e8:2b:61:54:20:33:ea:3f:b4:48:f3:af:ae:06:
71:76:9d:35:f6:70:7a:1e:d8:95:63:ef:ea:25:31:90:25:89:
9b:b8:af:2d:66:1f:80:2d:f3:0d:43:f9:c0:7e:28:e6:f9:a7:
3f:56:33:0f:f5:f5:72:b3:ff:8a:3e:44:a1:1b:58:74:40:2a:
bc:c2:c0:41:30:f7:9a:aa:f4:4b:61:3d:be:c8:6c:41:42:9a:
fe:a2:8f:a7:02:31:75:9e:1a:37:22:c0:8d:db:59:98:6a:4e:
23:da:9d:b2:0c:02:37:cf:03:7e:34:de:d3:58:cc:de:3b:61:
0f:f2:6a:7c:ef:ec:5f:10:e3:25:18:38:00:c9:04:c7:48:13:
9c:5f:ce:2e:80:c5:33:3b:db:22:92:16:80:2d:b7:f0:71:22:
03:c2:4c:36:78:2e:65:3b:5e:17:02:a4:e5:64:6d:94:fc:08:
c4:22:1a:4e:05:db:66:9e:45:bc:87:a8:b0:0a:40:ea:83:b4:
00:c9:4b:38
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAY7CP5wadqUuSGvyok7GJ0K3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQwNDA5MDk0NTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY5YWFmYzk4MjFkYmM2ZTcwYWZlODhlNDQyY2I0ZTBiMGRjMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYBKq1cvS+ihWagz/jwNis5PLPbx
CwSHGIdHiw3Wei+HfjK/7/rTUZ6qyzYASq/4MeuixDAaTBpaWBhHO5LBPOX6g9QL
jFlidXswUGoO9t9z5zsj85o4jdpOqUNlcOdbQLy/hqmZ1442UqRKMGNwq4Ez/VfD
YE3FbPvgSs3tT460yCk4XPMu5zjhEYvGzgzcT1akCAf8WGSMOpnW7Jt9CIdfR6Ke
sJuMcZqpPaz3A4ORfh6CXXGbgixwCnGFhifRQI3njRPpIN1ePmGGizk9H7Q5p0jB
DwMYIV/G/eXqqVp/r9GIJZL+j7QU1+J2uTTRefCJiLeA8TyndmPhbeMplQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFDb5qvyYIdvG5wr+iORCy04LDcF3MB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvTnZtcV9KZ2gyOGJuQ3Y2STVFTExUZ3NOd1hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAaOkKAwQA
aOkcAwQCaOk8AwQAaO4aAwQAaO4dAwQAaO8vMAwDBABo7zEDBAJo7zAwDQYJKoZI
hvcNAQELBQADggEBAA0ik8j8jh47GcHEw3vCDWilcpAfZKTj/Lz9Wmj5ytOp8ena
1hxW0ca5V958HURocjYMa5X7NO4OzrLoK2FUIDPqP7RI86+uBnF2nTX2cHoe2JVj
7+olMZAliZu4ry1mH4At8w1D+cB+KOb5pz9WMw/19XKz/4o+RKEbWHRAKrzCwEEw
95qq9EthPb7IbEFCmv6ij6cCMXWeGjciwI3bWZhqTiPanbIMAjfPA3403tNYzN47
YQ/yanzv7F8Q4yUYOADJBMdIE5xfzi6AxTM72yKSFoAtt/BxIgPCTDZ4LmU7XhcC
pOVkbZT8CMQiGk4F22aeRbyHqLAKQOqDtADJSzg=
-----END CERTIFICATE-----
Generated at Tue Apr 9 15:26:12 2024 by rpki-client on console-ams.rpki-client.org