Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjntW7EqkeH05WzxNoWylLZVfdo.roa
File: OjntW7EqkeH05WzxNoWylLZVfdo.roa (raw, json)
Hash identifier: oQMoQ6oyv9qBAj3EZ5tqtn3RUzqqlNhSc/WF9lUPk9M=
Subject key identifier: 3A:39:ED:5B:B1:2A:91:E1:F4:E5:6C:F1:36:85:B2:94:B6:55:7D:DA
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018866CD362C149C2DA92921FBD861645393
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjntW7EqkeH05WzxNoWylLZVfdo.roa
Signing time: Mon 29 May 2023 09:18:24 +0000
ROA not before: Mon 29 May 2023 09:18:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 64.137.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:66:cd:36:2c:14:9c:2d:a9:29:21:fb:d8:61:64:53:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 29 09:18:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a39ed5bb12a91e1f4e56cf13685b294b6557dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:c3:7d:78:84:60:18:e1:8f:8b:82:d7:54:
60:b7:40:81:c5:a3:32:73:79:d1:a9:2c:e1:73:79:
90:5f:77:3b:af:7e:bb:1f:81:a2:2d:d0:a5:92:e2:
e8:e5:fb:a5:a7:ef:23:83:ab:81:b1:14:3c:b9:7d:
69:bc:13:cf:e9:21:39:62:24:e4:24:ac:96:28:b0:
53:69:1e:61:78:8a:ac:08:21:16:83:5c:92:2b:84:
a2:97:a5:e2:0c:47:ba:e6:f9:ec:b0:44:99:83:77:
13:e9:83:69:8a:15:74:d1:90:eb:25:c3:2f:8c:60:
9b:b1:a9:75:e8:9f:af:e7:76:90:93:f8:0e:70:0c:
70:dc:2d:08:e2:38:ee:57:d3:43:c1:18:72:a4:89:
cc:89:31:1e:6a:b6:e9:67:97:1e:f3:91:f4:f9:93:
94:17:29:7e:81:f2:75:a4:7e:9a:18:34:a5:34:17:
26:29:da:2d:6b:fe:0b:45:40:11:08:05:dc:6f:eb:
b6:88:67:aa:54:14:be:a9:0d:5d:16:1e:2a:8f:8c:
57:aa:e5:fa:97:28:d8:ae:db:bb:8d:ea:44:09:42:
25:24:be:53:c9:16:ff:14:26:c0:f3:6d:71:d5:30:
c9:21:31:18:f1:d4:88:d9:8a:9c:a7:d4:da:27:ed:
86:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:39:ED:5B:B1:2A:91:E1:F4:E5:6C:F1:36:85:B2:94:B6:55:7D:DA
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/OjntW7EqkeH05WzxNoWylLZVfdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.69.0/24
Signature Algorithm: sha256WithRSAEncryption
32:60:67:c9:78:ff:47:19:41:38:f2:ef:f4:0d:f4:9b:2f:8c:
93:f7:49:ce:a7:96:f8:36:be:34:1e:31:34:04:1f:49:26:3c:
33:c4:1f:51:91:f8:19:99:8d:be:f1:65:98:4c:cb:09:b8:0b:
c5:20:c9:1d:f0:e8:12:87:51:e0:57:74:b4:f3:1e:df:91:d7:
4e:f9:cc:ff:ff:00:43:96:9d:ab:b2:56:c8:f3:66:76:b6:70:
a7:75:f0:06:0c:4d:f5:57:a0:54:ce:08:a2:69:f5:40:37:31:
44:ba:1c:a0:d6:0f:f8:80:17:e9:a1:c9:a9:68:c5:a0:d9:5f:
f9:c7:db:04:07:3e:1d:27:78:fb:7b:1b:18:df:65:46:2c:e7:
10:61:ba:8b:01:fa:71:22:75:6e:24:15:d6:8a:7f:47:63:bb:
be:81:37:b2:ff:41:c1:b6:f1:a5:68:45:0f:46:6f:a6:38:d0:
69:b6:a2:7f:1e:35:61:ff:ee:c6:8a:dc:3b:a7:24:30:75:fa:
cd:c8:c4:56:b3:ac:bc:a1:6b:3a:d6:43:ee:0b:12:96:cf:0d:
1d:6a:3e:9c:dd:8b:fc:d1:33:6d:a7:8f:94:56:47:78:b6:f1:
58:37:2a:ef:aa:af:4b:be:10:8e:e4:b9:ef:a2:8c:3d:d7:90:
eb:68:96:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org