Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Pi9dcj--QyU_AGb0bswZVV56mWs.roa
File: Pi9dcj--QyU_AGb0bswZVV56mWs.roa (raw, json)
Hash identifier: SyzIdiR7ZU9U2uCQBF+Df9uuY426Mkk/naZY9gI1c1s=
Subject key identifier: 3E:2F:5D:72:3F:BE:43:25:3F:00:66:F4:6E:CC:19:55:5E:7A:99:6B
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018708C738F9C3E54D72360B1EF5A7499FE3
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Pi9dcj--QyU_AGb0bswZVV56mWs.roa
Signing time: Wed 22 Mar 2023 10:04:46 +0000
ROA not before: Wed 22 Mar 2023 10:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3507
IP address blocks: 64.137.22.0/24 maxlen: 24
64.137.33.0/24 maxlen: 24
64.137.47.0/24 maxlen: 24
64.137.50.0/24 maxlen: 24
64.137.51.0/24 maxlen: 24
64.137.55.0/24 maxlen: 24
64.137.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:c7:38:f9:c3:e5:4d:72:36:0b:1e:f5:a7:49:9f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 22 10:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e2f5d723fbe43253f0066f46ecc19555e7a996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:20:27:d9:6a:8d:86:00:65:1f:61:bd:02:
2b:4b:37:30:16:2c:7c:eb:3e:19:a2:47:fe:d7:bd:
ce:0a:02:69:e4:1a:ea:60:e8:d8:e2:c1:06:2d:a6:
da:fd:6d:cb:81:2e:c9:11:2c:b6:a9:8d:e2:ff:1b:
94:eb:f8:f5:bf:24:58:3b:2f:74:ab:73:e5:35:0b:
6c:46:ed:f0:4e:80:f6:f3:00:4d:ea:3d:d4:60:7f:
a0:68:59:a9:cc:28:40:9b:5c:29:0d:85:b1:74:93:
66:bc:a2:f8:25:e3:63:6d:6c:ba:17:37:68:04:10:
f8:07:6d:18:31:01:9d:d3:83:91:1d:b5:e8:26:73:
f9:0b:ae:de:79:cf:86:cb:a6:f9:24:17:37:a0:b0:
df:90:c5:4e:77:fc:49:d6:4e:0c:a4:eb:fb:aa:c8:
d7:70:fb:c7:25:28:8d:3c:76:15:cb:e7:9b:e8:49:
bd:93:54:85:29:5e:9d:39:9d:d7:fd:6b:af:95:8e:
5d:31:e9:70:50:51:52:35:0b:71:3c:12:c0:96:0e:
04:72:e0:62:f8:f9:ba:25:18:97:ab:82:e9:56:a7:
c6:f9:f0:b3:64:ef:08:8a:92:c7:97:f7:e3:e6:6b:
5b:e3:54:17:89:ee:55:0a:37:71:3e:8f:d9:59:d7:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2F:5D:72:3F:BE:43:25:3F:00:66:F4:6E:CC:19:55:5E:7A:99:6B
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/Pi9dcj--QyU_AGb0bswZVV56mWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.22.0/24
64.137.33.0/24
64.137.47.0/24
64.137.50.0/23
64.137.55.0/24
64.137.67.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:66:28:57:bb:c8:f0:ac:82:5e:f5:f8:9f:fb:a8:d2:6d:62:
71:c1:1d:a1:08:42:b0:28:6e:07:bf:ea:a7:4d:a8:37:c0:10:
2c:9e:15:63:c0:f5:c3:39:44:49:b4:b9:1d:46:3f:97:23:97:
c6:09:9f:e0:92:c0:2f:5f:fd:fc:96:8c:10:5e:24:ce:00:a1:
07:24:0e:fb:24:7e:17:02:45:28:ec:2e:08:38:cd:01:fb:eb:
6a:ad:13:36:d1:9f:55:76:a2:2f:3e:b0:b2:99:68:2f:66:e8:
23:0f:5b:22:55:b2:3c:21:5f:70:5b:22:8c:fa:06:8e:3f:79:
46:f9:34:1b:24:a8:7b:8c:11:03:37:7c:f2:55:fe:f2:64:62:
61:63:e7:2b:fc:3d:a4:f6:c1:3f:d8:4b:bb:ce:7e:80:de:f7:
b9:c0:01:92:67:9c:f7:61:36:e8:ef:8b:61:72:13:be:d2:bb:
65:10:c0:a9:12:b7:ec:89:3f:f5:5a:e9:d3:56:60:95:11:55:
40:03:19:0d:7f:db:68:5b:84:02:a5:6a:04:2d:5d:ff:87:88:
85:3c:9f:d2:f9:ea:5f:4d:15:c8:b6:09:e6:fb:fb:f7:2c:00:
78:75:a0:c4:94:cf:01:db:3d:5b:fa:04:b1:d9:7d:64:4c:7c:
3e:40:4f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org