Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QNgcnej9mzKlTP540zqS4GUfEWo.roa
File: QNgcnej9mzKlTP540zqS4GUfEWo.roa (raw, json)
Hash identifier: NlJw4SSeauX0r9mn/meaPtyuAWOnNRmrWMlc7CIJq38=
Subject key identifier: 40:D8:1C:9D:E8:FD:9B:32:A5:4C:FE:78:D3:3A:92:E0:65:1F:11:6A
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0186182F78A31F758C8159484FBA230C8361
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QNgcnej9mzKlTP540zqS4GUfEWo.roa
Signing time: Fri 03 Feb 2023 16:50:09 +0000
ROA not before: Fri 03 Feb 2023 16:50:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133944
IP address blocks: 64.137.124.0/24 maxlen: 24
104.239.101.0/24 maxlen: 24
104.239.108.0/24 maxlen: 24
64.137.66.0/24 maxlen: 24
64.137.91.0/24 maxlen: 24
64.137.86.0/24 maxlen: 24
64.137.88.0/24 maxlen: 24
64.137.104.0/24 maxlen: 24
64.137.103.0/24 maxlen: 24
64.137.106.0/24 maxlen: 24
64.137.108.0/24 maxlen: 24
64.137.112.0/24 maxlen: 24
64.137.118.0/24 maxlen: 24
64.137.17.0/24 maxlen: 24
64.137.38.0/24 maxlen: 24
216.173.87.0/24 maxlen: 24
104.143.229.0/24 maxlen: 24
138.128.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:2f:78:a3:1f:75:8c:81:59:48:4f:ba:23:0c:83:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 3 16:50:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40d81c9de8fd9b32a54cfe78d33a92e0651f116a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:01:36:7b:b0:91:73:30:02:2f:60:17:5c:
12:1e:74:82:6f:cf:93:32:8a:56:3b:14:fa:11:67:
b5:48:88:87:cf:99:59:ec:0b:69:77:95:bf:51:65:
a6:90:12:d0:7a:9a:68:68:42:73:6d:07:17:58:8c:
1c:67:a8:39:e3:cb:a1:07:c9:f0:b5:ed:c4:51:f4:
52:4e:05:db:86:bd:28:4e:26:15:7b:7e:7f:fa:22:
5c:e5:df:ad:94:fd:1d:23:5f:49:21:23:43:8f:eb:
2e:74:4a:3f:cc:ea:48:8f:f2:30:1b:92:ef:84:6b:
15:d4:69:2e:21:32:bc:39:95:cf:48:92:02:ff:f9:
b1:aa:60:74:9a:1b:85:f5:88:d8:72:b2:77:1f:ab:
92:29:12:99:0a:46:4d:a8:65:b1:0e:e9:cb:1a:1e:
c6:2c:b1:fc:f3:4a:9a:c0:31:ce:96:b3:1c:db:e4:
1a:26:4e:68:80:05:bc:ef:f1:4a:93:0e:37:83:bc:
1d:45:66:7e:b4:d2:b3:9a:ec:52:a1:14:96:63:72:
b0:fb:f0:64:a6:03:6a:92:02:f5:59:62:0a:6f:0b:
5b:0a:c8:bc:10:ca:a7:14:de:68:aa:22:22:27:6a:
24:2c:80:f3:5e:d8:07:a1:9d:a3:8d:b2:b4:0a:66:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D8:1C:9D:E8:FD:9B:32:A5:4C:FE:78:D3:3A:92:E0:65:1F:11:6A
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/QNgcnej9mzKlTP540zqS4GUfEWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.17.0/24
64.137.38.0/24
64.137.66.0/24
64.137.86.0/24
64.137.88.0/24
64.137.91.0/24
64.137.103.0-64.137.104.255
64.137.106.0/24
64.137.108.0/24
64.137.112.0/24
64.137.118.0/24
64.137.124.0/24
104.143.229.0/24
104.239.101.0/24
104.239.108.0/24
138.128.145.0/24
216.173.87.0/24
Signature Algorithm: sha256WithRSAEncryption
64:d4:d3:e8:3c:3e:76:8a:37:9e:7b:22:e8:ae:12:b4:c1:02:
85:6f:7b:d9:7d:b4:4b:71:73:d7:1f:c3:3c:4b:16:78:ba:25:
9b:03:6f:d6:c1:69:22:a9:2b:c0:44:2d:81:d6:32:f4:08:37:
87:cb:cc:00:42:a6:cb:b3:e2:e4:fa:40:05:78:54:23:74:e5:
fe:bb:a7:30:41:27:20:7a:8d:d7:dd:51:93:e6:ed:be:dc:e0:
c2:8c:36:a3:60:87:92:e7:0a:6b:8a:43:41:69:f6:4a:19:de:
eb:00:00:bb:59:19:47:51:9d:c3:8e:2e:57:7a:d7:93:a8:7e:
e5:53:ef:39:9a:60:9b:42:56:13:e0:05:fb:b8:46:36:c6:29:
8c:c4:25:71:8c:c4:8e:ee:f1:1b:b5:67:a3:9a:fb:c4:f6:59:
bb:ad:c7:9b:40:18:e5:e2:a3:c2:fe:4f:e5:bf:d6:57:db:09:
d6:dc:2e:a5:88:ca:7d:1a:74:aa:e6:db:b4:87:75:c7:fc:28:
66:36:30:5c:4e:9c:7e:73:0e:09:5d:39:79:6a:c9:8f:1d:04:
b6:d6:8b:8a:d8:24:99:92:e1:b5:fb:21:3b:58:54:8c:fe:cb:
80:1a:79:d1:9f:bb:8c:e6:fb:5a:7d:54:fd:91:e8:57:6d:77:
e1:fa:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:38 2023 by rpki-client on console-ams.rpki-client.org