Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UM8f9FJHb-1EMZVtgTktt_FYC9Q.roa
File: UM8f9FJHb-1EMZVtgTktt_FYC9Q.roa (raw, json)
Hash identifier: ykTZWYgTSjEOuJ/pyQlisIOiWUKS9IctJpuAlrchSH8=
Subject key identifier: 50:CF:1F:F4:52:47:6F:ED:44:31:95:6D:81:39:2D:B7:F1:58:0B:D4
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018608ED43FE09D7C36D7B69D706AA4D1F2D
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UM8f9FJHb-1EMZVtgTktt_FYC9Q.roa
Signing time: Tue 31 Jan 2023 17:43:32 +0000
ROA not before: Tue 31 Jan 2023 17:43:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 216.173.76.0/24 maxlen: 24
216.173.82.0/24 maxlen: 24
104.239.10.0/23 maxlen: 23
216.173.102.0/24 maxlen: 24
216.173.110.0/24 maxlen: 24
216.173.106.0/24 maxlen: 24
216.173.107.0/24 maxlen: 24
104.239.30.0/23 maxlen: 23
104.239.94.0/24 maxlen: 24
104.239.105.0/24 maxlen: 24
104.239.104.0/24 maxlen: 24
104.239.111.0/24 maxlen: 24
104.239.106.0/24 maxlen: 24
104.239.107.0/24 maxlen: 24
104.167.10.0/24 maxlen: 24
104.239.124.0/23 maxlen: 23
104.239.126.0/24 maxlen: 24
216.173.120.0/24 maxlen: 24
104.239.75.0/24 maxlen: 24
104.239.78.0/24 maxlen: 24
104.239.80.0/23 maxlen: 23
104.233.24.0/23 maxlen: 23
104.233.26.0/24 maxlen: 24
64.137.52.0/23 maxlen: 23
104.238.4.0/24 maxlen: 24
104.238.5.0/24 maxlen: 24
104.238.8.0/24 maxlen: 24
104.238.10.0/24 maxlen: 24
104.238.9.0/24 maxlen: 24
138.128.148.0/24 maxlen: 24
138.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:ed:43:fe:09:d7:c3:6d:7b:69:d7:06:aa:4d:1f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 31 17:43:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50cf1ff452476fed4431956d81392db7f1580bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:31:b6:40:3e:22:81:94:f7:a0:65:b6:50:
a9:c4:d5:1f:5c:ec:33:74:b6:5f:38:b0:ec:3f:d7:
00:c9:98:40:1d:a9:8c:fc:7e:d0:57:4f:7b:44:4c:
49:a3:fe:8b:81:bc:f3:b8:8b:6b:6d:3d:da:f3:86:
75:88:08:04:c4:ae:03:92:2a:12:e9:08:30:f9:fe:
60:a2:61:e0:c7:87:7e:52:cd:a8:5d:7c:d6:7c:dc:
83:31:bb:ff:55:94:1e:56:bd:69:c7:e9:d0:d8:ef:
72:e8:a4:20:2f:d7:80:02:90:d8:fc:9e:b5:de:a5:
08:8e:e9:fc:84:9f:ff:83:cd:0c:c9:e0:ba:21:67:
3d:6d:20:c8:ec:34:10:a6:54:50:0f:bc:ed:bb:2d:
0e:1b:72:85:68:59:e6:a5:85:07:b0:14:c7:05:fa:
7e:99:dd:7b:36:03:20:55:12:8f:6b:a3:7d:77:26:
33:70:08:6a:3f:cb:d5:1a:c6:88:f7:01:6b:7b:9c:
54:cf:5c:a9:14:29:5f:43:25:56:f9:91:fe:bd:2c:
80:fc:c0:62:b5:67:f4:9a:71:b9:c5:e7:a2:23:8c:
4c:7a:59:14:a7:64:58:27:18:5f:04:2b:dc:ea:67:
9f:3d:ae:09:87:13:29:cd:0e:e3:51:01:97:42:44:
ce:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:1F:F4:52:47:6F:ED:44:31:95:6D:81:39:2D:B7:F1:58:0B:D4
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/UM8f9FJHb-1EMZVtgTktt_FYC9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.137.52.0/23
104.167.10.0/24
104.233.24.0-104.233.26.255
104.238.4.0/23
104.238.8.0-104.238.10.255
104.239.10.0/23
104.239.30.0/23
104.239.75.0/24
104.239.78.0/24
104.239.80.0/23
104.239.94.0/24
104.239.104.0/22
104.239.111.0/24
104.239.124.0-104.239.126.255
138.128.148.0/24
138.128.157.0/24
216.173.76.0/24
216.173.82.0/24
216.173.102.0/24
216.173.106.0/23
216.173.110.0/24
216.173.120.0/24
Signature Algorithm: sha256WithRSAEncryption
59:4b:d1:1a:84:a4:ed:5c:d3:1c:43:d2:0f:b2:ae:3c:a7:7e:
c5:15:f5:d6:fe:be:1d:0a:7f:96:6f:b0:3d:44:73:2e:80:43:
86:0a:8d:0a:35:1f:f1:96:2b:1e:c1:2d:c8:65:df:e4:89:76:
ad:3f:bb:b3:e5:6a:20:d1:f4:51:b1:b2:d1:ad:87:a7:c3:ac:
26:cd:0a:4b:6c:0d:82:02:ce:df:5a:06:84:a5:e1:b4:93:be:
79:e1:1b:c5:51:bf:4b:85:c6:84:ef:02:07:b6:b4:26:d5:16:
04:0a:d6:fa:75:3a:a3:34:3e:f8:4f:00:15:42:5a:c6:f9:3e:
d1:f5:18:9a:62:ee:d3:69:c4:58:17:c5:78:d5:b7:29:a0:48:
82:d1:55:3d:81:41:11:61:75:6c:fd:cf:ed:9a:a9:62:93:1c:
6e:a8:f6:f2:06:a1:66:ca:64:3e:5a:85:46:1b:0f:69:b3:46:
98:84:82:90:de:37:d4:78:3a:07:a6:0f:54:16:6b:c6:5b:0e:
56:91:d2:5c:32:ba:67:c9:ad:a8:4c:ca:ad:e8:0f:cf:b6:86:
1f:c1:1a:c8:fb:0a:27:3b:c6:ba:0b:a0:1b:15:c6:9d:30:47:
78:46:d8:b3:f7:25:5d:a1:55:11:cc:6b:b7:cf:bc:a5:96:06:
96:ce:42:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:56 2023 by rpki-client on console-fra.rpki-client.org