Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XHuahJHG-FW_WA9CVsxhjYlPdt0.roa
File: XHuahJHG-FW_WA9CVsxhjYlPdt0.roa (raw, json)
Hash identifier: A9xNJIb8nzSrbJNXJg74Cqhkk7UIEIFkl5weUbMYI48=
Subject key identifier: 5C:7B:9A:84:91:C6:F8:55:BF:58:0F:42:56:CC:61:8D:89:4F:76:DD
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0189BAD1422A3F4CC7D012A360DB10DDD0E9
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XHuahJHG-FW_WA9CVsxhjYlPdt0.roa
Signing time: Thu 03 Aug 2023 09:53:43 +0000
ROA not before: Thu 03 Aug 2023 09:53:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 104.249.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:d1:42:2a:3f:4c:c7:d0:12:a3:60:db:10:dd:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Aug 3 09:53:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c7b9a8491c6f855bf580f4256cc618d894f76dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:77:04:4e:dc:61:c9:81:aa:22:54:33:22:
80:f4:79:00:eb:ab:41:1f:0e:4f:34:d4:aa:ad:cb:
0a:60:f0:f3:fe:d7:aa:0f:03:86:ac:f7:31:20:94:
74:f1:7a:17:dd:4a:4e:59:ac:3f:ec:94:d5:20:8d:
38:23:91:27:33:bc:50:ec:f5:23:37:49:70:b3:96:
64:c6:68:21:17:3f:47:b1:3b:b7:8e:36:f7:bd:4b:
84:1d:3b:ee:53:c8:9c:98:1a:f4:fb:8e:f7:dc:bb:
4e:3c:5e:be:9d:a3:bb:23:93:90:01:e9:c0:b9:1e:
d2:b0:31:cc:82:cc:fd:12:90:42:53:f4:79:32:a8:
ee:5d:df:cb:1f:8e:62:ea:c3:26:18:0d:d6:2d:4a:
53:5c:6d:dd:bb:87:c0:9c:1c:1d:23:ec:5f:c0:74:
95:a3:de:ad:db:bb:43:e1:eb:d8:c5:36:8f:d0:db:
46:b7:b7:90:75:9b:c7:18:8b:37:53:89:ce:4e:2f:
f0:40:d7:c7:93:b7:c3:dc:e1:27:d4:26:a2:c0:c2:
9a:15:f4:64:f5:43:3d:fd:f8:2c:42:0f:f6:2d:bd:
52:fb:98:66:5e:b7:aa:a3:12:83:98:66:79:f1:30:
ed:2e:e6:58:08:66:2f:3a:c6:65:b7:93:05:14:8f:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7B:9A:84:91:C6:F8:55:BF:58:0F:42:56:CC:61:8D:89:4F:76:DD
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/XHuahJHG-FW_WA9CVsxhjYlPdt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.59.0/24
Signature Algorithm: sha256WithRSAEncryption
68:60:fa:03:62:91:62:c8:d5:77:cd:4b:18:45:96:80:ad:c0:
d9:5f:c7:a3:6a:cf:c7:76:28:ef:c1:22:42:4d:63:69:d8:f3:
2e:c1:e9:aa:97:68:d1:cb:8f:10:9a:14:a4:a0:0e:e9:34:da:
79:64:6c:c5:88:54:05:47:7c:9b:af:49:a3:cc:46:93:0d:58:
6e:27:c5:6f:4b:fe:43:a0:ef:da:5c:27:36:4d:8c:5d:e6:36:
77:36:0e:57:21:09:7a:31:7c:c4:f9:e9:b5:3e:23:57:1a:8a:
9b:72:d6:e9:64:6f:df:d3:1b:a4:7d:27:85:7c:3b:f7:4e:4e:
0c:46:86:be:bf:4f:db:55:ed:ba:3c:c0:c4:1c:ee:74:d4:1c:
d1:68:3d:b3:a9:be:2e:0e:17:e6:e6:1a:49:37:21:1f:7d:fa:
76:c3:6d:e2:14:3f:e3:76:2b:c7:4f:8a:63:89:33:bb:d9:21:
0c:d3:91:ef:90:17:b6:e4:a3:6b:ee:e6:e1:eb:cf:6b:de:f1:
4f:fc:94:e1:0e:2d:36:e9:78:b8:58:24:f0:d0:02:73:9b:5f:
48:16:ba:07:39:43:08:56:41:1f:6c:6b:5a:08:32:27:fd:76:
03:f0:e8:b6:5d:36:d2:48:8e:c5:4c:d8:9b:83:03:a3:54:0c:
95:02:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 8 20:49:24 2023 by rpki-client on console-ams.rpki-client.org