Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YHJH2da2h6Vo8-eSKQ7eyaCW9CE.roa
File: YHJH2da2h6Vo8-eSKQ7eyaCW9CE.roa (raw, json)
Hash identifier: mimXloUTyi/ZaUQeLWe0HOXPnSSUFJmx6CklaLhxD5Q=
Subject key identifier: 60:72:47:D9:D6:B6:87:A5:68:F3:E7:92:29:0E:DE:C9:A0:96:F4:21
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CEAE111DC0D73037F5F18C89ECA65C0ED
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YHJH2da2h6Vo8-eSKQ7eyaCW9CE.roa
Signing time: Mon 08 Jan 2024 21:01:07 +0000
ROA not before: Mon 08 Jan 2024 21:01:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 104.238.26.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.233.63.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.239.49.0/24 maxlen: 24
104.239.50.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ea:e1:11:dc:0d:73:03:7f:5f:18:c8:9e:ca:65:c0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 8 21:01:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=607247d9d6b687a568f3e792290edec9a096f421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:17:e9:8a:63:50:3b:bb:50:92:d4:ab:42:
0d:0c:10:49:a1:9d:5b:7d:30:f4:ee:5a:c2:09:99:
39:26:2b:4b:03:d4:47:5b:83:08:56:27:00:99:ac:
f0:73:16:59:f4:2e:6c:82:44:04:62:4b:fd:0a:c9:
8b:f0:40:8c:74:14:fa:f0:4b:b1:99:1d:3c:ba:e3:
04:54:54:12:01:92:df:1a:3e:f7:ca:c3:37:0b:55:
00:e0:b6:e4:a2:93:3d:58:35:c8:7d:cd:fa:59:fa:
2f:14:02:3e:79:12:68:4f:30:c3:e4:ff:6a:f1:6c:
c6:1c:d0:d9:a5:8e:d8:84:57:d1:0e:9b:42:4c:33:
61:15:ad:6d:fe:e5:f8:97:a4:d0:c8:94:37:74:b2:
f9:f1:61:54:f1:db:0b:99:0e:1f:f6:fc:ba:cc:28:
ed:3c:47:a4:fb:07:2c:f2:e7:22:06:99:96:cb:a0:
d8:db:ac:ce:31:a5:53:86:5e:96:a5:cc:84:cd:d0:
b5:36:2b:ed:43:4c:7b:c2:cd:b7:79:e3:ee:43:ff:
4d:15:3d:ee:1d:3e:95:dc:3a:27:4e:7a:6c:ec:02:
75:56:01:4a:5c:9d:e7:4d:95:1a:10:b8:47:ff:ad:
16:40:d8:8b:9d:ce:68:39:00:76:36:00:5a:73:9d:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:72:47:D9:D6:B6:87:A5:68:F3:E7:92:29:0E:DE:C9:A0:96:F4:21
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YHJH2da2h6Vo8-eSKQ7eyaCW9CE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.60.0/22
104.238.26.0/24
104.238.29.0/24
104.239.49.0-104.239.51.255
Signature Algorithm: sha256WithRSAEncryption
44:b5:ae:25:b5:9e:b6:4b:55:d3:42:13:2a:38:52:16:a5:d0:
7c:5c:e3:ec:89:87:ff:9a:8a:9c:63:05:ba:5d:6a:0c:58:bf:
e1:a2:31:0f:7d:49:df:cf:15:2d:79:a7:24:04:dc:81:4a:c4:
2a:49:63:60:98:7e:be:1e:77:74:5d:b8:ba:4e:12:b5:81:e5:
a9:63:61:25:c0:cb:7a:4c:86:4d:0f:18:fc:e3:b7:3a:54:64:
cc:ba:c9:d4:51:0a:cd:74:27:d2:76:bd:24:b9:5f:88:42:48:
5e:87:26:dc:ab:91:8d:07:b7:7a:ba:81:82:c6:fa:e2:28:f0:
d8:17:29:d8:a3:e1:d2:f6:c9:4b:74:57:ed:b6:23:f1:78:5b:
ac:9e:ac:98:9d:e8:69:48:e1:79:d1:56:e4:58:83:28:22:d6:
fc:43:15:c5:c0:40:dc:4d:95:39:26:fa:7f:3b:e8:c6:e9:df:
ca:90:ea:54:4f:3f:b4:66:9b:2a:67:2d:6e:3f:fe:c3:9f:46:
4a:1f:32:7c:a5:e5:66:9c:e6:6b:50:20:77:ed:36:75:c5:33:
e5:00:f2:c9:37:fc:41:c3:a8:a8:3a:7f:93:f6:e5:04:6f:02:
39:38:b9:bf:73:00:32:19:7f:28:4d:87:c6:f1:56:c2:0d:60:
02:7f:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:15:41 2024 by rpki-client on console-ams.rpki-client.org