Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/anFByRTXTpApxuXdT5KkMmafEM8.roa
File: anFByRTXTpApxuXdT5KkMmafEM8.roa (raw, json)
Hash identifier: Ydu39kCO+x8aBnBCDB8jBgfaTDrW1WB8oK91xbwe8q0=
Subject key identifier: 6A:71:41:C9:14:D7:4E:90:29:C6:E5:DD:4F:92:A4:32:66:9F:10:CF
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 019425FD1860EF957B00AF6A432BDD714B55
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/anFByRTXTpApxuXdT5KkMmafEM8.roa
Signing time: Thu 02 Jan 2025 07:48:51 +0000
ROA not before: Thu 02 Jan 2025 07:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 104.167.0.0/24 maxlen: 24
104.222.169.0/24 maxlen: 24
104.222.170.0/24 maxlen: 24
104.222.171.0/24 maxlen: 24
104.222.172.0/24 maxlen: 24
104.222.173.0/24 maxlen: 24
104.222.174.0/24 maxlen: 24
104.222.175.0/24 maxlen: 24
104.233.20.0/24 maxlen: 24
104.239.13.0/24 maxlen: 24
104.239.16.0/22 maxlen: 22
104.239.20.0/22 maxlen: 22
104.239.32.0/22 maxlen: 22
104.239.36.0/22 maxlen: 22
104.239.82.0/24 maxlen: 24
104.239.90.0/23 maxlen: 23
104.239.92.0/23 maxlen: 23
104.239.98.0/24 maxlen: 24
104.243.193.0/24 maxlen: 24
104.243.194.0/24 maxlen: 24
104.243.195.0/24 maxlen: 24
104.243.196.0/24 maxlen: 24
104.243.197.0/24 maxlen: 24
104.243.198.0/24 maxlen: 24
104.243.207.0/24 maxlen: 24
216.173.80.0/23 maxlen: 23
216.173.88.0/23 maxlen: 23
216.173.108.0/24 maxlen: 24
216.173.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 04 Apr 2025 11:46:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:18:60:ef:95:7b:00:af:6a:43:2b:dd:71:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 07:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a7141c914d74e9029c6e5dd4f92a432669f10cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:41:e2:94:48:40:b4:9b:51:47:d5:ac:74:
73:b8:dd:7f:a3:3f:31:3c:fb:dc:2a:61:a2:bb:0c:
ed:80:be:0d:4a:a6:e8:91:95:1a:f4:8c:17:8d:19:
9d:02:f0:8b:58:3b:01:aa:f6:df:c1:af:7c:ef:95:
06:f6:f9:d7:17:ad:ec:52:8c:a0:5e:f2:29:65:a6:
e5:80:43:16:f5:79:67:d4:f0:e9:a7:3f:21:97:7f:
ad:10:ef:ff:d1:dc:82:f9:27:5e:c4:ac:b0:cb:96:
f0:13:7d:18:b8:93:ae:62:00:4a:89:5a:bc:e3:90:
bd:de:e3:fa:a7:97:3f:1f:d3:72:a5:de:31:01:60:
d4:22:56:ec:c8:6d:a7:fe:f7:b1:85:38:48:57:84:
78:e2:cf:45:bf:75:1b:11:6e:54:b5:95:83:72:72:
9a:39:d3:87:1c:96:69:84:c1:7b:65:25:13:57:4c:
3a:5c:73:dd:66:9e:f6:28:88:40:01:6c:73:03:4b:
72:51:f5:15:ac:86:b6:57:af:f6:f2:82:0e:70:09:
3f:df:5d:d1:df:0b:6f:a5:e6:72:c9:e9:10:c4:6a:
df:3d:7a:3a:cd:66:2f:8e:83:e5:a3:da:46:58:dd:
90:fd:73:5b:cd:78:89:1e:8c:08:cd:9f:d0:43:21:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:71:41:C9:14:D7:4E:90:29:C6:E5:DD:4F:92:A4:32:66:9F:10:CF
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/anFByRTXTpApxuXdT5KkMmafEM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.0.0/24
104.222.169.0-104.222.175.255
104.233.20.0/24
104.239.13.0/24
104.239.16.0/21
104.239.32.0/21
104.239.82.0/24
104.239.90.0-104.239.93.255
104.239.98.0/24
104.243.193.0-104.243.198.255
104.243.207.0/24
216.173.80.0/23
216.173.88.0/23
216.173.108.0/24
216.173.122.0/23
Signature Algorithm: sha256WithRSAEncryption
01:87:a4:73:11:ef:b7:ad:5f:bd:19:70:19:d0:c1:5a:9a:95:
51:6b:27:b3:f1:06:ca:75:bf:c3:87:ea:3b:50:25:f8:64:42:
00:79:60:25:7e:a1:35:39:ce:0f:34:ca:c6:36:04:96:3a:ef:
da:37:0c:3d:a9:5f:0f:2c:15:b3:1e:f9:3a:62:97:ba:de:ea:
49:eb:9a:5e:23:98:ca:8e:ba:19:be:87:4b:1d:d9:88:c2:d8:
d3:56:9c:85:f9:7f:4d:8e:48:4f:8d:80:49:22:b4:ff:7c:91:
d4:e1:33:04:4c:ba:0f:b4:64:fe:97:b3:0b:4b:93:b2:3a:57:
3b:ef:e8:32:da:d4:39:f5:e5:a1:0a:e5:d6:a1:b9:16:34:7c:
f4:9a:8f:cc:82:e0:63:b5:9b:a6:cf:76:25:83:8d:9b:7f:a4:
f9:60:30:58:0f:b5:58:e7:fa:88:6d:14:40:b5:02:8f:99:6a:
4b:96:ae:81:da:ce:0d:72:0a:94:97:e6:f0:a3:6e:de:6c:c4:
9f:8c:9e:42:3e:34:70:96:1f:4c:46:8a:cf:7d:80:2e:10:11:
4a:f5:ef:7d:6a:03:a9:f4:25:39:aa:9b:a3:7a:d6:db:71:34:
05:5b:4c:fb:40:2d:48:f2:fe:c0:17:ce:96:5f:17:d4:6d:a7:
fe:4a:41:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:47 2025 by rpki-client