Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gVKjd59L7ofUgmMvmkclOVgggLE.roa
File: gVKjd59L7ofUgmMvmkclOVgggLE.roa (raw, json)
Hash identifier: 2xgwMef9K3vd1y3hZ46nJnFdVBcKYBkBeEZzAkwJXkY=
Subject key identifier: 81:52:A3:77:9F:4B:EE:87:D4:82:63:2F:9A:47:25:39:58:20:80:B1
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01958F1A013981B2138740B7301CF7905FC5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gVKjd59L7ofUgmMvmkclOVgggLE.roa
Signing time: Thu 13 Mar 2025 10:43:20 +0000
ROA not before: Thu 13 Mar 2025 10:43:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213894
IP address blocks: 104.238.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Mar 2025 17:11:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:1a:01:39:81:b2:13:87:40:b7:30:1c:f7:90:5f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Mar 13 10:43:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8152a3779f4bee87d482632f9a472539582080b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:4a:30:ec:f0:55:50:18:25:86:bb:6d:b3:
32:bc:52:54:c7:89:d5:f3:c9:e8:32:e6:33:4e:2a:
61:53:74:a1:81:0c:7f:4d:ed:22:d4:ab:e3:f6:03:
32:af:ff:46:fd:64:54:9a:4d:ec:c1:0a:2b:eb:a7:
19:02:78:22:88:a1:ee:a5:12:1c:69:36:cc:45:5d:
64:43:07:64:90:25:81:2d:f4:e8:e2:25:a3:d5:c3:
99:56:83:8a:72:9b:50:37:3e:04:32:ba:2c:4c:a7:
62:23:4e:51:29:d1:61:de:71:b8:66:3c:d0:02:7c:
59:0a:39:8a:f4:de:d9:3a:84:35:0e:77:4f:b2:8f:
58:36:0f:d3:70:21:b8:9b:c8:a7:1f:c4:32:20:ee:
9d:85:1e:77:60:1e:63:16:02:5a:a1:5a:65:f7:74:
ea:09:51:bc:5f:46:74:a1:5c:1a:54:9e:ca:f1:d4:
9d:dd:d8:34:79:17:18:4a:bc:6b:b8:14:db:31:01:
6a:63:bb:95:f0:a5:84:1d:a8:2b:19:12:0a:47:1e:
8f:24:17:49:3f:8f:10:8b:4a:df:73:39:de:82:b2:
44:0d:11:2f:b0:6f:0c:19:d8:ef:66:0c:a8:8a:94:
88:d0:65:fb:43:22:b2:5e:e8:4f:99:09:47:36:9c:
09:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:A3:77:9F:4B:EE:87:D4:82:63:2F:9A:47:25:39:58:20:80:B1
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/gVKjd59L7ofUgmMvmkclOVgggLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.238.17.0/24
Signature Algorithm: sha256WithRSAEncryption
89:0f:5a:75:9d:53:41:e6:01:92:02:25:a6:a7:6e:d8:53:34:
f9:73:fd:20:3f:ea:b5:00:ee:b8:a8:8b:14:22:4c:07:c8:d2:
9c:e1:0f:28:bb:bc:5d:b2:01:e6:68:34:71:2d:cb:cf:da:7e:
ef:a8:cf:2f:5d:cf:c9:25:95:98:f0:aa:af:37:74:13:31:3e:
d1:10:e5:37:75:4c:7e:b9:21:6b:42:ba:f0:43:ed:ed:c6:ff:
12:d0:55:e4:58:a1:b1:b2:fd:a4:37:79:af:b5:8e:54:03:bd:
4f:4e:a7:01:fd:66:b0:bd:31:37:b1:ae:aa:31:7b:28:d7:b5:
96:c8:46:bd:86:d4:32:31:50:ff:87:5b:ab:68:4d:e6:28:48:
c6:af:76:88:12:b0:23:e8:97:86:f2:03:ca:41:d4:1f:7a:22:
fc:79:d5:d3:a9:57:fc:bc:90:d5:f8:40:5f:d6:e9:97:f1:6d:
e4:35:21:79:3d:b8:97:02:b4:9c:10:f5:91:17:42:6d:87:2c:
ea:b7:d1:c4:4a:5c:a1:32:80:07:37:44:36:ba:fe:aa:2e:79:
26:eb:b0:48:9b:43:4f:74:33:81:51:a5:9a:61:94:35:b5:72:
c4:c2:fd:ad:a1:7f:a0:6c:c7:9b:65:1a:0e:97:70:50:8b:eb:
85:ed:6c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:50 2025 by rpki-client