Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/s2gfYLXmCz8Eimmt0KsIHydX_00.roa
File: s2gfYLXmCz8Eimmt0KsIHydX_00.roa (raw, json)
Hash identifier: NeN7lRLamJzvqm60CAw/JVjCUR4oCYQMsumXYSETB2o=
Subject key identifier: B3:68:1F:60:B5:E6:0B:3F:04:8A:69:AD:D0:AB:08:1F:27:57:FF:4D
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0185725EC0032F33805A9F4708DC9C8689D5
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/s2gfYLXmCz8Eimmt0KsIHydX_00.roa
Signing time: Mon 02 Jan 2023 12:04:50 +0000
ROA not before: Mon 02 Jan 2023 12:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 104.249.25.0/24 maxlen: 24
104.249.63.0/24 maxlen: 24
104.249.62.0/24 maxlen: 24
216.173.112.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:5e:c0:03:2f:33:80:5a:9f:47:08:dc:9c:86:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 2 12:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3681f60b5e60b3f048a69add0ab081f2757ff4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:fc:fa:fa:30:19:e7:cd:da:37:15:24:05:
2f:9a:82:48:91:90:c9:30:94:8e:20:60:ee:22:0f:
f4:ac:2c:d8:30:3e:c7:bf:bd:c1:a1:3e:83:5a:35:
fe:e4:a0:08:a6:a1:09:21:b7:73:e2:9e:33:1f:a9:
c2:c3:c5:46:a7:82:08:b1:11:16:77:10:5e:c3:47:
36:28:2c:c4:0f:58:a7:60:d8:81:5d:aa:61:dd:8e:
0a:05:fc:2b:24:20:5b:89:ed:d8:22:e4:e9:38:6b:
01:34:04:2b:ff:15:55:d5:95:17:84:e3:ee:49:1c:
01:57:c3:6a:a8:c0:cc:6e:ee:54:12:6b:6b:38:59:
69:a0:42:70:06:d5:d3:4e:4f:7f:e7:5c:0f:bb:d7:
8e:b8:27:82:e3:96:0c:dd:f1:f1:bb:c2:be:2e:ae:
ae:c5:51:47:9c:eb:39:6f:79:80:1c:21:1e:95:77:
c3:c0:81:80:2b:88:43:3c:6d:c4:f8:89:d7:12:b5:
21:b9:f9:4b:d2:f8:5b:d0:35:1c:69:83:c9:7f:9e:
86:36:d8:c0:38:e5:d4:44:25:3a:2a:49:bd:bf:f9:
36:be:d7:27:c6:15:5b:a9:5f:d7:5e:0c:52:d4:a8:
8f:e1:7e:d9:3a:da:98:59:4d:34:90:4a:d6:dd:8e:
ad:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:1F:60:B5:E6:0B:3F:04:8A:69:AD:D0:AB:08:1F:27:57:FF:4D
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/s2gfYLXmCz8Eimmt0KsIHydX_00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.249.25.0/24
104.249.62.0/23
216.173.112.0/21
Signature Algorithm: sha256WithRSAEncryption
3a:9d:79:a1:a5:a5:09:3f:e9:75:9a:58:5a:bd:0d:eb:85:de:
23:01:51:76:db:d9:ee:75:bd:53:ba:0d:93:c1:5d:07:7a:b3:
d9:87:d9:bf:9b:f2:f5:32:50:0f:22:b1:df:bd:91:7f:0b:4b:
c1:53:31:af:ad:e8:19:ea:64:e1:4c:ee:60:5d:53:1a:82:65:
f3:c5:8c:af:e9:8f:de:3d:90:33:8f:75:23:aa:39:21:ef:1f:
45:4a:37:49:b3:e9:23:8f:65:c8:5e:6e:6e:7d:08:7c:8c:9d:
4e:65:b4:3f:16:20:07:ce:84:75:c1:c9:de:c6:fc:c4:33:21:
37:1f:36:bc:ef:ab:cc:90:60:61:2b:55:88:eb:6b:ca:b0:2a:
58:f4:2a:01:36:4b:57:e5:fc:a4:71:5b:91:e0:eb:78:42:14:
ec:ad:3b:6b:66:4b:6e:28:c0:bf:45:e7:70:79:51:05:cc:f8:
08:b7:08:9f:1b:66:bd:c5:99:46:aa:30:79:fd:7d:78:03:31:
51:d7:e5:a6:38:23:8d:f1:a6:5b:fa:15:6d:01:15:d4:0c:4d:
50:71:5a:3f:e6:da:76:43:53:3b:28:0c:a8:6c:3d:06:b0:e4:
49:5c:b0:1e:02:55:d3:69:22:be:04:1c:23:b3:f8:26:23:7f:
3d:33:f2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 16:48:38 2023 by rpki-client on console-fra.rpki-client.org