Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vRpS78WO6qK0VFNOww6Bl6WS0IY.roa
File: vRpS78WO6qK0VFNOww6Bl6WS0IY.roa (raw, json)
Hash identifier: aglhnvHpGrGr6wXc69sJV4Mm6g5fSDWkrYyHM5A71gg=
Subject key identifier: BD:1A:52:EF:C5:8E:EA:A2:B4:54:53:4E:C3:0E:81:97:A5:92:D0:86
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018F4060CCB89915A949F9A4C44B34621AE6
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vRpS78WO6qK0VFNOww6Bl6WS0IY.roa
Signing time: Fri 03 May 2024 21:33:56 +0000
ROA not before: Fri 03 May 2024 21:33:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 104.239.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 09 May 2024 13:23:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:60:cc:b8:99:15:a9:49:f9:a4:c4:4b:34:62:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: May 3 21:33:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd1a52efc58eeaa2b454534ec30e8197a592d086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:30:a3:3e:97:6f:ce:9d:05:6c:6a:9d:7d:43:
4a:7b:0b:93:a9:cf:ac:1e:dd:af:fb:ee:b6:b8:92:
ee:8c:7b:d0:09:79:0d:1d:57:de:73:04:2d:06:f0:
d5:00:d0:83:ff:7a:68:3e:57:09:e1:c3:d8:fc:39:
87:cb:5a:fd:55:b7:e6:63:22:88:76:1d:e4:88:f8:
42:2b:a2:6e:80:6c:61:d1:97:1a:91:29:83:e3:b4:
a7:03:71:b3:ba:42:a7:f1:ed:23:22:c7:0d:7f:2c:
31:0a:39:b2:ef:bf:a8:37:1c:fc:81:fd:cf:43:70:
9e:29:6e:f1:39:65:f5:6c:4b:bd:af:5f:1e:56:6b:
f3:f7:92:86:6f:fe:24:e1:5b:57:0b:35:bd:23:63:
ac:fa:3d:95:b7:16:a7:f3:cd:06:79:ea:6a:a9:27:
7e:f9:e7:99:d4:40:3d:f7:5c:1c:12:0d:19:d5:54:
b8:87:0a:75:21:e5:cd:84:88:9b:92:7f:71:9e:d4:
39:90:cf:9e:02:2e:75:2a:eb:03:85:25:a9:2e:9d:
a0:39:bc:13:31:ad:d5:46:84:98:3c:aa:ce:85:e6:
22:02:97:c7:a1:8b:f9:db:01:fa:af:3a:c5:f6:8b:
f4:c0:33:84:32:37:93:60:90:71:10:99:47:e9:42:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1A:52:EF:C5:8E:EA:A2:B4:54:53:4E:C3:0E:81:97:A5:92:D0:86
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vRpS78WO6qK0VFNOww6Bl6WS0IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.67.0/24
Signature Algorithm: sha256WithRSAEncryption
16:4d:ef:ef:e1:02:5e:ff:e5:b7:31:9d:7b:f9:a2:0f:de:3d:
1a:a0:38:3c:e7:81:99:2e:26:01:03:e0:64:a7:58:97:1e:49:
3c:50:4e:38:03:50:d4:12:0d:0c:55:fa:9f:9b:7e:29:2a:63:
57:a4:ea:93:e9:b8:4e:12:22:ee:20:fd:76:20:95:1c:ea:c6:
07:0a:a6:1e:72:7a:24:a3:75:46:5c:9c:6d:fe:20:3d:16:56:
d5:35:37:70:39:83:4a:ee:c3:55:f2:cf:1e:93:fe:58:da:72:
0c:05:12:ae:e4:5c:ec:8b:bb:07:21:d1:c1:b5:44:3a:2f:a0:
87:11:d4:8a:7b:2b:44:cc:e6:1f:42:01:46:41:5c:e1:e8:72:
16:06:2c:14:7c:25:7a:dd:6e:00:a3:6c:12:49:40:bb:e6:5f:
8c:b2:5d:90:85:07:ad:73:2d:d8:83:a2:ab:55:53:e0:08:1f:
5a:95:ad:ee:18:8f:83:3d:62:9f:50:84:15:47:27:5e:b2:2b:
c8:44:0e:de:d0:98:34:59:3e:c3:30:85:ed:db:1b:07:09:22:
05:50:10:d4:93:de:12:69:23:b5:64:6f:57:ba:b1:60:2e:41:
41:ff:c2:d0:81:32:7b:67:73:6c:7a:32:ac:02:09:05:de:69:
e1:6d:c2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:45 2024 by rpki-client on console-ams.rpki-client.org