Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vYIi51G2vEbWEhi-PYwLjXO7roI.roa
File: vYIi51G2vEbWEhi-PYwLjXO7roI.roa (raw, json)
Hash identifier: ++vs0X2EMgN0KNGPoHXT+jI6aLYTTLmyX9hF8+pO2CA=
Subject key identifier: BD:82:22:E7:51:B6:BC:46:D6:12:18:BE:3D:8C:0B:8D:73:BB:AE:82
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 018CF8A56FD9A2957DC3A6C94E2EF14673D4
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vYIi51G2vEbWEhi-PYwLjXO7roI.roa
Signing time: Thu 11 Jan 2024 13:10:40 +0000
ROA not before: Thu 11 Jan 2024 13:10:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 104.238.26.0/24 maxlen: 24
104.238.29.0/24 maxlen: 24
104.233.63.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.239.49.0/24 maxlen: 24
104.239.50.0/24 maxlen: 24
104.239.51.0/24 maxlen: 24
216.173.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 12 Jan 2024 11:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:a5:6f:d9:a2:95:7d:c3:a6:c9:4e:2e:f1:46:73:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Jan 11 13:10:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd8222e751b6bc46d61218be3d8c0b8d73bbae82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:9e:fc:83:7f:fa:42:20:0c:ea:36:c5:4c:
d2:19:e1:c7:26:0a:18:83:00:76:aa:6a:a5:c4:aa:
8f:40:e5:35:f3:91:6b:76:99:7e:ff:66:f3:be:f9:
b8:a9:d1:b0:d3:cc:10:ca:e2:73:9c:5c:88:4b:cc:
d2:d5:c1:11:7d:87:24:83:4a:8b:f6:30:6d:19:19:
3a:b3:89:f5:d2:96:7d:98:70:f3:64:a9:73:8c:b8:
c2:e8:ff:39:5f:cd:1a:24:7c:d1:27:ae:09:c5:9f:
bc:54:bc:42:cf:46:2b:31:64:ed:0b:41:05:d4:38:
8e:64:77:3d:c1:c3:bc:eb:b1:b4:47:3e:b9:d3:e5:
62:68:b0:09:e0:89:6c:fc:7d:70:0d:59:80:7d:fe:
01:bb:44:35:ad:4a:eb:b7:42:a3:14:0d:47:c6:34:
c0:d3:4f:dc:b8:0c:1e:75:03:7e:0e:1e:e4:44:79:
bc:e6:5b:e9:e8:51:80:0b:91:ce:e2:dc:02:93:75:
da:c8:18:ac:16:5a:09:81:78:00:ae:76:ff:25:91:
e6:21:37:c9:ca:05:88:b6:42:1d:4c:c0:74:3c:ed:
3e:27:98:2e:b4:6b:c5:c1:ff:87:06:1a:38:40:fe:
91:4a:6d:42:c8:a1:8d:12:83:96:c7:fa:c8:96:92:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:82:22:E7:51:B6:BC:46:D6:12:18:BE:3D:8C:0B:8D:73:BB:AE:82
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/vYIi51G2vEbWEhi-PYwLjXO7roI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.233.60.0/22
104.238.26.0/24
104.238.29.0/24
104.239.49.0-104.239.51.255
216.173.64.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:70:fb:9b:73:11:fb:3f:30:e6:24:a7:96:7b:25:e8:64:06:
76:7c:f4:63:c5:46:e8:cf:dc:25:25:0e:15:77:65:88:a0:12:
0e:8c:17:ee:04:33:98:66:5f:d5:fb:ef:3b:f1:c7:dc:f9:11:
06:16:01:6b:62:7e:33:a2:a8:88:e6:80:9d:ff:d7:ec:fa:c7:
59:3d:37:ea:33:c1:b1:67:72:7f:85:b4:b8:aa:fa:36:4f:cc:
9c:32:58:52:c3:90:34:2a:04:86:b4:38:90:62:30:a2:ef:6b:
22:aa:6e:16:01:8c:e0:17:4d:9d:76:e7:f8:1d:3e:0b:be:4f:
e1:b3:45:4d:88:36:90:b6:cc:40:28:85:65:94:39:1d:2e:d8:
94:97:89:77:a2:87:1e:df:d0:ab:67:1b:50:b9:b8:92:56:5a:
ae:c8:0b:88:2e:0d:ec:97:28:48:57:93:64:59:77:01:1a:6f:
de:ca:87:49:e8:40:d3:0d:bd:be:53:6c:3e:00:0d:da:5a:d7:
08:e5:ba:61:31:4f:d4:32:82:4e:d3:b0:e1:73:93:05:50:87:
c1:b4:4e:c3:db:06:57:a4:e0:bd:36:8f:77:7c:aa:3b:29:85:
4a:5c:d2:dc:4a:0c:a5:f4:b2:65:db:b7:93:08:ed:d5:27:64:
1d:bd:97:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 12 16:15:08 2024 by rpki-client on console-ams.rpki-client.org