Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xV_oQDd8pT8B9YNdhtgBY-u3f1g.roa
File: xV_oQDd8pT8B9YNdhtgBY-u3f1g.roa (raw, json)
Hash identifier: WEva0Thg57PyO2JmTD4Cjv+y0oxgxKzHBnv9uQAq3vI=
Subject key identifier: C5:5F:E8:40:37:7C:A5:3F:01:F5:83:5D:86:D8:01:63:EB:B7:7F:58
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01869266084A3A1D17231652EE93EDD79C19
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xV_oQDd8pT8B9YNdhtgBY-u3f1g.roa
Signing time: Mon 27 Feb 2023 10:23:25 +0000
ROA not before: Mon 27 Feb 2023 10:23:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205964
IP address blocks: 104.239.0.0/23 maxlen: 23
104.239.4.0/23 maxlen: 23
104.239.2.0/23 maxlen: 23
104.239.6.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Mar 2023 17:20:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:66:08:4a:3a:1d:17:23:16:52:ee:93:ed:d7:9c:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Feb 27 10:23:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c55fe840377ca53f01f5835d86d80163ebb77f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:57:f8:f6:ff:80:dd:84:00:38:b5:57:c2:80:
75:ea:f1:d1:0b:20:b0:28:e6:c9:d1:f6:6c:f3:99:
a0:bc:fd:a3:97:10:04:ff:0a:21:f0:5d:da:f7:6b:
3b:a9:6d:5d:f9:8e:0d:9c:72:bd:aa:b7:44:d8:0e:
52:7e:74:60:98:a9:18:da:50:91:73:c1:6a:c3:f9:
76:13:30:24:7e:36:3e:f7:ce:7d:a4:a9:df:d8:50:
68:84:ed:d6:60:a3:dc:a3:37:e9:58:b9:d8:8d:b4:
e8:36:74:7d:ac:3f:d3:cc:47:df:f9:fa:c4:97:10:
16:28:81:9a:0a:3e:d5:37:94:0e:41:6c:5b:9e:89:
fc:a1:b3:9c:80:52:a2:8d:74:98:c7:82:b8:a0:7d:
30:dc:46:f9:49:ed:1a:7e:1b:68:11:e1:d4:6a:ac:
8f:93:6e:cf:80:c1:53:f6:eb:f9:e4:11:8f:d2:cf:
7a:b7:12:2c:4a:3b:89:16:76:82:8e:30:3c:57:bc:
56:e7:85:fa:56:3a:91:f7:56:9d:8b:b7:4b:39:f2:
3f:d6:ce:43:83:f1:44:02:bb:e0:03:e6:0d:23:13:
9e:89:87:80:72:f0:21:80:b4:42:02:fa:5e:8a:f7:
da:0c:e0:7e:a0:70:89:ad:f0:fd:d8:d4:03:f2:d8:
e6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5F:E8:40:37:7C:A5:3F:01:F5:83:5D:86:D8:01:63:EB:B7:7F:58
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/xV_oQDd8pT8B9YNdhtgBY-u3f1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.239.0.0/21
Signature Algorithm: sha256WithRSAEncryption
55:24:ac:44:0b:39:b0:95:2f:d8:4c:7f:84:14:6e:23:ac:22:
48:a4:47:51:d8:5e:28:d1:c0:07:65:19:ad:62:f9:0e:0f:ac:
bf:07:1b:52:f7:49:f4:e2:a6:16:b5:01:69:32:85:55:d9:a1:
12:3b:e4:81:56:ae:ff:25:45:44:ca:19:2e:61:ac:fb:65:e7:
f4:2c:09:ae:80:e0:19:eb:3c:b1:2e:dc:e3:4f:03:e1:f1:8e:
6d:53:35:fc:7d:a8:ca:1e:33:0c:86:14:a7:9f:f4:da:13:b7:
cb:39:36:9d:55:9d:70:d3:14:ee:51:7f:1b:50:70:4e:00:01:
e4:a7:4c:8e:7b:7b:b0:f9:43:fc:cd:43:11:4a:ed:e9:0e:c2:
fb:71:4b:3d:9a:f3:10:70:8e:30:c6:86:0f:ea:12:4a:8e:02:
c6:b2:06:64:5e:26:75:4b:6a:c0:f8:97:be:72:f9:93:8d:29:
09:0b:5d:a4:41:4c:c0:03:23:23:26:29:d1:83:48:fb:47:6a:
e8:2e:ef:4a:1e:ca:e1:c2:5b:d8:8e:59:d9:67:c0:02:33:cb:
a2:6d:e9:1b:8d:c2:8c:e6:ef:6d:b5:0d:5b:b4:79:cc:ea:71:
f0:bc:cc:ed:73:3a:ea:4c:ac:50:42:ec:8e:71:b8:c3:ae:5f:
a0:eb:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:45 2024 by rpki-client on console-ams.rpki-client.org