Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/zrcHSsPoG1VeZXJa7hmg34w71G8.roa
File: zrcHSsPoG1VeZXJa7hmg34w71G8.roa (raw, json)
Hash identifier: ueooiQS9ZKUv3g4mI2ncrXp2oejAeeA3MuvRbpe124s=
Subject key identifier: CE:B7:07:4A:C3:E8:1B:55:5E:65:72:5A:EE:19:A0:DF:8C:3B:D4:6F
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0187C742E155E76AFC5381E364B3DAFEFD80
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/zrcHSsPoG1VeZXJa7hmg34w71G8.roa
Signing time: Fri 28 Apr 2023 09:47:41 +0000
ROA not before: Fri 28 Apr 2023 09:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11426
IP address blocks: 104.249.32.0/22 maxlen: 22
104.249.56.0/22 maxlen: 22
45.43.132.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:42:e1:55:e7:6a:fc:53:81:e3:64:b3:da:fe:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Apr 28 09:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb7074ac3e81b555e65725aee19a0df8c3bd46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:2e:f1:61:16:7a:a4:b6:8e:09:0a:c5:b3:
06:eb:8d:65:10:2f:13:90:22:67:29:a1:6b:d8:80:
78:d5:8e:b2:6a:58:f5:fc:c5:6c:5f:cc:5a:8b:a4:
81:3d:d0:40:0f:10:22:33:fa:f3:af:0c:0e:50:18:
ae:b8:4c:09:df:a8:5e:40:64:71:02:07:49:41:f5:
a4:5d:10:ff:bf:16:f8:59:6b:a9:9c:f5:e0:e9:e9:
3a:30:08:45:86:5b:b3:c3:89:4e:24:a9:ad:a3:d2:
8d:eb:97:ef:6a:7d:bf:bf:76:97:9d:29:a9:46:d6:
00:b6:0d:b0:31:02:f8:80:6e:97:28:3e:e1:67:40:
11:fd:9a:5b:70:c9:e9:cb:cd:be:95:80:bb:86:b8:
d4:4e:32:58:19:d4:78:8b:83:b0:be:fb:fb:77:de:
43:9c:4f:d5:5a:30:8b:10:02:7b:86:80:25:a3:63:
37:9f:ad:3b:8e:03:b9:6d:40:91:e8:e1:95:3b:6e:
af:06:fb:d0:7c:6b:6e:67:22:43:d5:86:38:0f:bc:
32:5c:ba:c5:91:94:9c:d1:a2:1f:90:45:b5:90:fc:
ec:16:88:7a:7d:62:5b:f3:44:e0:89:0b:02:6a:9d:
00:d0:aa:f7:52:d4:e6:be:cf:c0:11:2c:c6:4d:8b:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B7:07:4A:C3:E8:1B:55:5E:65:72:5A:EE:19:A0:DF:8C:3B:D4:6F
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/zrcHSsPoG1VeZXJa7hmg34w71G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.132.0/22
104.249.32.0/22
104.249.56.0/22
Signature Algorithm: sha256WithRSAEncryption
00:f0:9d:1f:54:0a:82:09:df:a8:df:ae:08:ed:26:e3:af:ae:
ea:8d:5a:5e:75:7e:28:b4:70:c5:02:87:9e:93:0d:3a:b1:3a:
8b:58:5b:5e:be:18:68:d0:02:8e:42:85:d1:91:62:04:67:d3:
d3:b8:32:04:20:c8:87:d8:8f:d1:e6:fb:5c:9f:1f:63:00:e1:
5d:e1:1a:62:d5:6a:04:1b:9a:98:3d:93:e9:b4:23:81:7d:cd:
e6:20:8c:2d:28:ec:9e:a5:eb:5c:db:dd:32:37:7f:f6:95:5c:
55:d7:b6:18:2d:e6:1f:b8:f1:9c:ae:36:99:4a:13:34:5c:c6:
2b:61:a1:c4:57:1a:66:2e:d4:cd:b4:68:e3:75:77:1b:cd:58:
ba:e8:73:60:13:5d:1c:37:c5:41:ef:0e:79:5d:bd:37:b7:77:
0a:03:c9:84:fd:88:1f:97:ab:14:cb:46:2c:0c:fa:58:7e:1a:
7a:03:a2:2f:d7:d8:f5:f0:72:38:79:9f:37:bb:24:03:1f:a6:
b7:06:cd:ac:dc:bf:1a:40:4a:71:55:3e:de:c1:2d:60:48:5f:
e0:6e:a5:eb:e1:c9:d4:00:82:c4:8b:14:49:2f:40:84:67:66:
6f:35:c1:df:a3:16:57:5a:59:d8:2b:88:53:7c:49:26:a3:11:
07:2b:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:40 2024 by rpki-client on console-fra.rpki-client.org