Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1aoSw1Ea5FKovmPN1EZJCKSoyS4.roa
File: 1aoSw1Ea5FKovmPN1EZJCKSoyS4.roa (raw, json)
Hash identifier: 4MEe8gJn5C2JSni2dk66YEjjNOA4cCsKfbKlyyNHBpg=
Subject key identifier: D5:AA:12:C3:51:1A:E4:52:A8:BE:63:CD:D4:46:49:08:A4:A8:C9:2E
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188C0308274C8696DD50B44F90965EEE934
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1aoSw1Ea5FKovmPN1EZJCKSoyS4.roa
Signing time: Thu 15 Jun 2023 17:53:04 +0000
ROA not before: Thu 15 Jun 2023 17:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 107.161.166.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
2a07:9944:40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c0:30:82:74:c8:69:6d:d5:0b:44:f9:09:65:ee:e9:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 15 17:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5aa12c3511ae452a8be63cdd4464908a4a8c92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:2c:7e:7b:e8:be:04:77:76:a5:0f:8f:17:
b2:cf:04:b5:86:9b:49:f1:de:db:89:cc:4a:af:18:
e8:b2:61:c3:27:59:54:4b:ca:a3:eb:b7:6d:94:a2:
d9:b4:c6:3b:e1:80:f6:e9:34:e7:f7:d8:09:56:2d:
22:bc:18:83:81:64:c6:2d:ef:96:84:60:8d:4f:f8:
cb:dc:a6:0d:af:07:4d:c9:8c:20:45:4d:ec:6a:d3:
38:64:00:c7:54:3e:c4:4b:d6:3d:97:98:0f:db:c8:
c8:af:c5:16:35:26:83:9c:9d:e7:28:33:c6:3e:c7:
06:93:ef:7a:af:8e:44:bd:06:74:96:40:e8:de:e7:
6b:80:ad:37:3d:1b:6c:ac:c2:b6:88:90:25:1d:ee:
e5:7c:44:4a:58:5c:fc:45:82:6c:3f:0a:bb:8b:9a:
a3:6e:9d:d6:9e:52:2c:6a:0a:f1:a3:6d:72:93:36:
b2:7e:1d:12:52:ae:a0:e2:5f:d8:1d:69:3b:c2:6f:
c9:fe:a0:f4:f4:7d:5c:55:37:19:40:02:e2:d3:d7:
7b:86:42:0f:65:5c:4c:d0:d0:a5:77:7b:4a:4b:aa:
5d:e8:d8:16:7d:e4:65:00:fe:f4:54:9a:ea:43:b6:
a5:f3:81:d3:45:b2:3f:dc:25:a1:42:a9:a2:4a:02:
23:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AA:12:C3:51:1A:E4:52:A8:BE:63:CD:D4:46:49:08:A4:A8:C9:2E
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/1aoSw1Ea5FKovmPN1EZJCKSoyS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.166.0/23
IPv6:
2a07:9944:40::/48
Signature Algorithm: sha256WithRSAEncryption
1d:6d:94:66:c6:6b:22:7c:03:58:bb:5e:d8:b6:f3:32:22:85:
a3:52:d9:74:20:e3:58:a8:fc:47:ec:bf:61:b4:dd:51:f5:20:
69:8f:33:c8:30:e7:f4:e5:23:87:e3:e2:68:fb:59:21:0a:a9:
07:02:e5:71:77:53:00:0a:b9:3f:74:57:0c:b2:da:f1:f2:ab:
d6:bd:ab:7b:60:51:35:79:c0:ef:ca:b9:0f:6e:ec:27:81:35:
ed:f1:4b:9b:e2:36:e2:e0:35:26:2f:11:0e:14:94:d2:8c:91:
ea:68:fd:2d:7e:bc:92:27:4f:50:15:b7:ae:c0:8a:8a:6c:11:
cb:0a:b4:fe:6c:a3:1c:fa:2d:38:da:a6:ed:e8:b9:25:81:7b:
81:0d:6d:98:5e:cb:15:4b:29:be:9b:2f:76:6e:1e:0a:d7:3c:
f1:45:33:83:14:75:a4:51:99:7c:dd:bd:4b:ae:59:1f:61:58:
21:63:20:fb:f8:6d:54:52:59:68:32:7b:e1:d9:94:bc:01:d3:
d8:4d:6f:85:73:9c:fe:aa:5b:78:3c:c9:67:ad:6c:8a:ce:17:
98:30:e7:55:94:63:46:0e:7c:9a:08:66:bd:3d:ac:50:21:ed:
5d:b6:d3:28:58:63:03:9b:a7:99:ee:ab:d7:33:b5:07:57:c4:
33:c1:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org