Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5D-HkvF_sVrV0mLtKJLlnswoebo.roa
File: 5D-HkvF_sVrV0mLtKJLlnswoebo.roa (raw, json)
Hash identifier: /LWymSk9avC6vGGm2sqcF6lI+ddtjBomjIDYtY4E2e8=
Subject key identifier: E4:3F:87:92:F1:7F:B1:5A:D5:D2:62:ED:28:92:E5:9E:CC:28:79:BA
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94DCA2FA6C3E936BE8B0812C6119C1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5D-HkvF_sVrV0mLtKJLlnswoebo.roa
Signing time: Sun 01 Jan 2023 23:05:04 +0000
ROA not before: Sun 01 Jan 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 155.254.36.0/22 maxlen: 24
107.181.140.0/22 maxlen: 24
198.105.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:dc:a2:fa:6c:3e:93:6b:e8:b0:81:2c:61:19:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e43f8792f17fb15ad5d262ed2892e59ecc2879ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:b5:79:b1:b9:f3:9d:ea:72:a5:00:16:89:
c7:42:3d:b0:ce:8a:9d:86:55:8d:8d:71:1e:56:4d:
34:f3:30:b1:f4:7a:7e:58:5d:a4:58:6c:39:4b:9b:
fc:e3:7c:b3:d2:9b:67:cc:32:8c:dd:02:f4:57:30:
a2:de:56:bf:60:db:ee:2e:f6:29:f1:ee:a0:a8:1c:
77:1e:5d:fd:1d:8e:77:04:ba:60:b3:83:12:5d:a4:
3a:b9:07:57:b1:00:03:65:80:e4:3c:66:47:5a:e9:
60:76:b1:48:76:71:f5:72:62:68:20:15:94:b7:fb:
ad:57:31:a2:64:b7:94:30:96:73:37:c1:e5:01:6e:
aa:5d:67:9b:f0:fb:26:dc:13:05:8b:5a:9c:37:58:
0d:bf:d2:2a:7f:fd:87:1e:86:10:92:a2:29:c3:51:
ce:7c:8b:be:aa:a3:26:3c:9e:f6:b8:84:2c:db:2a:
83:30:1d:71:f0:51:f4:29:1e:67:0e:6f:2a:42:c1:
d3:00:5f:12:ea:80:33:e8:e6:6b:89:7f:39:f1:4a:
99:d9:97:6c:b0:b0:fe:f7:74:fd:cd:a9:fe:9c:aa:
3e:5f:77:5c:06:7f:7d:ec:35:bc:c0:66:ea:89:c7:
63:d6:d3:d8:fb:c5:cd:3a:1d:20:d8:a9:97:4d:a2:
a5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3F:87:92:F1:7F:B1:5A:D5:D2:62:ED:28:92:E5:9E:CC:28:79:BA
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/5D-HkvF_sVrV0mLtKJLlnswoebo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.140.0/22
155.254.36.0/22
198.105.100.0/22
Signature Algorithm: sha256WithRSAEncryption
08:81:17:de:62:04:bc:99:15:c7:69:f7:11:e2:75:8d:45:88:
25:71:b8:22:1d:d1:51:ee:6e:89:b3:d5:6f:7d:43:c2:12:11:
a7:68:ec:d1:00:d5:92:d3:1a:e6:c6:7a:ab:58:56:27:06:dc:
97:28:11:1f:49:b5:f8:ed:c3:e4:88:b1:53:64:a2:a1:b0:f5:
d3:ca:e9:68:cf:a7:4c:27:25:45:9e:9f:02:53:c6:b8:9b:b6:
19:b5:9f:32:98:bc:89:ec:ad:db:84:4f:97:e6:20:98:0e:66:
c9:09:4a:31:c8:29:90:83:cd:4d:42:b6:66:0b:b4:79:64:00:
27:87:1d:48:4b:2b:33:aa:73:4f:bd:e1:de:7b:ce:c7:00:0b:
57:00:96:09:61:0c:46:e1:d1:78:4d:26:61:8f:3f:0b:8b:e6:
e7:6a:63:83:cd:2d:b4:3c:5e:7f:35:51:5b:d1:14:e4:e6:5e:
3d:4a:3c:e9:2e:24:54:7d:70:b8:37:fb:da:b3:e4:55:b8:93:
53:b8:28:36:ac:15:d3:68:1e:60:1f:20:be:46:be:82:76:95:
32:53:d7:05:e3:f5:df:c9:3b:9a:38:cc:22:4e:9b:16:60:81:
16:57:a9:2d:c3:02:ba:c7:fb:c1:11:bf:2e:b1:f3:ca:a4:65:
7e:00:99:57
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVvlNyi+mw+k2vosIEsYRnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz
NGQ2MDMwHhcNMjMwMTAxMjMwNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDNmODc5MmYxN2ZiMTVhZDVkMjYyZWQyODkyZTU5ZWNjMjg3OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE21ebG5853qcqUAFonHQj2wzoqd
hlWNjXEeVk008zCx9Hp+WF2kWGw5S5v843yz0ptnzDKM3QL0VzCi3la/YNvuLvYp
8e6gqBx3Hl39HY53BLpgs4MSXaQ6uQdXsQADZYDkPGZHWulgdrFIdnH1cmJoIBWU
t/utVzGiZLeUMJZzN8HlAW6qXWeb8Psm3BMFi1qcN1gNv9Iqf/2HHoYQkqIpw1HO
fIu+qqMmPJ72uIQs2yqDMB1x8FH0KR5nDm8qQsHTAF8S6oAz6OZriX858UqZ2Zds
sLD+93T9zan+nKo+X3dcBn997DW8wGbqicdj1tPY+8XNOh0g2KmXTaKlmQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOQ/h5Lxf7Fa1dJi7SiS5Z7MKHm6MB8GA1UdIwQY
MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It
MzdiNjJkMjIzOTI0LzEvNUQtSGt2Rl9zVnJWMG1MdEtKTGxuc3dvZWJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0
LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa7WMAwQC
m/4kAwQCxmlkMA0GCSqGSIb3DQEBCwUAA4IBAQAIgRfeYgS8mRXHafcR4nWNRYgl
cbgiHdFR7m6Js9VvfUPCEhGnaOzRANWS0xrmxnqrWFYnBtyXKBEfSbX47cPkiLFT
ZKKhsPXTyuloz6dMJyVFnp8CU8a4m7YZtZ8ymLyJ7K3bhE+X5iCYDmbJCUoxyCmQ
g81NQrZmC7R5ZAAnhx1ISyszqnNPveHee87HAAtXAJYJYQxG4dF4TSZhjz8Li+bn
amODzS20PF5/NVFb0RTk5l49SjzpLiRUfXC4N/vas+RVuJNTuCg2rBXTaB5gHyC+
Rr6CdpUyU9cF4/XfyTuaOMwiTpsWYIEWV6ktwwK6x/vBEb8usfPKpGV+AJlX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org