Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/EbQC81onYxwYEZa84GY17g0XDek.roa
File: EbQC81onYxwYEZa84GY17g0XDek.roa (raw, json)
Hash identifier: W7mDL9NVmlIKHbllYmDWEPPfOowY4PwNu8QUZer0qUw=
Subject key identifier: 11:B4:02:F3:5A:27:63:1C:18:11:96:BC:E0:66:35:EE:0D:17:0D:E9
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D7B761A633E6AEEB3D780475701A
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/EbQC81onYxwYEZa84GY17g0XDek.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20860
IP address blocks: 162.220.244.0/24 maxlen: 24
162.220.245.0/24 maxlen: 24
107.181.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d7:b7:61:a6:33:e6:ae:eb:3d:78:04:75:70:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b402f35a27631c181196bce06635ee0d170de9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:50:ca:6d:cd:8b:fa:5a:c9:a3:b5:2b:2f:3b:
fd:a6:62:a3:fd:76:f5:aa:d1:46:74:ec:68:57:b1:
59:4e:b3:f1:1b:a0:b5:fe:5b:90:49:ee:75:08:c0:
c3:de:c9:11:0e:c3:6a:ba:dc:ff:77:3f:45:51:cf:
35:6e:a8:0a:6f:ae:fa:02:cf:c5:31:77:72:a2:a4:
c4:c2:0e:c2:6f:1c:a4:68:a7:ad:e0:86:2a:ff:cb:
ad:c5:67:f8:23:8a:a0:6a:5f:81:0a:08:3a:f7:34:
41:32:d9:d7:0a:bb:dc:8f:8e:ee:5c:e5:0d:32:6e:
e2:ab:53:8b:96:79:15:e6:b5:29:26:f8:6d:76:26:
61:96:ba:41:44:ba:43:1c:8f:7f:a8:63:01:42:49:
23:2b:16:80:5a:1c:78:26:36:b3:d9:5b:2e:0c:af:
aa:c8:37:dd:3e:33:dd:9c:42:07:0a:31:15:0d:63:
dc:01:95:c0:95:2a:de:97:92:e2:d3:15:b4:d6:b0:
f9:8e:97:dd:aa:11:89:fd:23:81:8b:11:88:a8:3c:
32:c5:f6:8a:97:52:60:3d:e6:10:ed:fb:71:09:8f:
53:b1:03:22:41:10:88:d1:e4:57:b5:7f:88:0f:eb:
34:99:5f:a8:df:4e:15:9c:81:44:d7:0d:60:28:ee:
26:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B4:02:F3:5A:27:63:1C:18:11:96:BC:E0:66:35:EE:0D:17:0D:E9
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/EbQC81onYxwYEZa84GY17g0XDek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.136.0/24
162.220.244.0/23
Signature Algorithm: sha256WithRSAEncryption
af:1d:12:6e:ca:e6:1e:e6:a8:b9:c7:36:36:8d:05:0b:e9:95:
1e:37:94:4b:82:3b:68:28:14:18:99:b0:9b:18:af:28:06:08:
d6:c8:db:2d:01:6b:64:b7:70:b6:bb:2b:f4:97:96:c5:3f:f4:
88:01:d1:f7:c3:11:0a:ce:6c:0e:69:6e:ea:df:77:b5:60:23:
f0:bf:22:65:75:6b:dd:a5:a8:8a:db:cc:c3:68:e3:bd:e9:df:
76:89:43:b2:3a:71:a1:85:fe:52:4d:19:fb:36:50:66:71:2b:
aa:1c:b1:15:79:8f:95:3f:23:4d:c1:0d:d2:96:49:0f:65:3c:
ee:ae:76:fe:08:db:ca:38:f3:d1:0d:b5:3c:c6:0e:2e:1e:21:
33:63:0f:2d:e8:d4:a3:91:9b:78:0c:21:e8:87:ce:7e:3f:ea:
57:00:6c:8a:17:86:04:dc:b5:a2:f5:b3:2c:f0:f5:64:bc:87:
49:d9:d9:da:c2:8c:ea:58:6c:49:97:f0:6a:d1:34:78:08:31:
e8:3a:d9:f4:66:cf:7b:57:e5:b0:76:7e:bd:f8:f4:6d:30:a1:
12:89:5d:79:05:d9:63:3b:05:39:af:8d:84:48:0d:9e:b9:37:
58:6d:a7:d2:fc:66:96:c4:ab:0a:e0:f6:91:e9:29:c4:c1:55:
63:91:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org