Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_m4UjtX3cCWi8E5TflnWzB-aQ-E.roa
File: _m4UjtX3cCWi8E5TflnWzB-aQ-E.roa (raw, json)
Hash identifier: ri60QRrE9cH33C0U8cpjbb4kbIXByZYKzRjMCnDGquQ=
Subject key identifier: FE:6E:14:8E:D5:F7:70:25:A2:F0:4E:53:7E:59:D6:CC:1F:9A:43:E1
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D75186F22B6FB41B4E6B9E6F7168
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_m4UjtX3cCWi8E5TflnWzB-aQ-E.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 107.181.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d7:51:86:f2:2b:6f:b4:1b:4e:6b:9e:6f:71:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe6e148ed5f77025a2f04e537e59d6cc1f9a43e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:11:e2:31:78:0b:35:40:19:b3:de:61:3e:3e:
06:61:a3:98:83:07:b2:cb:75:b3:49:08:d1:0f:fa:
03:33:51:9a:eb:47:50:59:3f:5c:97:6d:60:78:9f:
1c:23:b9:19:5c:83:09:7d:72:41:9f:13:ee:ac:f0:
f0:c4:2e:5b:1b:b0:92:f1:5e:6b:df:bb:74:10:88:
98:2c:45:6e:50:ba:53:e4:47:2e:1f:44:d3:3b:77:
50:6e:d8:0e:7f:d1:d5:ae:26:3e:86:83:4d:ad:c0:
fc:b1:a6:fb:f1:fb:82:15:40:96:aa:18:7a:b4:58:
74:bf:cc:14:49:bb:9c:3f:5a:a8:ce:30:d3:bd:36:
b2:42:ea:0b:ff:7c:39:6b:ca:58:64:0a:4f:a9:aa:
79:4e:24:c4:bc:6c:c5:43:8d:5d:05:68:13:cf:30:
5f:12:b7:91:1a:ff:3d:a2:a6:db:8a:2a:5c:f6:1c:
53:d6:ea:aa:57:29:0a:83:94:f6:49:72:83:f9:eb:
13:22:7b:6f:36:d7:50:65:d0:2c:e5:cc:46:30:e2:
a9:e7:3b:db:70:74:90:83:a5:36:bb:44:09:a2:5c:
26:e0:43:cf:5c:33:3c:5f:85:27:de:ca:26:d4:49:
7c:9c:5e:20:4a:20:70:53:2e:95:93:ca:9a:32:78:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:14:8E:D5:F7:70:25:A2:F0:4E:53:7E:59:D6:CC:1F:9A:43:E1
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/_m4UjtX3cCWi8E5TflnWzB-aQ-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.140.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:16:97:ff:2f:fd:c7:83:f1:0e:a3:fa:23:18:aa:4a:74:6b:
c0:e7:3a:b2:c6:18:c1:e4:2d:5c:8c:81:77:da:73:bb:ea:fe:
77:6a:26:f1:0f:33:82:73:78:6c:15:cf:cb:e8:ca:17:4a:85:
32:41:ce:63:f6:5c:2a:a3:86:07:e2:45:d7:dc:e9:0f:01:c5:
c5:dd:c8:e9:12:40:8e:be:81:59:e5:d1:79:d8:9c:aa:5e:70:
db:7e:40:0c:87:7c:b7:d7:60:b9:1a:9a:8a:4a:50:a2:fa:f5:
e7:bf:2e:b7:60:ef:18:b5:54:37:2b:cf:f5:d8:96:c4:d4:8a:
3e:35:81:c6:12:d0:ff:aa:4d:ad:f9:91:8c:2b:57:96:29:c0:
26:8f:ed:a2:13:29:a0:1b:4e:73:b2:97:90:82:b1:d3:51:5a:
ef:5f:bb:b3:27:1c:5b:f1:c9:f1:eb:38:64:67:af:c1:25:3e:
82:dd:af:70:94:e4:64:b7:e9:0c:6e:d4:e8:00:7e:45:55:75:
ea:3f:7e:27:a0:15:cf:26:73:d9:86:c8:44:3c:ab:6a:c5:1d:
44:f4:a3:5f:42:06:22:ee:88:6c:f5:b1:7c:62:0b:b8:57:81:
e9:dc:dc:d2:96:40:ad:53:f6:fa:2d:49:4f:af:e0:6e:50:a7:
6d:16:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org