Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dGNs96W22yVqRLrTE4c2F2hgork.roa
File: dGNs96W22yVqRLrTE4c2F2hgork.roa (raw, json)
Hash identifier: FruFfm8yPtQ3zYXmCT9NYmnP8bh9PGBQS0bk0jYbmEg=
Subject key identifier: 74:63:6C:F7:A5:B6:DB:25:6A:44:BA:D3:13:87:36:17:68:60:A2:B9
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188CF053215D3EF7FADD2DB73C76C6B6F36
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dGNs96W22yVqRLrTE4c2F2hgork.roa
Signing time: Sun 18 Jun 2023 15:00:04 +0000
ROA not before: Sun 18 Jun 2023 15:00:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 107.161.166.0/24 maxlen: 24
107.161.163.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
2a07:9944:40::/48 maxlen: 48
2a07:9945:45::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:05:32:15:d3:ef:7f:ad:d2:db:73:c7:6c:6b:6f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 18 15:00:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74636cf7a5b6db256a44bad3138736176860a2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:96:52:01:1c:97:2a:58:e6:f0:4d:c7:89:
10:76:9b:9e:7d:45:91:5a:10:ff:ae:8b:e2:82:0c:
59:4f:ca:00:88:88:cf:f7:01:93:02:ee:15:f3:4b:
78:70:d4:db:17:46:17:c3:41:d8:ee:16:7f:d9:24:
1b:9d:89:15:48:d5:2c:da:0b:d4:29:fb:d0:38:59:
a9:94:47:62:4d:68:b4:c8:45:67:8d:78:b4:d8:9c:
aa:82:3e:0c:a1:0f:0f:e7:c8:3f:38:35:e4:06:9a:
2b:e5:b6:a0:d5:36:a0:11:fa:d2:9d:58:ce:0e:69:
0b:88:08:f6:9d:8c:7a:66:84:e9:97:fc:45:d5:29:
db:8a:55:2d:fe:9c:79:c8:fd:d0:17:7d:68:5e:27:
8c:76:fc:8e:3a:53:ab:15:07:e5:d5:3f:35:76:e7:
4b:b5:b8:c0:68:9b:50:18:59:50:43:60:4b:4b:63:
05:44:97:94:2a:ed:77:b6:88:49:71:d4:3f:80:cf:
4a:f8:eb:19:c3:36:1d:e6:09:75:5e:c4:c6:49:a7:
b6:3a:d0:17:f2:38:f8:e4:92:de:f6:22:92:ad:bd:
9d:33:77:7d:29:c2:80:47:7e:2e:ac:8a:ef:0c:2f:
57:20:25:be:34:0d:05:91:77:df:3f:62:80:13:81:
4e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:63:6C:F7:A5:B6:DB:25:6A:44:BA:D3:13:87:36:17:68:60:A2:B9
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/dGNs96W22yVqRLrTE4c2F2hgork.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.163.0/24
107.161.166.0/23
IPv6:
2a07:9944:40::/48
2a07:9945:45::/48
Signature Algorithm: sha256WithRSAEncryption
13:4e:64:fe:2f:dc:f9:4d:f4:b1:85:9a:86:37:51:44:e1:58:
1b:21:57:6a:b4:70:1f:33:c7:c7:75:0b:06:1c:b9:4a:1f:8b:
29:1c:09:8f:8d:8c:1c:fd:33:58:8e:da:8d:c4:14:e4:60:a0:
fd:35:d9:5d:43:39:70:e0:dc:ff:0a:66:4c:44:2d:67:cd:af:
cc:ec:4f:6d:21:0d:63:ab:4d:23:b5:9d:c0:c4:f0:25:0c:ba:
b9:51:16:d3:20:20:82:5b:8e:a7:ed:a9:7f:c3:cf:37:e9:07:
57:cc:6f:9f:83:db:17:e4:93:14:54:b7:51:6d:f0:b3:38:33:
c5:12:c0:03:cc:ca:da:12:00:e4:6e:6d:d0:22:dd:81:48:cd:
20:1f:f5:4a:f6:b0:cf:d8:62:42:af:9e:3c:d6:3a:45:65:ae:
1d:c9:8f:fe:37:02:fa:a8:6c:85:c6:ec:1d:b4:ab:39:7e:d1:
97:28:c6:a7:c3:44:64:b4:f1:94:d6:10:0b:46:76:d0:0b:74:
ee:60:b6:1f:a8:2b:b0:d7:8d:db:a6:31:12:e4:a4:82:81:54:
62:6e:7d:a1:10:08:4d:01:9b:22:56:ed:20:fc:e6:a4:56:9e:
73:d1:3c:90:90:96:2e:85:df:00:3b:39:b8:90:0c:8f:00:34:
c8:67:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org