Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eAeTuzWrFxgkcriE1RLW_0R-djQ.roa
File: eAeTuzWrFxgkcriE1RLW_0R-djQ.roa (raw, json)
Hash identifier: fKiLBU7i7rSQH4hm/MXptT2w+/UkQa4NH4sMx8S0ws4=
Subject key identifier: 78:07:93:BB:35:AB:17:18:24:72:B8:84:D5:12:D6:FF:44:7E:76:34
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01888BAB32F52A12B1220E151AD0244D9C2F
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eAeTuzWrFxgkcriE1RLW_0R-djQ.roa
Signing time: Mon 05 Jun 2023 13:07:12 +0000
ROA not before: Mon 05 Jun 2023 13:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201864
IP address blocks: 107.181.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:ab:32:f5:2a:12:b1:22:0e:15:1a:d0:24:4d:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 5 13:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=780793bb35ab17182472b884d512d6ff447e7634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5a:d8:14:95:ee:9f:b0:e3:26:97:90:95:9b:
65:c2:35:56:f1:86:3d:de:c1:cb:39:0f:12:96:d0:
77:b1:bc:21:6f:40:87:c3:92:f4:fd:ab:68:94:ca:
79:9d:2f:16:0d:82:8c:9d:7f:b3:04:a6:91:73:2d:
fe:ab:36:34:d5:c9:f9:7d:ec:10:d1:a6:d8:8a:1d:
ba:97:b9:d6:19:7d:9d:2a:5e:f8:e8:a4:95:e2:b8:
5a:1d:65:fa:9e:b9:e4:f5:f8:e5:c5:c7:54:97:81:
3c:7e:01:b1:4f:97:7e:2e:21:28:f6:e9:c6:0f:c3:
78:5f:cc:9a:57:f3:d2:8f:4d:6f:5c:d1:0f:bf:e9:
40:40:e7:ef:90:0f:4f:80:3f:96:ae:ff:1c:7d:f1:
b9:44:35:59:8a:44:24:49:b7:a4:11:79:ea:6c:96:
7b:8c:13:b2:f0:5e:54:4a:6e:8e:7b:43:ab:82:3a:
5e:0e:92:38:64:f0:e2:2b:69:97:f6:ca:d3:ac:a0:
48:5a:a1:24:14:d4:6b:d4:94:9a:2a:1f:1a:7b:eb:
ac:1c:26:f6:b4:8a:4f:a0:94:2d:78:b1:88:7a:be:
a8:bf:89:21:3f:e8:89:69:c2:08:29:f9:2f:48:da:
4c:1e:2c:ae:be:e1:0f:d3:46:ea:85:90:c9:7e:b7:
3c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:07:93:BB:35:AB:17:18:24:72:B8:84:D5:12:D6:FF:44:7E:76:34
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/eAeTuzWrFxgkcriE1RLW_0R-djQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.181.146.0/24
Signature Algorithm: sha256WithRSAEncryption
06:70:79:35:dc:40:15:ce:e0:2c:1d:2d:b5:76:76:98:61:0f:
ff:2b:63:dd:8b:a5:e3:82:a1:c7:37:34:6a:7a:6d:1c:2e:9b:
e5:4a:1d:1c:ae:e2:41:42:52:f2:cd:ab:3a:f9:56:5b:bb:5d:
b3:7e:cf:9a:b5:af:e0:1e:eb:cb:3e:9c:d3:90:ab:59:da:01:
5c:9a:97:eb:6b:0a:8a:85:af:56:a4:75:fe:c3:df:3c:52:59:
47:92:e6:69:10:e1:27:f8:2d:0e:b5:c5:f2:89:1d:92:06:37:
22:60:ab:44:4c:b3:2e:3a:7b:90:14:e8:22:a3:ff:c7:a7:36:
02:c7:1e:09:be:13:93:15:fc:19:39:ab:98:12:ba:d8:e5:03:
0b:2c:c9:1b:b4:2a:dd:31:b2:f2:79:73:2d:5f:8a:cf:9f:43:
7c:2c:84:1b:8f:26:14:84:c9:4f:e2:ee:a9:53:fe:7f:9c:83:
39:b1:5d:53:35:ae:0f:05:15:ed:76:8a:ba:82:49:a4:0c:1d:
26:5f:3e:dd:ce:83:c4:22:61:27:5b:f6:77:8a:1f:50:da:fc:
55:49:ea:11:22:24:f0:63:84:11:61:28:01:39:9e:df:3d:8b:
70:0d:d5:ec:64:b5:0c:e1:b8:57:9f:2e:60:12:fd:a8:4c:f8:
9a:04:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:08 2024 by rpki-client on console-fra.rpki-client.org