Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/sGkhTuG8Sh2aguNxlDqKgf0N8Tw.roa
File: sGkhTuG8Sh2aguNxlDqKgf0N8Tw.roa (raw, json)
Hash identifier: A6OzbnVXs/9Pg/A8/902/W/3A+isRBC8tLYbZL1MK6c=
Subject key identifier: B0:69:21:4E:E1:BC:4A:1D:9A:82:E3:71:94:3A:8A:81:FD:0D:F1:3C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188CF0F41EB6E4D2B4658020EB03CE4E0E1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/sGkhTuG8Sh2aguNxlDqKgf0N8Tw.roa
Signing time: Sun 18 Jun 2023 15:11:03 +0000
ROA not before: Sun 18 Jun 2023 15:11:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 107.161.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cf:0f:41:eb:6e:4d:2b:46:58:02:0e:b0:3c:e4:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 18 15:11:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b069214ee1bc4a1d9a82e371943a8a81fd0df13c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:21:94:01:2c:39:45:a2:37:11:dd:e9:12:48:
38:54:57:f1:db:8a:81:3a:63:56:dd:ec:13:e2:a4:
b9:01:a2:06:f6:8e:62:89:fe:f6:e5:1f:49:15:ad:
9d:76:86:47:f2:00:78:f3:d4:53:73:e9:6c:f7:ce:
c2:4d:5c:13:94:7a:b2:53:ea:65:82:49:f9:9d:8e:
20:ea:e5:c5:96:c7:88:e0:e5:63:87:30:8d:23:01:
32:2e:96:98:e2:33:47:14:5e:d0:96:0e:a7:ae:52:
72:4b:d9:84:8d:ae:30:54:81:be:d2:98:eb:c2:0e:
88:74:8f:50:b5:72:33:31:d9:01:f7:dd:eb:ac:2d:
ea:cf:aa:03:27:2c:98:37:67:e8:2e:82:6b:db:2c:
d7:eb:68:07:64:67:2b:cf:a0:b2:fb:2e:f6:05:3f:
fb:7c:02:27:02:74:2e:f5:4c:72:05:f3:c9:46:dd:
1f:22:cc:33:34:09:79:06:3c:bb:8d:bc:05:75:c2:
f8:74:6c:0e:55:2f:33:b4:a2:5a:31:58:93:4b:1b:
e0:f1:77:63:23:c8:bb:8a:34:46:ca:ab:14:bb:8b:
a4:1b:b5:82:a5:67:b6:36:94:df:a8:5b:e8:5e:af:
97:eb:24:7f:12:d8:b8:90:17:f6:7a:f4:68:22:4f:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:69:21:4E:E1:BC:4A:1D:9A:82:E3:71:94:3A:8A:81:FD:0D:F1:3C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/sGkhTuG8Sh2aguNxlDqKgf0N8Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:64:05:01:89:f4:16:41:fa:47:90:79:6a:86:78:2b:de:49:
18:3c:60:b9:45:da:d3:b6:87:27:5e:33:e5:2d:6e:31:df:68:
7a:cc:7a:76:70:6f:35:66:60:e1:af:85:70:0f:51:69:55:d7:
e0:ae:5e:ae:4d:cf:11:51:fe:5a:a8:73:f6:8f:f1:7f:f5:60:
1a:1f:a7:a2:33:d1:49:d3:59:54:27:a5:8c:3d:fc:6a:74:3b:
3e:db:e3:9f:f2:a8:8a:67:14:76:d4:17:6d:72:ea:a4:c7:e9:
e8:17:29:97:78:3d:7a:58:c3:16:fe:d9:7a:6b:8c:c8:d7:f1:
8a:be:a5:db:6b:6d:3b:fc:61:3f:f6:3a:3a:9a:32:d1:2e:05:
b7:be:21:a6:7a:52:d8:19:8c:a8:70:f7:8e:01:05:9b:88:5a:
63:c3:3f:4f:41:bd:e6:48:6b:7d:24:d7:72:8a:df:74:00:59:
d8:89:12:e9:83:67:30:9b:d1:bc:13:ee:9f:80:27:d6:7b:c9:
a2:04:85:d4:c4:70:7c:9b:74:f4:c8:b6:e1:71:c7:7b:77:5f:
87:7f:e3:1e:9c:9f:cc:af:3f:98:5b:ee:3c:da:d2:e1:11:a8:
56:7d:53:df:0a:fd:dc:2c:9a:59:7f:70:1c:fd:4e:3b:39:27:
16:78:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org