Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vr-XBDdlBeNyPBfOdm9vmp0paAk.roa
File: vr-XBDdlBeNyPBfOdm9vmp0paAk.roa (raw, json)
Hash identifier: r6UOb9GdBq1BwiPpmWgDfWoVqscBdbHNe6Yjz5aAxeU=
Subject key identifier: BE:BF:97:04:37:65:05:E3:72:3C:17:CE:76:6F:6F:9A:9D:29:68:09
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188CDA862775DA120403B48931407202D4E
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vr-XBDdlBeNyPBfOdm9vmp0paAk.roa
Signing time: Sun 18 Jun 2023 08:39:04 +0000
ROA not before: Sun 18 Jun 2023 08:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 107.161.166.0/24 maxlen: 24
107.161.163.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
2a07:9944:40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cd:a8:62:77:5d:a1:20:40:3b:48:93:14:07:20:2d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 18 08:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bebf9704376505e3723c17ce766f6f9a9d296809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:39:3f:1b:46:69:83:d9:54:5a:12:13:f9:
14:6b:fc:d4:4b:d6:c5:79:e7:b9:ae:d4:95:63:aa:
1a:8c:56:28:e7:5d:3e:4b:7a:d3:4d:c6:fc:b4:82:
e7:10:3a:36:43:7c:40:e4:39:76:34:23:25:96:01:
42:4b:bc:ef:44:42:b2:49:92:e8:73:6c:5e:7c:b8:
a2:b8:ca:d7:67:39:74:4b:a7:98:08:b2:a0:66:84:
74:aa:a7:99:44:c1:67:eb:90:5e:99:92:c9:f3:2c:
2a:d8:ad:fb:26:9f:2c:79:09:4b:5d:4a:b1:37:1a:
7e:02:f9:62:5a:a7:43:c1:e7:04:fa:5a:6d:98:cf:
3b:35:f9:4b:6f:5d:08:0f:71:00:8a:b8:7e:f1:ce:
e7:1d:d5:4d:29:17:c9:fa:2c:19:e7:d9:f6:b2:e1:
5a:64:b0:cd:41:3c:37:49:dd:10:a2:3a:ee:44:d8:
44:38:83:bd:42:57:2c:24:63:2e:c8:52:93:50:5a:
fa:cb:05:64:f7:86:98:8d:b7:64:cc:92:e4:80:dd:
3a:09:b7:e2:98:46:8e:d1:b6:b6:16:b6:c7:ef:73:
c9:21:07:00:55:42:64:d8:49:80:9f:c3:61:07:b6:
9a:b5:d6:ca:4c:ef:00:9c:d4:86:83:bf:d0:9b:02:
2f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BF:97:04:37:65:05:E3:72:3C:17:CE:76:6F:6F:9A:9D:29:68:09
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/vr-XBDdlBeNyPBfOdm9vmp0paAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.163.0/24
107.161.166.0/23
IPv6:
2a07:9944:40::/48
Signature Algorithm: sha256WithRSAEncryption
b6:43:c2:54:a2:ff:33:b5:83:ea:9e:7b:3e:14:ee:71:bf:4d:
e7:a2:a2:40:bb:7c:fe:e6:be:e8:45:6b:a0:47:95:3c:0b:5b:
c6:3c:47:54:3c:d8:e5:ef:41:8c:16:cc:dd:10:60:2e:23:ab:
4a:b7:d7:49:1c:51:38:18:90:b1:c9:b0:d9:d1:57:fa:1a:72:
cd:8e:8a:43:e6:65:4e:cf:b7:32:33:d8:2f:4d:17:02:a2:4f:
4d:de:91:1f:03:b0:11:50:e8:48:0e:ab:ac:ba:b5:c9:2b:8a:
da:fd:5a:b5:32:b8:9c:c6:7a:69:ca:93:a9:e7:18:4b:4c:46:
62:ca:18:36:6e:90:a5:74:5b:e8:ad:59:e6:a0:41:0a:b1:4d:
f4:17:ab:95:4d:66:6b:c5:60:f7:42:91:72:34:a2:68:82:55:
6f:02:ee:a8:e4:be:fa:9e:67:80:8a:52:6a:93:94:44:8a:9a:
a6:5a:63:6e:bf:1d:f1:bb:88:c3:88:7f:f8:6b:e1:07:b3:74:
21:e3:31:ae:61:f5:6a:4e:e4:76:65:10:92:40:17:88:af:bc:
37:ae:6a:04:3c:13:f1:65:63:9b:4f:f8:0b:fe:b8:1a:e4:ab:
aa:aa:03:67:5c:ae:90:8f:11:67:4d:40:d3:23:b0:e0:5f:2c:
d2:08:d3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org