Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T7F4vmz5AM0r9aQybZHhSSB-TUA.roa
File: T7F4vmz5AM0r9aQybZHhSSB-TUA.roa (raw, json)
Hash identifier: lyplOnIVMXzHrLRhj/Jz/qeBKvtnfPRWESH85Dt35Cc=
Subject key identifier: 4F:B1:78:BE:6C:F9:00:CD:2B:F5:A4:32:6D:91:E1:49:20:7E:4D:40
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018602E32CF16A13528B46779E3FA9C1CF80
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T7F4vmz5AM0r9aQybZHhSSB-TUA.roa
Signing time: Mon 30 Jan 2023 13:34:47 +0000
ROA not before: Mon 30 Jan 2023 13:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27882
IP address blocks: 181.41.144.0/21 maxlen: 21
181.41.147.0/24 maxlen: 24
181.41.156.0/22 maxlen: 22
203.88.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:e3:2c:f1:6a:13:52:8b:46:77:9e:3f:a9:c1:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 30 13:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fb178be6cf900cd2bf5a4326d91e149207e4d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1b:6e:32:2c:ce:ba:d8:d3:de:e6:ce:ab:59:
8a:f7:23:85:68:c7:63:ff:56:e5:f2:26:3d:e5:de:
36:46:e5:96:e6:94:a9:18:1d:0d:78:b2:c4:ce:9c:
7c:7d:9f:31:9a:54:87:b8:fc:10:d2:70:c5:40:f9:
76:f9:ec:e7:36:ba:f0:06:9d:6d:a7:7c:1f:23:96:
86:87:1b:c3:6b:73:24:69:aa:fb:3d:07:f2:44:ff:
b0:0b:25:97:1f:3c:32:06:37:f2:2a:a5:75:f2:05:
cf:93:0a:98:65:00:cc:f6:7c:29:ac:68:b6:a7:bc:
87:2f:a2:eb:d9:d7:d6:c1:b6:b8:41:3e:31:a8:a1:
82:af:20:c3:2a:d3:df:f1:ef:98:0a:4b:0e:8c:d3:
c7:ba:c3:81:ce:e0:67:a3:21:2e:d6:20:9d:a6:8e:
b3:a2:12:4c:34:7d:0d:3d:ad:15:78:0b:6c:5e:4a:
48:09:12:cd:92:1e:0d:36:a3:9c:92:ed:86:db:c0:
52:73:44:9b:0e:6d:91:8d:f2:90:c9:6e:fc:04:ac:
9f:8d:02:74:5c:b9:22:31:ba:6a:68:4a:39:e1:30:
54:3d:68:61:28:71:dd:04:8f:a8:15:1b:43:85:f2:
57:d0:f0:07:e2:03:80:76:81:43:a3:f6:4d:50:e7:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B1:78:BE:6C:F9:00:CD:2B:F5:A4:32:6D:91:E1:49:20:7E:4D:40
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/T7F4vmz5AM0r9aQybZHhSSB-TUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.144.0/21
181.41.156.0/22
203.88.96.0/22
Signature Algorithm: sha256WithRSAEncryption
92:86:b2:4f:5c:62:57:0a:93:5d:61:ab:27:a4:75:de:73:7a:
b7:a5:91:3d:e2:fe:42:18:62:5c:a2:e1:37:21:21:96:a5:32:
ea:0a:83:2d:fa:af:d1:04:8a:21:53:05:a1:62:f4:c8:00:c8:
cf:e1:37:76:a2:6c:dd:ab:d1:8e:89:29:b9:96:f5:7d:d8:34:
c8:fb:ae:0a:49:29:0f:29:d8:c8:c4:f3:ef:c8:9e:c4:99:64:
54:52:c3:1f:7d:ad:3e:46:b4:58:83:ea:3b:34:6b:c1:5c:e1:
b8:8d:85:83:12:2f:09:30:12:f0:7b:a2:db:b9:e8:02:d0:92:
fd:62:fa:e9:db:50:6b:4f:94:9f:87:e5:35:a5:42:e0:09:d7:
01:24:e0:5b:c7:39:f9:09:df:46:8f:4d:2b:53:63:b7:2a:83:
9f:7f:aa:f2:cd:58:dd:86:38:67:09:d3:e7:82:fc:a7:09:dd:
56:4d:55:0c:87:30:3f:54:8a:52:3f:e1:2d:86:55:07:dd:4e:
3f:23:7f:bb:a8:72:95:19:3c:ec:12:94:0e:4f:87:07:7b:bc:
23:fb:60:4e:45:a0:83:7d:0c:e5:d8:ea:18:87:e9:83:69:7a:
20:34:fc:7c:6e:75:0f:20:12:4e:fe:50:3e:ac:3d:55:ba:81:
82:60:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org