Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/KXBwG4a5Y-Zo17wTrhjVZaenQ3g.roa
File: KXBwG4a5Y-Zo17wTrhjVZaenQ3g.roa (raw, json)
Hash identifier: +/E6H3nz/pW+s8fZQZmc4NLxPkN3br+1YDY5XXc7EZw=
Subject key identifier: 29:70:70:1B:86:B9:63:E6:68:D7:BC:13:AE:18:D5:65:A7:A7:43:78
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94D9C9993995AEAD81FFB1F91BD363
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/KXBwG4a5Y-Zo17wTrhjVZaenQ3g.roa
Signing time: Sun 01 Jan 2023 23:05:04 +0000
ROA not before: Sun 01 Jan 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 162.217.251.0/24 maxlen: 24
155.254.62.0/24 maxlen: 24
107.161.174.0/24 maxlen: 24
107.161.175.0/24 maxlen: 24
107.181.135.0/24 maxlen: 24
2a07:9940:3333::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Mar 2023 16:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d9:c9:99:39:95:ae:ad:81:ff:b1:f9:1b:d3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2970701b86b963e668d7bc13ae18d565a7a74378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:77:cc:48:5e:ba:b9:ff:5a:8d:fa:8a:70:
f1:a4:ed:b9:18:3b:d5:04:37:f3:8f:83:d4:21:8e:
61:89:a1:a5:bd:65:85:4c:03:b7:bf:aa:64:38:67:
35:31:ec:ef:74:42:14:11:4f:f0:16:60:e5:02:01:
26:26:2e:b8:2c:b4:28:2f:d1:64:6b:b9:22:7f:2a:
8e:80:9c:d7:fa:30:d7:15:17:51:cd:f6:1d:36:8a:
93:ef:f5:cf:01:07:1c:e2:1b:56:a3:a1:70:42:a5:
d4:bf:69:2d:fb:e1:5b:c5:56:91:ac:6c:17:5e:df:
9c:2b:af:a9:bc:2a:49:4a:3a:4b:e0:8f:5f:d8:fa:
8f:f3:05:d9:39:6c:90:7b:c0:07:96:67:dd:e8:67:
96:43:45:df:6b:d9:d8:04:57:9c:ce:c0:4f:e1:15:
c9:ec:6a:4f:b2:f4:bb:d1:67:c4:ea:22:5f:76:d4:
95:8f:78:aa:4e:49:03:6b:75:12:4b:8e:c2:38:75:
df:d9:6b:fc:d1:2f:5d:10:94:af:cb:9e:68:af:7f:
26:29:b8:30:bb:4d:5b:6e:60:bb:b6:69:72:54:4a:
47:95:02:91:c8:04:b4:81:ce:8b:56:24:98:b9:da:
d8:2b:05:d9:14:5d:da:70:e7:4e:3e:ca:1f:af:71:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:70:70:1B:86:B9:63:E6:68:D7:BC:13:AE:18:D5:65:A7:A7:43:78
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/KXBwG4a5Y-Zo17wTrhjVZaenQ3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.161.174.0/23
107.181.135.0/24
155.254.62.0/24
162.217.251.0/24
IPv6:
2a07:9940:3333::/48
Signature Algorithm: sha256WithRSAEncryption
43:51:34:60:f4:fd:69:bc:92:07:82:fe:b1:fb:0d:22:18:64:
d0:dc:78:45:8f:da:c8:32:ed:d5:5e:4f:0d:73:19:3a:ce:6c:
0c:3b:f3:db:c3:7b:ed:52:7c:ea:34:67:7d:4f:11:b0:c7:2e:
4c:16:7d:d4:e1:4d:77:c4:f9:b7:e9:0f:30:ef:63:8d:09:fa:
92:ec:ab:5d:33:1e:7c:f4:b5:e4:ed:3a:f3:e8:98:d5:33:4b:
5f:be:20:51:b3:ef:2a:9b:3c:ae:14:b1:7c:76:e2:49:5b:d7:
96:87:fe:22:2d:64:5f:06:3a:d8:51:27:67:9d:ce:19:1a:0c:
94:d6:13:26:cb:10:f9:a6:88:b9:58:db:51:a2:65:db:5d:35:
8b:6b:47:8d:3d:7c:11:89:33:0d:6c:73:53:d7:1b:34:ed:d4:
48:00:54:56:49:03:1b:ce:01:ba:2d:bf:87:64:c8:63:7e:87:
bf:13:ea:32:6d:18:16:1a:08:3b:fa:53:93:b0:85:c0:57:da:
d3:d2:f5:79:89:40:5b:cb:d8:b5:e0:27:ca:bd:8b:4c:f6:91:
a4:79:28:b7:3b:a2:cb:54:13:21:db:35:91:db:4d:51:d4:1b:
0b:bd:68:8e:d9:21:48:8c:f9:ca:db:95:4a:19:6f:ab:3d:26:
67:34:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org