Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tiDPxo090DtLmqg1ycc3J55Gxfo.roa
File: tiDPxo090DtLmqg1ycc3J55Gxfo.roa (raw, json)
Hash identifier: m3Y2EUCYejqX4Dlm/hk8M+QC7avC0on14dyDyVSh1yw=
Subject key identifier: B6:20:CF:C6:8D:3D:D0:3B:4B:9A:A8:35:C9:C7:37:27:9E:46:C5:FA
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018917A2465713307CC34C0400C85347160E
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tiDPxo090DtLmqg1ycc3J55Gxfo.roa
Signing time: Sun 02 Jul 2023 17:24:18 +0000
ROA not before: Sun 02 Jul 2023 17:24:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:a2:46:57:13:30:7c:c3:4c:04:00:c8:53:47:16:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 2 17:24:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b620cfc68d3dd03b4b9aa835c9c737279e46c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:91:3b:40:52:92:1b:74:d5:03:e1:96:e4:88:
1e:24:d2:59:bd:49:e3:ff:64:f1:f0:77:ab:c7:53:
df:8b:2f:4d:2f:3c:f6:4e:d6:76:04:8f:34:a6:3c:
8d:8a:d5:08:df:f2:4d:11:dc:a1:83:d5:32:0d:00:
cb:d1:c9:eb:6c:ee:61:69:66:e5:89:c3:17:7d:b3:
8c:62:de:cd:95:47:9c:7d:c0:3b:bd:e3:bb:79:e2:
f5:a6:33:54:bd:c3:18:02:e2:ca:7a:7e:b7:bc:07:
53:37:b2:5c:b7:70:b4:cb:b5:73:f4:b3:8c:36:6b:
2e:68:8a:bf:8f:89:b8:9e:b7:b1:3b:70:e5:fd:8f:
87:77:8d:f3:c6:7a:92:03:0e:b4:04:40:a8:c0:c7:
14:d7:65:6a:d8:cf:44:f7:51:7d:8f:69:6e:41:1d:
04:ff:a3:5a:b5:85:b5:b8:14:8f:1c:df:95:d5:c6:
2c:79:ad:c7:e3:e4:34:84:1b:4a:64:66:7d:53:8a:
2c:38:ab:f9:91:d3:e4:55:80:ec:f2:c8:59:7c:91:
c2:46:25:62:c0:20:7b:ea:e6:31:24:7c:59:f0:db:
9e:3a:bc:b4:54:e6:67:7c:0a:01:74:c2:bf:27:d8:
5a:57:78:54:a6:06:3f:0b:7c:b9:ac:30:8d:f3:bd:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:CF:C6:8D:3D:D0:3B:4B:9A:A8:35:C9:C7:37:27:9E:46:C5:FA
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/tiDPxo090DtLmqg1ycc3J55Gxfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.168.0/21
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
52:22:7e:e4:d3:15:42:7f:56:4e:6f:4d:52:d1:89:bc:21:88:
19:70:c4:bb:e6:e0:f8:e8:17:e9:27:d8:47:cb:82:62:65:b3:
52:3f:b6:19:de:e4:83:30:4d:85:86:f0:59:a0:04:f1:4b:6d:
d6:3f:20:d1:0a:80:5d:c7:b9:71:e7:02:c2:ca:aa:19:39:d7:
c6:eb:a6:bc:2e:e8:dd:13:cc:bb:57:3d:bd:a1:12:89:62:96:
e9:36:60:39:8a:53:fe:bf:6c:d5:3f:5d:50:3f:14:b5:4f:b9:
51:ce:3c:41:e5:f4:d5:09:b4:49:2f:8c:40:8c:ae:8e:a9:2e:
16:17:13:dc:b2:83:01:0e:83:2a:08:18:d9:c7:5b:99:e0:fd:
e0:0a:cc:f3:b0:a9:f1:f6:d0:85:a2:7d:fd:c8:71:e8:af:af:
d8:7e:9c:e5:c5:a5:3d:a5:f3:36:09:2f:10:98:f7:13:66:07:
1c:ee:03:90:01:a5:60:69:0c:9e:a2:a1:af:d8:fe:69:de:fd:
2a:15:3d:56:60:01:c1:59:a0:ef:8d:d7:0e:5d:a0:e2:fc:8e:
73:20:b4:c4:74:6f:71:36:d3:1c:96:e4:03:71:94:72:15:19:
7d:17:0e:ae:7a:23:15:2a:9e:e7:c2:64:4c:c2:15:1d:de:0a:
8e:f4:93:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:02 2023 by rpki-client on console.sobornost.net