Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/7eGJy89TcO45QIxijKXdbTNXS68.roa
File: 7eGJy89TcO45QIxijKXdbTNXS68.roa (raw, json)
Hash identifier: xAl2XeyV5ltcud5y5klM0TI+Gg7jAxNgmluyY6CJPZA=
Subject key identifier: ED:E1:89:CB:CF:53:70:EE:39:40:8C:62:8C:A5:DD:6D:33:57:4B:AF
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018917C5A40ABA5CE85558ADDCA2D7110953
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/7eGJy89TcO45QIxijKXdbTNXS68.roa
Signing time: Sun 02 Jul 2023 18:02:55 +0000
ROA not before: Sun 02 Jul 2023 18:02:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:c5:a4:0a:ba:5c:e8:55:58:ad:dc:a2:d7:11:09:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jul 2 18:02:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ede189cbcf5370ee39408c628ca5dd6d33574baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:c1:b0:13:33:b4:6b:69:c1:2b:74:04:c1:
25:b2:30:05:15:c4:f2:6e:69:0b:14:ed:3d:6e:90:
1a:c5:b4:df:8f:82:7c:de:73:d1:38:43:94:6a:fd:
46:44:6b:b9:ee:79:cd:a6:cc:4e:17:7a:a3:83:b5:
dc:b4:ee:59:1a:9a:72:6c:6c:3e:17:a3:a9:6b:15:
97:6f:b6:72:70:91:a7:5c:90:14:f8:c1:cd:d8:17:
25:94:0e:b5:7f:b4:5b:29:d3:56:28:5a:01:3f:18:
83:ec:ac:09:67:bf:e4:6a:35:1e:ed:91:73:d1:67:
0a:52:8b:60:e3:24:4a:66:9f:52:97:f6:b9:92:48:
33:90:82:cd:c3:c4:98:1a:6a:bb:61:c1:ce:37:37:
30:d3:42:bf:57:10:44:06:49:cf:b9:08:66:65:a8:
22:0d:c5:f8:ee:a2:35:db:70:21:b9:c4:6a:f7:eb:
c3:50:58:0f:43:8d:2f:0a:59:db:88:56:b0:cc:7b:
35:f6:d6:ee:e4:ae:11:7f:d6:2f:5d:2a:96:f1:8a:
e0:b5:76:72:06:7b:13:71:5f:37:73:9e:c7:ea:a2:
02:31:36:53:f2:07:e8:05:8b:f2:5d:55:f6:8d:35:
c6:07:f2:cd:6e:fb:50:d5:84:84:00:69:45:57:4a:
b5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E1:89:CB:CF:53:70:EE:39:40:8C:62:8C:A5:DD:6D:33:57:4B:AF
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/7eGJy89TcO45QIxijKXdbTNXS68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.168.0/21
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
7c:9f:51:83:57:03:4a:18:9b:1e:93:24:97:e8:98:03:b0:4d:
1f:f1:8f:8e:fe:c5:58:6e:21:41:a1:3b:c9:be:50:b8:f1:dd:
3e:d5:b8:58:b6:35:85:3c:cb:e2:ac:60:2e:e5:8c:81:92:42:
3f:9c:4c:e4:6c:0f:0f:cb:19:f2:0f:1b:a6:c4:0e:cf:a1:50:
d4:b0:6e:8d:e0:a6:cb:7e:a1:b8:ab:d4:14:5c:1a:0d:6e:64:
43:9c:72:24:6e:04:5d:ae:18:2a:63:f9:fc:92:d5:56:9b:5b:
21:68:3c:9d:8f:17:e3:10:14:b1:0a:d1:52:38:69:c2:fe:c0:
53:36:6e:7d:80:04:53:1d:7e:7b:bc:d2:94:d2:14:d5:3e:7a:
c8:86:38:92:1c:06:83:5d:60:90:19:3d:1f:84:01:a4:b3:2c:
92:9d:f3:2b:3a:21:c1:d7:50:54:c9:bf:17:55:95:1c:a5:57:
94:f8:8e:0f:c3:75:d5:92:b8:dc:76:0c:5f:06:bb:7f:d5:4e:
33:a3:3f:4e:19:bb:b9:7d:53:51:71:81:6e:95:e7:f1:e6:78:
63:6a:b4:0f:6f:25:57:0d:59:19:5b:2a:27:95:9f:32:bd:83:
1f:66:86:a0:2e:43:54:45:1b:14:6e:ab:bf:f8:45:c2:a8:e3:
e5:46:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org