Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9SCTEyJQDvnjC6RveZRbekqN0rI.roa
File: 9SCTEyJQDvnjC6RveZRbekqN0rI.roa (raw, json)
Hash identifier: lDjEPtDYhoodC9FNxybL7TDAhVwbTB0W/Ae3eh5FAIQ=
Subject key identifier: F5:20:93:13:22:50:0E:F9:E3:0B:A4:6F:79:94:5B:7A:4A:8D:D2:B2
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0188CEF110AB04DFFA2EDD7E04786D1D4351
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9SCTEyJQDvnjC6RveZRbekqN0rI.roa
Signing time: Sun 18 Jun 2023 14:38:04 +0000
ROA not before: Sun 18 Jun 2023 14:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.160.0/20 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ce:f1:10:ab:04:df:fa:2e:dd:7e:04:78:6d:1d:43:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jun 18 14:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f520931322500ef9e30ba46f79945b7a4a8dd2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:55:a1:e5:56:94:0a:05:88:2e:f4:44:65:
60:18:02:26:ef:bc:8b:45:8c:78:5a:95:61:61:ef:
ba:60:a0:81:6a:c0:5c:bc:24:0a:8f:fb:7f:84:33:
b5:22:36:f8:f6:39:80:08:55:19:33:7c:03:d9:74:
0e:aa:9b:51:e1:a4:79:3a:b7:47:54:39:ff:16:5e:
d8:6b:e7:13:be:df:c7:1f:02:71:07:17:21:d1:26:
c1:19:38:52:26:da:55:cf:95:8b:c4:30:5e:73:fd:
01:2a:fb:a1:5b:8c:1f:f5:e0:58:c1:df:55:93:5e:
d6:a8:2f:bc:9b:ef:d9:2c:74:29:41:eb:4a:30:6b:
30:87:f6:a1:69:ab:14:ab:ff:7f:d1:c8:a9:4c:3a:
2e:41:84:c3:5d:5b:ac:23:0a:6a:b0:9b:2d:42:a8:
c3:35:15:73:04:1d:cc:4b:f5:07:42:59:1e:06:2f:
77:3d:ea:44:e2:cb:8e:aa:6b:35:3e:4c:ce:30:1b:
45:d3:ae:d7:8d:b2:4a:30:36:07:40:a7:9e:ea:c4:
27:fe:d8:0f:1f:65:60:ad:54:84:40:bc:c7:61:ee:
f4:44:d7:7e:a0:b0:07:a0:f9:c6:bd:a0:07:55:7c:
15:53:56:f4:9c:59:ad:96:90:e9:06:d0:fb:a2:a0:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:93:13:22:50:0E:F9:E3:0B:A4:6F:79:94:5B:7A:4A:8D:D2:B2
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/9SCTEyJQDvnjC6RveZRbekqN0rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0/20
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
bd:11:7a:ab:de:fa:7b:54:50:64:36:c6:fa:01:d5:7c:08:e1:
08:f6:e2:90:fd:c8:cf:88:da:b1:31:a2:b3:89:90:45:dd:43:
16:87:52:7b:59:68:c0:c8:29:30:47:c4:58:e2:a5:3c:e5:1a:
8c:26:2a:13:37:13:4d:ad:67:35:de:6e:df:cd:97:25:97:cc:
c2:17:2e:0e:66:fe:f0:24:69:a6:f8:80:b8:ea:46:5c:77:2f:
c6:3c:d6:9d:44:d2:38:05:54:1d:77:7d:12:41:9e:f4:2c:9e:
dd:32:d4:d9:24:34:22:3f:47:ed:d6:52:1f:c5:aa:e3:ec:14:
ce:8a:7f:02:d1:42:44:a1:a6:48:fe:bf:9a:c2:6d:7c:ca:2d:
d1:b0:a4:b9:16:85:7c:47:0a:b6:eb:8f:d2:0e:0d:d6:32:8e:
19:94:03:bf:73:1e:bd:4e:94:ea:93:e2:69:3e:31:90:fb:ee:
7e:1e:84:fa:41:23:0d:a8:a5:c5:42:45:b0:07:e1:18:38:44:
4e:ec:96:01:a2:14:16:47:61:c3:69:be:2c:59:f0:09:80:09:
8c:88:34:7a:e4:35:29:b5:64:b0:2c:b6:1f:d2:eb:db:5f:17:
bd:c5:a6:b0:83:35:32:e5:ca:dd:d4:86:88:35:a7:2d:d0:3f:
35:2e:e4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org