Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PdCk1vJkjDyZr0C_Erx_poaAAJY.roa
File: PdCk1vJkjDyZr0C_Erx_poaAAJY.roa (raw, json)
Hash identifier: rMWB83TovIqLnVA2xL/7+zpmHDcAyXCxuRwKL8+fj0A=
Subject key identifier: 3D:D0:A4:D6:F2:64:8C:3C:99:AF:40:BF:12:BC:7F:A6:86:80:00:96
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0187015C1FD7B368AFA5302E316A80CA2CA1
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PdCk1vJkjDyZr0C_Erx_poaAAJY.roa
Signing time: Mon 20 Mar 2023 23:30:27 +0000
ROA not before: Mon 20 Mar 2023 23:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.163.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
107.161.174.0/23 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:01:5c:1f:d7:b3:68:af:a5:30:2e:31:6a:80:ca:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Mar 20 23:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dd0a4d6f2648c3c99af40bf12bc7fa686800096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:a2:c1:81:90:a2:8c:e7:39:8f:82:54:56:
d1:d1:64:c3:14:75:e0:b5:da:aa:3a:f2:35:17:72:
8b:4c:a5:24:a8:f3:3f:85:79:63:8e:6b:e0:25:73:
77:f4:1a:3b:10:18:98:a8:5b:2b:46:20:e5:7d:56:
4b:e6:21:4a:4d:12:bd:c5:df:d1:55:27:29:d8:f9:
cd:21:5f:06:84:29:22:a8:69:ba:a0:40:29:56:b2:
cd:f2:b8:ba:95:50:c1:2e:ad:eb:8e:7d:94:15:cf:
c8:13:8e:62:b0:b0:67:84:c4:73:6c:b2:d5:48:84:
ce:c7:92:d5:15:98:23:fe:b0:09:1f:40:d2:27:e6:
4d:1f:91:7c:a9:e8:ab:37:14:50:bf:74:93:00:09:
cf:aa:a7:a1:62:04:5e:26:cf:87:06:6b:35:ae:f3:
d1:b5:0d:fc:f7:a6:c1:ab:43:db:eb:d3:81:4e:c7:
05:29:cf:cd:2d:0f:8d:ad:16:01:25:a5:03:e2:b2:
4a:db:36:1f:bb:0b:58:d5:07:8e:04:10:4b:63:d6:
cc:5e:44:fc:45:7d:9b:73:c6:d8:1e:fc:76:b7:3f:
af:8d:4f:3a:e6:bd:c7:ee:8e:e9:c3:1f:db:02:62:
5b:bd:c1:5a:95:d2:da:8b:b0:f3:6e:06:92:8c:d0:
9b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D0:A4:D6:F2:64:8C:3C:99:AF:40:BF:12:BC:7F:A6:86:80:00:96
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PdCk1vJkjDyZr0C_Erx_poaAAJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0/20
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
57:54:bc:5c:cd:47:3a:9e:75:93:cc:25:f7:87:55:a6:30:13:
f8:25:6a:88:31:eb:a5:2a:c7:05:63:4c:f9:e7:9b:f5:1e:52:
2e:1d:e6:6f:02:27:cc:99:2e:2b:23:20:b4:ab:90:8f:fb:6c:
cd:2e:8d:b5:9c:66:b8:77:fd:16:65:d9:64:ec:00:ac:44:3d:
35:ee:aa:02:35:98:df:36:af:0b:f9:06:5e:88:65:93:0d:b1:
16:b4:15:af:5f:1c:47:af:44:1b:a2:17:ad:12:16:d7:c8:1e:
ab:3f:d3:53:9b:a5:4e:08:42:4e:59:a7:2f:ad:af:0a:e5:00:
4d:bf:be:5e:6d:fb:59:0f:9a:22:a4:ed:ee:ea:35:3e:0f:cf:
aa:6b:00:f0:8d:88:55:cd:39:e6:45:63:58:ca:92:c2:0a:5d:
45:57:eb:7e:b1:d4:9a:21:78:cc:b2:ba:97:58:94:9a:8f:8b:
f7:19:d5:92:45:eb:ef:e8:68:2f:78:ed:20:72:c7:7d:f9:d0:
71:a1:03:4f:78:b9:c3:25:a4:68:a4:fe:ab:fa:69:f1:1d:c2:
85:2f:88:e5:d4:99:9e:c2:6c:ae:bb:57:fc:f9:8e:ba:3d:b9:
3e:3c:7a:ac:a4:87:38:a7:8b:12:f8:4e:43:48:c1:f4:80:e5:
11:21:2a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:13 2023 by rpki-client on console-ams.rpki-client.org