Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YTz9_TWDrmrmaVhOVsHRSZHyeSw.roa
File: YTz9_TWDrmrmaVhOVsHRSZHyeSw.roa (raw, json)
Hash identifier: z+DEf4LywZxewvhzdIa+DKw9v+2lbUpoInxiTkO/+qY=
Subject key identifier: 61:3C:FD:FD:35:83:AE:6A:E6:69:58:4E:56:C1:D1:49:91:F2:79:2C
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018CC4255AEEE31AC6DD4EAA54ADB071E1E6
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YTz9_TWDrmrmaVhOVsHRSZHyeSw.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 185.135.212.0/22 maxlen: 24
45.43.88.0/22 maxlen: 24
198.105.96.0/22 maxlen: 24
198.105.104.0/22 maxlen: 24
198.105.112.0/24 maxlen: 24
198.105.118.0/23 maxlen: 24
198.105.114.0/23 maxlen: 24
198.105.113.0/24 maxlen: 24
155.254.40.0/22 maxlen: 22
155.254.44.0/22 maxlen: 24
155.254.50.0/23 maxlen: 24
155.254.52.0/22 maxlen: 24
155.254.56.0/22 maxlen: 24
45.43.92.0/22 maxlen: 24
185.53.131.0/24 maxlen: 24
185.53.128.0/24 maxlen: 24
185.53.130.0/24 maxlen: 24
185.53.129.0/24 maxlen: 24
185.83.219.0/24 maxlen: 24
185.83.218.0/24 maxlen: 24
185.83.216.0/24 maxlen: 24
185.83.217.0/24 maxlen: 24
107.181.137.0/24 maxlen: 24
107.181.156.0/22 maxlen: 22
91.210.64.0/22 maxlen: 24
103.206.232.0/22 maxlen: 24
162.220.246.0/23 maxlen: 24
94.177.5.0/24 maxlen: 24
43.239.88.0/22 maxlen: 22
87.239.252.0/23 maxlen: 24
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:ee:e3:1a:c6:dd:4e:aa:54:ad:b0:71:e1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=613cfdfd3583ae6ae669584e56c1d14991f2792c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:a9:4b:13:89:4c:89:bc:e4:b7:20:bf:25:
16:4a:11:98:8e:8b:81:ac:46:39:df:4f:dd:c7:bf:
de:45:34:6f:55:4c:30:ff:39:55:c9:eb:ed:71:41:
55:6b:0c:e3:1b:e3:2f:cf:fb:3f:34:36:7f:da:07:
ea:62:14:33:cd:a7:32:3b:d4:43:ac:2c:e2:18:4b:
99:2e:75:eb:8c:0d:e5:ac:68:9b:80:9f:19:20:3b:
c5:bb:f4:7e:1f:e7:13:72:79:49:f6:ce:1e:cd:46:
0e:2d:38:d5:8d:0f:e8:e7:5d:9f:f8:a6:30:2f:ef:
57:7c:66:46:b5:3c:60:3a:c0:75:2e:f0:94:d7:00:
57:04:cb:8a:22:54:66:30:a9:38:e1:b2:f4:5e:00:
68:cc:2f:c0:7f:0b:6c:9e:8f:51:ce:d8:45:82:39:
77:02:0b:41:e4:25:a7:1a:58:20:cc:d0:33:8e:77:
21:75:bb:7c:fc:20:a1:23:b6:35:7e:8b:b1:fc:68:
44:14:bf:bb:b6:be:73:a0:61:7f:a5:81:0c:4d:6c:
cb:4b:9b:75:0b:48:66:ee:32:a4:17:2c:03:a6:b1:
d4:9e:ad:00:94:ca:46:a3:5d:5e:ec:cb:d1:f4:a6:
e7:f1:8d:00:fe:94:c8:a2:1a:96:31:3b:33:ee:51:
0a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3C:FD:FD:35:83:AE:6A:E6:69:58:4E:56:C1:D1:49:91:F2:79:2C
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/YTz9_TWDrmrmaVhOVsHRSZHyeSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.239.88.0/22
45.43.88.0/21
87.239.252.0/23
91.210.64.0/22
94.177.5.0/24
103.206.232.0/22
107.181.137.0/24
107.181.156.0/22
155.254.40.0/21
155.254.50.0-155.254.59.255
162.220.246.0/23
185.53.128.0/22
185.83.216.0/22
185.135.212.0/22
198.105.96.0/22
198.105.104.0/22
198.105.112.0/22
198.105.118.0/23
IPv6:
2a02:2ca0::/29
Signature Algorithm: sha256WithRSAEncryption
64:ec:ee:96:56:aa:20:bd:f1:a2:b1:88:40:5b:e5:d6:1a:ea:
95:d4:a9:94:5d:12:a5:12:3c:57:9b:bc:bc:22:0a:49:2c:f3:
26:42:37:81:41:f5:3f:83:4f:ea:40:9e:d8:a7:c9:c2:0f:d0:
b0:68:df:7f:cd:ab:67:08:79:6e:af:66:c0:3b:66:16:17:78:
b5:a3:e5:e3:1e:11:59:d9:7b:8f:89:28:73:c2:70:98:91:e9:
19:9f:a1:78:a5:77:18:0b:17:5e:76:9a:73:99:1b:5d:27:0a:
b7:df:73:f8:b3:00:e6:7b:05:9a:d8:6b:c2:c7:3c:68:a0:0e:
c6:3f:70:08:e5:83:f2:a7:40:27:d0:a0:79:af:d0:ad:cc:55:
a5:dc:77:4a:31:f5:f3:aa:e7:2a:6c:86:67:be:b6:8e:5c:bf:
e3:9c:50:50:fd:3a:59:08:7c:20:77:3e:1b:72:36:99:ef:72:
aa:90:13:c9:a6:f9:9a:06:39:fa:36:70:2b:aa:e6:45:1e:f9:
69:84:64:83:81:b5:86:f2:b6:29:52:e3:c6:8a:b1:a3:d0:6d:
a8:d1:8c:2e:cc:45:7d:85:de:ec:15:3f:29:d5:1c:e4:e9:2f:
36:56:47:3f:96:bb:5b:39:f4:25:6f:5d:00:fb:fc:a2:65:e5:
37:8f:8e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 02:40:25 2024 by rpki-client on console-ams.rpki-client.org