Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/omeES6lI30ZHFkNkAvorRJC_xhY.roa
File: omeES6lI30ZHFkNkAvorRJC_xhY.roa (raw, json)
Hash identifier: XwYxqEgbluFkjWY3AqeK+KaL6N16CimeHtdKwIEGzBs=
Subject key identifier: A2:67:84:4B:A9:48:DF:46:47:16:43:64:02:FA:2B:44:90:BF:C6:16
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 0186BCF817C42D7A53983695019A3DE9DCA8
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/omeES6lI30ZHFkNkAvorRJC_xhY.roa
Signing time: Tue 07 Mar 2023 16:47:00 +0000
ROA not before: Tue 07 Mar 2023 16:47:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
162.217.251.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:f8:17:c4:2d:7a:53:98:36:95:01:9a:3d:e9:dc:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Mar 7 16:47:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a267844ba948df464716436402fa2b4490bfc616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2b:18:e8:eb:2d:7d:da:32:c2:b1:d4:b1:07:
e1:fa:6d:64:71:60:fd:f0:00:5d:85:e2:23:3f:36:
97:0c:70:d1:ce:18:31:52:cb:b0:74:52:78:23:53:
bf:f1:24:12:ca:68:e0:df:27:50:c6:e9:d5:e8:b5:
68:28:56:b8:a2:4f:70:02:f5:5b:72:f8:eb:c5:a8:
0d:29:06:a9:b2:17:87:48:c7:e0:ff:5f:e4:fd:db:
eb:95:09:c9:55:81:94:f4:d5:20:bb:0b:1d:c2:75:
77:85:28:24:df:4b:67:51:19:95:81:65:50:d6:4f:
76:8b:f2:1e:9a:48:5a:e2:d8:3f:21:bb:4d:fe:16:
f7:10:05:c1:70:83:8c:d0:ae:8a:74:85:f1:bc:72:
94:f5:5e:78:0b:23:25:5a:17:dd:17:db:0b:0d:9c:
b7:7a:45:31:bb:49:8c:f9:c6:ba:9a:3d:ee:bd:61:
0b:fb:eb:df:bb:87:54:95:c2:ec:8a:89:51:92:bf:
2c:c2:d1:cd:09:e5:3c:86:20:ad:87:91:32:b7:70:
1d:35:de:40:68:7e:8f:21:59:05:45:c9:d6:4f:eb:
3e:b8:af:61:f0:fd:0e:1e:39:9c:48:76:8f:47:63:
56:7e:4a:87:17:76:66:e7:38:2c:a8:c4:9d:45:ee:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:84:4B:A9:48:DF:46:47:16:43:64:02:FA:2B:44:90:BF:C6:16
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/omeES6lI30ZHFkNkAvorRJC_xhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0-107.161.173.255
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0/22
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
67:c1:fd:7b:28:23:20:57:49:41:6b:d4:b6:77:a5:7a:b0:c6:
e7:06:23:f7:65:e1:d3:68:58:3f:90:4a:d9:6a:03:db:36:c1:
0e:c5:de:59:91:04:4a:4b:d1:e4:3a:1c:a5:b5:d4:08:1b:26:
ed:87:74:50:92:9d:7a:65:47:76:11:01:cd:e9:41:14:79:5d:
31:8b:ed:7f:22:f4:42:08:c5:d4:a1:2a:1c:d5:a2:f9:40:e5:
04:6b:26:4b:91:73:2c:93:5b:ea:5b:79:45:7a:89:46:ce:5d:
49:41:dd:cf:16:f8:d1:2e:9d:3a:71:91:34:e2:6c:4c:84:f4:
44:1c:29:2c:c6:b0:a9:68:35:68:2f:ec:1c:1f:71:f1:b8:3c:
58:54:bd:2e:13:b1:9d:f1:63:fa:47:5d:5c:df:e8:90:c0:b0:
8e:b9:64:12:f2:7e:f7:f0:13:e4:eb:c5:f9:b1:3b:41:2a:2e:
79:b7:81:17:4b:d5:a1:7e:c1:99:32:a2:68:13:0d:ed:4b:c4:
ba:39:4f:38:bf:08:dd:d9:b7:fc:80:16:eb:e7:46:22:d8:88:
f5:61:05:50:2a:88:aa:f6:fa:6e:6a:7e:f6:2b:8d:3a:58:6b:
00:21:e8:76:f8:67:ad:50:2d:62:7b:a7:8d:68:c2:4b:c9:95:
14:ce:fe:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:20 2023 by rpki-client on console-fra.rpki-client.org