Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/siVvvWrhy7Y1MR5rLZxyr2YzpIc.roa
File: siVvvWrhy7Y1MR5rLZxyr2YzpIc.roa (raw, json)
Hash identifier: 50PjrgteRoYsGPFeLxtzRARNtk/WZXWXllCHdX0wbH0=
Subject key identifier: B2:25:6F:BD:6A:E1:CB:B6:35:31:1E:6B:2D:9C:72:AF:66:33:A4:87
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 01856F94DB68B5DF6A2BF8726CDD179C0A38
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/siVvvWrhy7Y1MR5rLZxyr2YzpIc.roa
Signing time: Sun 01 Jan 2023 23:05:04 +0000
ROA not before: Sun 01 Jan 2023 23:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58305
IP address blocks: 198.105.124.0/23 maxlen: 24
45.43.64.0/19 maxlen: 24
45.43.74.0/23 maxlen: 24
45.43.80.0/22 maxlen: 24
198.105.96.0/19 maxlen: 24
198.105.116.0/23 maxlen: 24
155.254.32.0/22 maxlen: 24
155.254.32.0/19 maxlen: 24
155.254.48.0/23 maxlen: 23
155.254.63.0/24 maxlen: 24
155.254.61.0/24 maxlen: 24
107.161.160.0/24 maxlen: 24
107.161.165.0/24 maxlen: 24
107.161.166.0/24 maxlen: 24
107.161.161.0/24 maxlen: 24
107.161.162.0/24 maxlen: 24
107.161.164.0/24 maxlen: 24
107.161.167.0/24 maxlen: 24
107.161.172.0/24 maxlen: 24
107.161.168.0/24 maxlen: 24
107.161.169.0/24 maxlen: 24
107.161.170.0/24 maxlen: 24
107.161.171.0/24 maxlen: 24
107.181.128.0/19 maxlen: 24
162.220.240.0/24 maxlen: 24
162.220.242.0/24 maxlen: 24
162.220.240.0/21 maxlen: 24
162.220.241.0/24 maxlen: 24
113.20.156.0/22 maxlen: 24
107.161.173.0/24 maxlen: 24
162.217.248.0/24 maxlen: 24
162.217.249.0/24 maxlen: 24
162.217.250.0/24 maxlen: 24
2a05:9f40::/29 maxlen: 48
2a07:9944:20::/48 maxlen: 48
2a07:9944:40::/48 maxlen: 48
2a07:9942:39d7::/48 maxlen: 48
2a07:9944:1111::/48 maxlen: 48
2a07:9944:2222::/48 maxlen: 48
2a07:9940::/29 maxlen: 48
2a07:9944:10::/48 maxlen: 48
2a07:9944:30::/48 maxlen: 48
2a02:2ca7:2e::/48 maxlen: 48
2a07:9942:39d6::/48 maxlen: 48
2a02:2ca0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:db:68:b5:df:6a:2b:f8:72:6c:dd:17:9c:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 23:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2256fbd6ae1cbb635311e6b2d9c72af6633a487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1f:7a:13:b2:04:d0:41:02:85:5f:ab:ab:00:
2e:fa:58:a7:ef:b7:6e:7e:cb:f8:44:30:95:83:42:
61:10:63:3e:79:ca:5f:4d:e0:4f:3a:a2:2d:2f:6b:
3f:de:fd:88:ad:06:7a:9e:ae:40:de:26:16:ed:ad:
be:ec:a8:57:c4:25:9d:e2:03:d2:ad:8a:a0:f7:ea:
8e:52:f2:3b:28:26:3a:91:c2:52:a0:b4:97:48:18:
e0:71:1e:37:28:e1:36:9d:3d:34:07:d5:a2:31:3a:
8a:33:75:48:d8:d2:fc:a8:0c:fb:84:f0:9a:7a:fe:
bb:ba:66:6c:de:e7:0d:d7:84:84:61:7e:c4:6f:51:
ea:f6:91:be:c7:b5:bb:8d:19:ad:24:02:69:8b:4c:
da:42:53:9f:f1:65:24:a8:29:d2:4d:62:84:b4:3e:
4d:68:f3:62:63:3e:b0:61:13:e9:87:31:cf:43:45:
3e:95:21:54:44:49:2d:bb:bf:e0:34:cf:89:78:48:
09:e3:da:8e:1e:88:39:17:e3:17:ff:e2:81:21:2f:
d1:64:57:5b:f5:1e:e3:c9:ce:3a:5f:7b:e4:3c:db:
9a:a0:9c:32:da:59:26:89:91:5f:38:01:4e:70:9a:
8f:7d:ba:a9:4b:e0:40:bf:8d:2e:f8:50:69:3f:cc:
3d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:6F:BD:6A:E1:CB:B6:35:31:1E:6B:2D:9C:72:AF:66:33:A4:87
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/siVvvWrhy7Y1MR5rLZxyr2YzpIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.161.160.0-107.161.162.255
107.161.164.0-107.161.173.255
107.181.128.0/19
113.20.156.0/22
155.254.32.0/19
162.217.248.0-162.217.250.255
162.220.240.0/21
198.105.96.0/19
IPv6:
2a02:2ca0::/29
2a05:9f40::/29
2a07:9940::/29
Signature Algorithm: sha256WithRSAEncryption
28:63:cb:b4:1a:b9:d2:3a:29:1b:84:1d:c7:75:69:e7:05:b4:
ba:19:0c:e1:15:71:2a:e9:20:f6:5e:3f:07:fa:fc:c9:99:db:
8b:3a:f6:38:f1:8f:76:8d:29:3a:3c:fa:99:f5:0e:29:cb:15:
52:55:b3:bb:fb:f0:b6:c2:72:ef:a1:2c:af:4b:fd:66:7c:20:
74:a8:03:79:27:58:6f:c9:39:f7:d3:6b:06:ad:34:75:17:72:
21:a4:ad:fb:cc:81:07:b3:7f:f0:c1:87:03:f0:ef:ae:d5:1b:
87:d9:13:71:82:ab:18:62:f6:86:11:d5:c1:dd:6e:d9:ce:3e:
01:1b:c3:1f:07:9e:de:24:0d:25:c7:7f:1f:0a:f2:b8:82:9d:
5e:1a:8c:1a:32:f3:34:9d:08:88:82:93:cc:59:1a:c3:5d:87:
e8:78:9d:9d:df:e7:f3:8d:6a:fc:c8:c2:ef:4d:c7:f7:d4:5d:
83:8c:4b:1a:85:14:fb:33:54:f8:1c:43:90:7e:d4:6c:5b:5c:
f2:74:7d:4d:7e:a8:a3:09:39:1a:60:e4:e7:4a:fe:dc:33:09:
0e:79:56:bd:50:d7:97:53:66:32:77:80:da:2e:ed:70:1d:fd:
72:34:26:00:b3:c2:30:02:9e:c5:c5:05:a2:82:27:23:e5:38:
d4:14:b7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:14 2023 by rpki-client on console-ams.rpki-client.org