Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa
File: 0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa (raw, json)
Hash identifier: TJ6SZxOXmw9czpdVKYvCNFJHxRsYDECZPAKV3D7j5sA=
Subject key identifier: D3:FE:D3:9F:BF:C2:0D:41:E0:A0:D1:86:CD:9E:9C:98:6E:65:02:13
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E413586A18FD3FDAF98CCFD5B11FAF928
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa
Signing time: Fri 15 Mar 2024 08:23:30 +0000
ROA not before: Fri 15 Mar 2024 08:23:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.0.0/16 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.205.0/24 maxlen: 24
46.3.208.0/22 maxlen: 22
46.3.212.0/22 maxlen: 22
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:35:86:a1:8f:d3:fd:af:98:cc:fd:5b:11:fa:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 08:23:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3fed39fbfc20d41e0a0d186cd9e9c986e650213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9a:f1:e7:ca:95:70:5e:af:05:eb:4a:ab:16:
b7:9e:1d:92:09:0e:95:3d:10:db:a0:cc:bc:74:6b:
ff:43:b4:cb:b3:89:a9:63:5b:a2:83:01:bd:26:cf:
1a:c5:20:dc:78:c6:55:80:df:3f:28:e9:4e:58:dd:
c6:e1:0c:3f:c5:5f:95:6f:94:cf:e4:26:f8:c6:11:
7e:15:2e:db:3c:1d:05:cd:de:e9:8a:b4:05:0a:06:
07:69:87:f2:e6:3d:15:dc:f4:6a:11:aa:84:d1:29:
02:96:ce:fc:c0:15:3a:f4:6a:6c:23:7a:90:d5:0f:
de:3a:a1:59:b8:98:31:61:29:c4:39:7f:15:07:85:
fd:d2:ac:2b:22:31:53:2a:81:dd:a0:6a:49:b4:c6:
82:1f:08:5f:75:fa:be:3b:f5:65:fa:fd:9b:4f:c3:
3b:f9:f4:08:53:b1:1c:23:a7:cc:7f:89:97:de:41:
1f:7d:73:9a:4d:93:85:ed:84:e0:60:72:f9:37:5b:
8b:13:47:8f:8d:9f:0b:50:a1:8f:26:01:63:6e:4b:
6e:29:a3:61:c9:24:a9:fe:76:8d:92:a3:71:8c:7b:
4b:cd:e9:06:08:32:98:67:42:c7:e8:db:ca:fa:0e:
e0:26:4f:cf:00:ba:9f:a0:8d:d2:92:72:30:b7:ac:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:D3:9F:BF:C2:0D:41:E0:A0:D1:86:CD:9E:9C:98:6E:65:02:13
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0_7Tn7_CDUHgoNGGzZ6cmG5lAhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
14:01:d3:80:45:c2:5d:31:85:b3:08:ec:04:69:43:13:60:e2:
70:91:ec:01:91:d4:42:01:9b:75:f0:46:4b:64:33:48:61:7e:
82:8b:5c:ac:31:d8:10:ed:38:e9:ed:5c:cb:ec:7d:f6:a7:95:
ec:e1:13:2c:4d:67:e2:6b:e1:c1:82:44:2f:70:88:ff:e9:b7:
b9:a7:46:b8:c0:e6:73:4c:8d:ee:69:1a:be:dd:45:7d:c2:9b:
5c:72:f2:1e:07:e4:ea:52:87:fc:b0:12:96:03:eb:d1:30:ce:
03:86:0a:d9:49:e0:ec:52:21:32:42:46:3c:e4:33:07:e5:74:
7c:d7:e6:72:f1:8d:37:88:34:3b:87:b1:a0:eb:18:d5:bd:f6:
88:f4:46:55:f1:d1:58:dd:fc:81:ac:4a:be:a8:4d:7e:9b:77:
ce:15:ca:ed:3d:10:89:a7:14:27:82:48:5d:20:45:32:5f:66:
38:d6:a4:5c:c9:df:b3:34:a1:92:70:a0:fa:97:86:f3:c4:29:
51:6d:32:1d:5d:8b:64:fc:91:ba:b9:67:ea:46:c2:22:75:d1:
b7:2a:f3:0d:48:07:bb:37:22:78:d7:dd:f3:e6:b1:34:90:02:
c2:1e:17:06:0c:32:9b:48:c2:ff:9a:f7:b8:d4:f0:ca:80:06:
59:78:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:00 2025 by rpki-client