Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7lBiKWVoQbVuTQKC_-FRpA7A2Es.roa
File: 7lBiKWVoQbVuTQKC_-FRpA7A2Es.roa (raw, json)
Hash identifier: Iq9znIiSEd+sGCfkPlDcelN1Z+SZqHmpGmOjyLkrPMM=
Subject key identifier: EE:50:62:29:65:68:41:B5:6E:4D:02:82:FF:E1:51:A4:0E:C0:D8:4B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369E7B0F67F0CC0C073F934561B6A6B
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7lBiKWVoQbVuTQKC_-FRpA7A2Es.roa
Signing time: Wed 01 Jan 2025 19:48:50 +0000
ROA not before: Wed 01 Jan 2025 19:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.8.0/22 maxlen: 22
46.3.28.0/23 maxlen: 24
46.3.40.0/21 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 18:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e7:b0:f6:7f:0c:c0:c0:73:f9:34:56:1b:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee506229656841b56e4d0282ffe151a40ec0d84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:d1:a8:73:5e:aa:de:0c:39:cd:26:da:bf:
8e:33:fc:55:c1:9d:49:1d:38:24:e6:b3:03:0a:12:
ae:74:24:79:0d:7e:5f:6f:7c:7e:19:ab:8b:ed:e9:
72:89:59:f4:ca:5f:dd:69:25:59:8c:4d:1b:20:f6:
f0:67:e1:35:8c:ff:ec:58:06:a8:80:15:6f:52:71:
39:dc:d7:5f:72:e3:83:9f:1b:d5:ee:68:46:7b:a0:
29:13:d6:42:34:e5:85:ad:71:4d:e7:f1:19:64:9d:
66:17:34:a5:85:5d:6c:73:22:7d:4c:6f:70:cd:98:
b5:ec:28:b1:06:25:ed:cb:e4:ca:7e:7f:60:18:6f:
05:11:48:94:d7:b3:18:ca:e8:1f:6d:55:11:06:f5:
a2:8f:e4:16:4b:84:27:11:ad:64:f0:c7:fd:86:83:
ad:9b:ce:65:4d:36:56:41:54:7a:4e:c3:e7:4c:c0:
d6:9e:7f:75:00:ed:5f:5e:05:19:9c:af:04:8b:07:
03:0f:a5:57:f7:a3:b1:1a:88:ef:69:3d:5c:8c:dc:
95:4f:4d:29:ff:f9:ff:6b:30:43:22:a7:07:01:e2:
5f:78:83:3e:bf:dc:90:34:da:12:87:47:a6:6f:c4:
d2:fd:fa:21:26:6d:ad:31:66:f5:bc:b4:47:9f:b6:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:50:62:29:65:68:41:B5:6E:4D:02:82:FF:E1:51:A4:0E:C0:D8:4B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7lBiKWVoQbVuTQKC_-FRpA7A2Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.28.0/23
46.3.40.0/21
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/24
46.3.160.0/22
46.3.184.0-46.3.188.255
46.3.206.0-46.3.215.255
46.3.228.0/23
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/24
46.3.251.0/24
46.3.253.0-46.3.255.255
46.232.0.0/22
46.232.16.0/22
46.232.64.0-46.232.66.255
46.232.68.0/24
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
Signature Algorithm: sha256WithRSAEncryption
89:b5:f6:32:25:54:07:c5:26:90:8c:dd:48:f8:c1:ec:8e:55:
b4:14:c5:cf:65:50:9e:71:2c:02:8a:7c:70:00:d0:18:a7:84:
de:e4:de:ff:e4:77:b4:e8:00:9c:7d:da:da:3b:ff:d9:13:4b:
75:43:a5:ec:83:fd:68:61:69:71:f3:b9:eb:ef:f4:cf:12:31:
db:a9:d5:d1:56:b0:45:3f:4b:43:fe:2e:36:f6:8d:5b:45:13:
a3:c9:1f:43:77:56:d5:16:ea:c2:de:ee:ac:55:17:11:f9:3e:
4e:bf:67:f2:89:f4:96:19:c8:de:95:5e:37:ba:84:8f:de:c2:
f1:d8:d7:28:00:a6:aa:aa:7f:40:90:db:a4:6d:64:e9:cb:b3:
3f:1d:b2:ec:14:11:4b:66:6f:ee:9a:99:d2:04:41:7b:cb:72:
ba:56:40:9c:34:c6:bf:bc:72:88:de:93:c4:b2:58:53:45:09:
a8:b6:c5:fa:97:05:1c:5f:28:ed:71:35:30:28:fb:07:10:09:
24:19:ce:9a:cb:42:b8:17:3b:12:4e:5a:66:15:fc:ae:3a:62:
d4:7a:23:b3:8e:33:f8:d5:d3:9c:aa:13:44:ab:92:df:3b:3d:
20:d4:bc:5f:86:54:d9:de:4a:ce:b6:7b:2c:71:fd:14:8e:d4:
11:bd:c3:08
-----BEGIN CERTIFICATE-----
MIIF6DCCBNCgAwIBAgISAZQjaeew9n8MwMBz+TRWG2prMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjUwMTAxMTk0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTUwNjIyOTY1Njg0MWI1NmU0ZDAyODJmZmUxNTFhNDBlYzBkODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmPRqHNeqt4MOc0m2r+OM/xVwZ1J
HTgk5rMDChKudCR5DX5fb3x+GauL7elyiVn0yl/daSVZjE0bIPbwZ+E1jP/sWAao
gBVvUnE53NdfcuODnxvV7mhGe6ApE9ZCNOWFrXFN5/EZZJ1mFzSlhV1scyJ9TG9w
zZi17CixBiXty+TKfn9gGG8FEUiU17MYyugfbVURBvWij+QWS4QnEa1k8Mf9hoOt
m85lTTZWQVR6TsPnTMDWnn91AO1fXgUZnK8EiwcDD6VX96OxGojvaT1cjNyVT00p
//n/azBDIqcHAeJfeIM+v9yQNNoSh0emb8TS/fohJm2tMWb1vLRHn7aSFwIDAQAB
o4IC9DCCAvAwHQYDVR0OBBYEFO5QYillaEG1bk0Cgv/hUaQOwNhLMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvN2xCaUtXVm9RYlZ1VFFLQ18tRlJwQTdBMkVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBCAYIKwYBBQUHAQcBAf8EgfgwgfUwgfIEAgABMIHrAwQC
LgMIAwQBLgMcAwQDLgMoMAwDBAAuA1kDBAIuA1gDBAMuA3gDBAAuA4YDBAIuA6Aw
DAMEAy4DuAMEAC4DvDAMAwQBLgPOAwQDLgPQAwQBLgPkAwQBLgPsMAwDBAAuA/MD
BAAuA/QDBAAuA/YDBAAuA/gDBAAuA/swCwMEAC4D/QMDAi4AAwQCLugAAwQCLugQ
MAwDBAYu6EADBAAu6EIDBAAu6EQDBAIu6HQDBAIu6HwDBACVfsEDBACVfsQDBACV
fuIDBACVfuQDBACVfucDBACVfvIDBAGVfvQwDAMEAJV+9wMEAJV++jANBgkqhkiG
9w0BAQsFAAOCAQEAibX2MiVUB8UmkIzdSPjB7I5VtBTFz2VQnnEsAop8cADQGKeE
3uTe/+R3tOgAnH3a2jv/2RNLdUOl7IP9aGFpcfO56+/0zxIx26nV0VawRT9LQ/4u
NvaNW0UTo8kfQ3dW1Rbqwt7urFUXEfk+Tr9n8on0lhnI3pVeN7qEj97C8djXKACm
qqp/QJDbpG1k6cuzPx2y7BQRS2Zv7pqZ0gRBe8tyulZAnDTGv7xyiN6TxLJYU0UJ
qLbF+pcFHF8o7XE1MCj7BxAJJBnOmstCuBc7Ek5aZhX8rjpi1Hojs44z+NXTnKoT
RKuS3zs9INS8X4ZU2d5KzrZ7LHH9FI7UEb3DCA==
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:32 2025 by rpki-client