Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CElLG-dghLSGuDChFcer2gaZMpM.roa
File: CElLG-dghLSGuDChFcer2gaZMpM.roa (raw, json)
Hash identifier: YO6GfiPuG+Ydhs8/S4ximpVs0LH79WtrRkKqMKyHf9I=
Subject key identifier: 08:49:4B:1B:E7:60:84:B4:86:B8:30:A1:15:C7:AB:DA:06:99:32:93
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01942369F8C861BDBC5E3D6E0E4FEDECFD53
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CElLG-dghLSGuDChFcer2gaZMpM.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Jan 2025 18:34:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f8:c8:61:bd:bc:5e:3d:6e:0e:4f:ed:ec:fd:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08494b1be76084b486b830a115c7abda06993293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:47:f3:6a:31:2a:f2:f4:f0:3e:4d:43:53:
80:1f:1f:95:47:e5:43:66:92:67:21:2a:75:27:07:
cb:37:82:fb:43:cd:b5:e7:59:cd:3b:e5:5f:a0:dc:
41:67:e3:9e:f1:2a:f8:ca:16:e2:fe:95:ef:00:f8:
46:e8:0d:46:0f:ab:3f:a1:a8:54:b4:fa:e8:b3:a6:
e1:88:aa:51:b1:1f:fe:35:8e:51:80:cf:11:11:d6:
be:7e:a0:ea:41:8c:98:cb:97:8b:c4:f0:84:81:17:
3a:74:46:74:3d:5c:11:09:ba:7d:51:02:e3:7f:7a:
96:3a:4d:b6:22:c1:ca:0b:42:97:d5:5d:83:fb:cd:
fc:19:49:9e:ea:e2:c0:a8:65:32:c9:5f:fc:e1:79:
a8:73:e1:01:9c:fc:37:ff:a1:f1:fc:85:ac:24:f0:
06:30:98:25:1c:83:e5:aa:63:9c:96:4e:1b:fd:73:
f0:b6:a8:50:4f:e9:0d:8c:17:bd:ca:eb:f0:c5:e1:
05:9a:d9:69:0c:ea:73:4f:47:bd:e5:d9:0f:7a:26:
df:52:8d:d0:0d:53:45:44:7c:3e:1e:bc:eb:24:03:
f3:0c:1d:19:19:da:6a:c7:9d:6b:73:2d:79:93:39:
06:bb:6e:60:8a:b2:e1:a8:9f:a8:ab:45:34:33:59:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:4B:1B:E7:60:84:B4:86:B8:30:A1:15:C7:AB:DA:06:99:32:93
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/CElLG-dghLSGuDChFcer2gaZMpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.32.0/20
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/21
46.3.206.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.0.0/22
46.232.18.0/23
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
5c:ec:aa:8e:c5:59:c6:ce:5f:51:8d:4b:0a:31:ed:33:62:76:
a9:a0:6f:9a:13:c9:5c:79:51:df:7f:23:ce:1f:95:d3:26:1e:
84:8f:f8:57:d5:7e:ba:57:f4:ac:a8:9e:e1:65:84:69:c2:ba:
32:d9:dd:f0:d7:e4:1b:db:8d:5f:d5:23:07:75:66:2e:36:b8:
e9:ea:08:23:10:bd:08:9e:e2:ee:d0:7e:4b:29:5c:8a:ce:31:
2a:ec:8d:6b:ca:21:99:75:a0:76:66:4a:6c:78:71:c7:1c:8e:
fa:c0:ca:51:73:f3:6b:8f:1f:33:ee:60:94:d4:49:91:45:f3:
2c:4d:98:eb:50:a4:95:25:51:f6:91:b8:79:bf:71:a4:6a:40:
e9:66:a5:ef:6d:7f:79:d2:5f:5b:dc:db:f7:60:a6:1a:93:83:
2b:ee:10:49:a5:76:3d:29:89:79:fc:dc:43:57:7b:b0:08:b3:
16:7f:d2:71:24:5c:43:88:0a:3a:08:fc:75:c1:7c:22:80:bb:
a6:34:4e:5c:2e:aa:11:f1:de:00:4d:b0:f4:e2:ea:15:51:88:
10:01:08:c5:ea:72:cc:b5:64:39:43:f2:3e:ac:f0:e3:48:9b:
e8:b6:86:66:9f:ba:5f:8f:a5:33:10:a7:65:b0:eb:01:c2:8f:
2f:4f:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:56 2025 by rpki-client