Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R3qErFqOA2H21IKLDmx1KQvp_rQ.roa
File: R3qErFqOA2H21IKLDmx1KQvp_rQ.roa (raw, json)
Hash identifier: mujy1Pzy66JfAcguF6U8zGuHBkqV0/CgdupTnXiC2bk=
Subject key identifier: 47:7A:84:AC:5A:8E:03:61:F6:D4:82:8B:0E:6C:75:29:0B:E9:FE:B4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E413EE6822456DCC239B5AE63A2C6B35F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R3qErFqOA2H21IKLDmx1KQvp_rQ.roa
Signing time: Fri 15 Mar 2024 08:33:45 +0000
ROA not before: Fri 15 Mar 2024 08:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.20.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
46.3.22.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.192.0/19 maxlen: 19
46.3.224.0/19 maxlen: 19
46.3.237.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
80.243.128.0/20 maxlen: 24
149.126.194.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
149.126.211.0/24 maxlen: 24
149.126.212.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 21:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:3e:e6:82:24:56:dc:c2:39:b5:ae:63:a2:c6:b3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 08:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=477a84ac5a8e0361f6d4828b0e6c75290be9feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4d:16:38:13:13:90:9c:e5:b8:c6:5e:0d:f9:
63:ad:c2:ff:51:8d:8f:02:3a:45:dd:01:3b:1c:0f:
bc:26:5b:e9:5a:b4:06:f3:ba:fb:e4:23:f1:e1:ee:
ce:e1:09:98:ef:c9:00:2c:48:49:4b:c3:9a:c3:60:
02:9a:4a:e4:2a:5d:8a:d6:56:fa:80:cf:b1:e1:8c:
7e:df:e3:7d:a8:f7:6c:ac:18:c1:37:1d:3c:5d:f9:
f6:c1:c0:a4:7d:db:7d:de:49:6a:d1:f6:bb:d4:26:
cb:ee:42:1a:21:5a:d9:4a:3d:83:3d:98:45:f5:02:
b5:17:e8:a9:78:50:bb:4a:86:9e:4e:28:22:f7:20:
b9:84:ee:a6:b6:36:4b:de:3c:12:e3:ae:33:29:26:
06:3f:ac:81:ee:43:81:a3:e1:3f:64:de:de:4c:28:
d7:73:99:14:34:f7:85:1b:5c:09:51:b5:a1:a2:0c:
86:6e:87:6c:04:98:d3:e9:50:91:93:8b:9b:f8:73:
da:73:8d:33:21:c9:1a:44:2f:3e:6d:ea:27:cb:fd:
df:03:cc:eb:f4:c4:9f:3d:e5:a2:26:4b:c7:15:60:
64:ef:62:d5:ca:dc:34:05:7f:09:9d:47:cd:88:18:
a4:68:6f:54:ec:08:c6:ab:e3:13:19:cf:f7:83:99:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:84:AC:5A:8E:03:61:F6:D4:82:8B:0E:6C:75:29:0B:E9:FE:B4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R3qErFqOA2H21IKLDmx1KQvp_rQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.20.0/22
46.3.85.0/24
46.3.128.0/23
46.3.131.0/24
46.3.192.0/18
46.232.8.0/21
80.243.128.0/20
149.126.194.0/24
149.126.199.0/24
149.126.209.0/24
149.126.211.0-149.126.212.255
149.126.227.0/24
149.126.241.0/24
Signature Algorithm: sha256WithRSAEncryption
29:60:9b:e2:98:9e:5b:46:30:18:8b:94:4d:04:9a:d2:bd:81:
52:c7:f7:d2:d3:95:b9:30:d1:cb:95:c0:22:71:c1:51:ae:c4:
14:6c:86:12:a5:37:fa:9b:bb:a3:fb:96:38:b0:db:2b:32:a7:
3c:a2:a9:7b:fa:00:6a:c5:8f:0b:68:a4:92:95:e0:bb:4b:26:
45:75:53:b2:f1:3f:ff:b4:67:f2:dd:eb:15:ca:04:34:dc:69:
63:54:af:42:ac:12:13:c3:2a:b3:ee:59:52:fd:71:f8:97:57:
41:e6:0b:a4:b3:cd:a9:f5:d3:6c:f6:e9:0a:bd:27:d7:ab:5d:
70:5a:28:66:27:ed:0d:7d:a1:cb:95:ee:40:3b:5f:7c:64:f1:
05:c1:5a:c0:11:57:ca:12:cf:21:a7:6c:30:14:5c:cd:b6:10:
28:a7:a0:3a:d7:46:4d:91:14:90:37:63:2b:ae:6f:07:25:a2:
bd:54:9b:bc:c2:d1:44:57:fe:57:7d:3a:84:52:6a:0e:0b:cc:
10:ae:aa:b5:07:f4:f8:d3:eb:0c:e7:c9:18:09:3f:20:28:d5:
39:6a:db:b7:69:0b:4e:2e:a8:55:57:56:b9:35:51:ae:0c:4e:
00:42:6d:98:16:44:e6:26:6c:8b:7d:6f:3d:e1:8a:54:dd:09:
30:11:19:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:02 2025 by rpki-client