Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/SNMR6CyDIbH5aNaNm5HlLO--LLM.roa
File: SNMR6CyDIbH5aNaNm5HlLO--LLM.roa (raw, json)
Hash identifier: z3M6g/3vFmuZSuMpnVaJwXrUuDEHKUkkdOXdyPYgITM=
Subject key identifier: 48:D3:11:E8:2C:83:21:B1:F9:68:D6:8D:9B:91:E5:2C:EF:BE:2C:B3
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 019302D6A1DE994E3EBE50EE04B07F73440E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/SNMR6CyDIbH5aNaNm5HlLO--LLM.roa
Signing time: Wed 06 Nov 2024 18:57:20 +0000
ROA not before: Wed 06 Nov 2024 18:57:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 46.3.116.0/22 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
46.232.96.0/20 maxlen: 24
46.232.112.0/20 maxlen: 22
149.126.226.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 21:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:02:d6:a1:de:99:4e:3e:be:50:ee:04:b0:7f:73:44:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 6 18:57:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48d311e82c8321b1f968d68d9b91e52cefbe2cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:7d:5d:6e:0a:67:cd:98:c0:59:21:d1:75:
78:0e:63:10:67:ea:2d:66:9f:73:02:03:e1:b8:99:
9f:19:ca:1e:81:3b:5c:a3:47:78:f0:43:80:ad:17:
1f:8f:72:55:f3:88:8c:2b:1c:1d:5a:17:48:c1:d0:
6a:f1:06:80:0b:ce:67:3a:40:8a:f0:af:72:7d:9e:
f7:fc:c8:cd:cf:25:f2:39:ca:06:0c:60:5a:8c:33:
d7:53:15:16:0f:bd:7a:e8:e3:01:94:ab:58:0c:81:
2e:3d:1d:a1:1f:42:1f:9b:47:f2:47:63:9e:ae:6e:
93:e4:71:92:81:e6:e2:d5:f0:b9:7e:23:0f:93:50:
85:9b:f3:ed:3e:8c:c0:23:3f:70:be:ac:35:1b:f5:
aa:9a:d1:f2:3d:ea:20:de:54:99:5a:8c:76:5f:2b:
51:4a:66:70:cc:ab:91:ba:09:5d:54:ec:84:f6:76:
87:ad:be:09:1e:37:25:d2:5f:39:00:26:f7:ca:1e:
eb:df:f8:00:b1:09:a1:82:2c:92:b6:2f:e1:7e:3a:
71:20:9c:00:3e:db:63:24:cb:0d:83:fa:a2:21:76:
21:ca:9b:f8:0b:b9:fc:86:bf:5b:5c:f6:0f:64:75:
ba:15:d9:44:86:ec:4e:9b:8f:75:03:6d:8b:85:1f:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D3:11:E8:2C:83:21:B1:F9:68:D6:8D:9B:91:E5:2C:EF:BE:2C:B3
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/SNMR6CyDIbH5aNaNm5HlLO--LLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0/22
46.3.190.0/23
46.3.200.0/23
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.67.0/24
46.232.69.0/24
46.232.72.0/21
46.232.96.0/19
149.126.226.0/24
149.126.244.0/24
149.126.246.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
61:67:49:ee:56:32:ee:aa:0b:f3:9a:df:22:c8:b2:31:4f:41:
63:12:26:63:54:0b:78:4d:3b:96:cb:e9:50:12:a5:b5:64:7a:
1c:60:70:18:3b:a1:86:20:da:39:23:c7:10:64:3b:be:98:ad:
c3:11:51:a3:5e:2d:d3:25:cc:d5:0a:34:78:0d:ac:5f:c9:b2:
b0:74:76:7a:1d:aa:de:82:1b:a1:37:bd:36:c4:19:4e:dc:e4:
51:16:a2:27:f1:43:e8:cf:e8:98:ce:bf:25:81:54:25:6d:a0:
4f:ee:40:b1:d4:e6:ad:87:22:d3:f3:af:69:72:0b:36:a4:49:
77:01:c4:5f:7c:a0:1a:6e:ae:b7:54:63:b3:a0:bb:4f:a1:2c:
4c:07:b7:4c:b9:14:64:51:0a:e3:b5:03:1c:b8:27:39:da:5a:
07:0f:92:e7:2c:54:fc:91:72:fb:fc:6c:98:10:3e:03:dc:cc:
0e:44:25:2d:20:4e:42:76:36:4a:d4:81:85:07:d1:bf:af:f7:
bd:fc:27:fb:ba:9e:64:a5:f8:98:34:de:52:bb:14:e7:72:43:
24:f8:ec:06:a5:01:f4:1d:29:78:88:c5:b9:2f:5c:28:62:fe:
c5:bf:47:7d:6d:57:06:6c:89:4c:fa:5a:d5:0d:b9:bc:61:e6:
64:9c:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:25 2025 by rpki-client