Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/erNshJvyf37NiqmDIxPydqKusoQ.roa
File: erNshJvyf37NiqmDIxPydqKusoQ.roa (raw, json)
Hash identifier: LmTvHHPmv4/EqE5cfftuSa70MfwwFxLx21Uk4RKp/Tg=
Subject key identifier: 7A:B3:6C:84:9B:F2:7F:7E:CD:8A:A9:83:23:13:F2:76:A2:AE:B2:84
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018D6658DD045439746174B4E683A7925DF8
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/erNshJvyf37NiqmDIxPydqKusoQ.roa
Signing time: Thu 01 Feb 2024 20:25:16 +0000
ROA not before: Thu 01 Feb 2024 20:25:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.8.0/22 maxlen: 24
46.3.28.0/23 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/21 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 07:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:66:58:dd:04:54:39:74:61:74:b4:e6:83:a7:92:5d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 1 20:25:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ab36c849bf27f7ecd8aa9832313f276a2aeb284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bf:ed:3d:51:f2:cc:d1:00:40:74:f6:28:2f:
71:ff:f8:19:0b:23:c6:28:e0:2b:a4:04:90:73:9f:
f5:84:02:71:08:e5:42:85:ef:a5:df:9a:24:69:0a:
be:2d:a5:86:8c:6b:71:6d:e9:35:1b:fd:b5:85:0a:
4f:5d:cb:20:19:59:b9:fe:f8:11:85:21:33:87:1c:
7c:6f:ce:9d:08:b2:e8:f1:bb:b4:57:cf:06:08:cd:
ba:38:ec:83:3e:02:04:42:ed:80:68:c8:03:05:f0:
4d:34:7e:22:9b:42:a7:3d:75:bb:ab:03:94:d3:cd:
b5:1c:a4:87:8f:0c:3d:35:ac:b9:e0:bc:38:c6:7a:
9f:78:3d:4e:96:9c:d8:13:0f:03:ae:e3:8c:67:06:
08:38:20:0a:55:69:60:9b:aa:17:a1:24:fd:61:05:
5e:fa:5e:60:17:b1:49:a4:0c:ca:2f:4e:e1:76:bd:
b1:41:47:6d:29:e7:31:59:8f:6f:c9:d9:3a:db:df:
06:1f:a1:4b:8d:9a:e5:93:a2:3a:cc:d5:24:6a:4f:
55:2f:4c:e3:1d:50:d8:60:5e:15:2e:7f:42:fb:f5:
59:70:4f:46:47:44:9d:0e:8b:5d:b0:d6:52:a0:c9:
01:c3:23:e8:c8:1d:3b:6d:b7:86:c8:f3:5c:1d:11:
3a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B3:6C:84:9B:F2:7F:7E:CD:8A:A9:83:23:13:F2:76:A2:AE:B2:84
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/erNshJvyf37NiqmDIxPydqKusoQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.28.0/23
46.3.80.0/22
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/21
46.3.206.0-46.3.215.255
46.3.228.0/23
46.3.236.0/23
46.3.243.0-46.3.247.255
46.3.249.0/24
46.232.0.0/22
46.232.16.0/22
46.232.64.0/21
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
5c:6a:d3:00:3c:c8:eb:5f:d5:4a:42:21:c9:63:c1:79:37:0a:
a8:36:28:1b:96:91:ed:08:a5:69:d0:78:77:b9:ac:df:b9:79:
58:7d:4a:f1:46:26:80:dc:60:0b:cd:be:5c:2f:92:0f:27:bf:
43:e2:42:d1:a4:34:c3:5a:37:92:cd:8b:d3:90:f1:9a:ef:60:
b1:aa:0a:1f:4f:bd:e6:ed:ea:ec:b5:29:f7:c3:eb:a4:bb:69:
0e:2f:06:68:b5:04:f3:8f:37:94:2c:fe:ca:7d:5a:30:31:c7:
64:e5:58:14:b4:6f:b4:36:62:60:bc:6a:b4:ae:69:bd:0f:6d:
df:ed:8f:52:93:14:03:05:dd:ec:c2:fb:23:89:41:22:04:b6:
5a:03:0c:c6:8c:a9:01:75:ab:61:8c:38:ab:01:80:fc:1f:ae:
98:70:c3:2f:35:81:9f:bb:59:fc:ca:09:da:ff:96:0b:bd:b4:
20:af:28:ec:38:c4:c8:1e:62:97:4b:cb:70:e9:05:b2:de:9a:
82:db:80:49:ea:6e:52:37:e2:f8:ce:48:8d:b0:b1:d1:15:74:
18:b0:a4:6b:c8:1c:92:d9:91:87:68:ad:ed:7a:1c:5d:6e:bc:
0e:e9:bf:8b:92:5c:41:14:45:6e:9f:4d:a4:45:dd:6b:1a:60:
ef:20:4b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:58 2025 by rpki-client