Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jROCQE-wXLsKxk4WHD7p4NNb_yg.roa
File: jROCQE-wXLsKxk4WHD7p4NNb_yg.roa (raw, json)
Hash identifier: WXJpQamISpeNu3UhLEqLBMdxoBWgDVhGpFKSpR6KVLU=
Subject key identifier: 8D:13:82:40:4F:B0:5C:BB:0A:C6:4E:16:1C:3E:E9:E0:D3:5B:FF:28
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018EB3C8A2ABE30FDEFC9982B16177FA5EDA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jROCQE-wXLsKxk4WHD7p4NNb_yg.roa
Signing time: Sat 06 Apr 2024 14:20:54 +0000
ROA not before: Sat 06 Apr 2024 14:20:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.8.0/23 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.80.0/21 maxlen: 21
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/23 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.232.64.0/21 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 10:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b3:c8:a2:ab:e3:0f:de:fc:99:82:b1:61:77:fa:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Apr 6 14:20:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d1382404fb05cbb0ac64e161c3ee9e0d35bff28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:a5:8a:6c:82:e7:a2:a0:4a:b7:d9:68:46:
24:85:a5:81:44:d8:c3:8d:58:a5:ed:00:89:5d:57:
38:89:3b:17:c1:cc:fb:48:b7:37:d0:52:2b:c2:0f:
bd:c7:5b:27:38:58:67:0a:7f:a0:3d:ae:f1:eb:6c:
f5:d2:3d:f6:35:5b:eb:57:f7:1c:21:a4:b0:0c:ff:
7a:9c:d6:db:68:24:66:78:48:d3:5d:c5:4a:09:b4:
4c:ee:31:39:c3:d4:1d:a1:59:8f:5b:bc:b3:b9:86:
c2:fc:b8:13:6c:21:62:a4:51:bd:1e:2c:e3:22:8e:
ad:dc:6b:35:35:d5:d6:cf:64:45:03:34:41:b0:bb:
4c:27:d8:94:61:72:fd:ac:22:6f:72:7d:ec:4b:58:
18:ca:3a:0f:11:cb:4a:a9:10:83:8b:2c:04:43:5a:
cf:53:58:26:bc:5b:9d:6b:e8:d2:1c:42:07:f8:6e:
64:c5:ce:9a:6b:04:25:bc:24:8c:7c:03:ed:24:15:
e9:dd:1d:c7:fd:ee:dc:37:35:00:b5:54:f4:b4:55:
97:71:fd:05:7b:49:da:27:8d:5c:4d:10:bc:b7:47:
5a:e3:ed:3a:38:82:2e:4f:07:93:9b:28:56:6c:b2:
15:94:e9:51:25:42:b3:6e:8c:7c:3f:e4:e2:10:41:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:13:82:40:4F:B0:5C:BB:0A:C6:4E:16:1C:3E:E9:E0:D3:5B:FF:28
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jROCQE-wXLsKxk4WHD7p4NNb_yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/23
46.3.32.0/20
46.3.80.0/21
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/23
46.3.188.0/22
46.3.206.0-46.3.231.255
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.232.64.0/21
46.232.118.0/23
46.232.124.0/22
149.126.193.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
2d:7d:3b:19:d2:70:17:90:81:2c:f2:46:52:f1:48:92:7a:2b:
f9:47:a1:06:6b:7e:e2:52:e8:09:78:4b:e3:24:6e:57:d0:88:
b4:31:63:b0:c1:2f:18:32:8c:2b:43:0c:b2:3d:8b:fb:d0:d4:
1e:ae:3c:d3:2a:3f:f3:13:7f:88:00:f9:b5:06:5a:b1:0d:2a:
c4:1b:70:80:49:36:da:37:60:05:a8:c4:0c:a4:51:9b:df:9b:
2e:a6:bb:b9:77:43:5a:4b:09:81:80:d5:5e:4b:d9:78:d8:b1:
22:06:5a:1c:c2:5f:e2:3b:bd:ea:1e:2f:65:20:07:03:62:f2:
94:2b:4e:db:6d:fe:dc:32:b0:b4:0a:e9:86:85:89:75:fc:85:
d0:3b:02:6e:b5:d1:f7:98:4d:3f:4a:0a:48:40:f5:6a:a9:af:
21:03:b1:09:20:4b:e5:76:ec:5d:0f:8d:3c:ff:ee:82:0c:8a:
0b:ef:f1:3a:b2:16:3d:d4:06:67:9c:94:2b:c0:67:8b:fa:86:
37:c6:17:8e:f0:d7:b6:64:e9:fb:9f:00:25:4b:2a:07:e7:2a:
46:85:41:0e:af:9a:89:2e:76:73:02:fa:dc:fb:1f:02:66:32:
f9:3e:ee:ac:cf:e5:4b:e5:c8:3b:65:6f:dd:8d:27:d9:8f:e7:
7f:ef:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:57 2025 by rpki-client