Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/49DuXdC885Azk0UWzfxhRpHdiSc.roa
File: 49DuXdC885Azk0UWzfxhRpHdiSc.roa (raw, json)
Hash identifier: k7RjnUDEXvd71JVQqoX508nyP9NFZUsuZGrEYlVwV9A=
Subject key identifier: E3:D0:EE:5D:D0:BC:F3:90:33:93:45:16:CD:FC:61:46:91:DD:89:27
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 0188B9C51FE2E4DEBE45E97C470763C6AD33
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/49DuXdC885Azk0UWzfxhRpHdiSc.roa
Signing time: Wed 14 Jun 2023 11:58:03 +0000
ROA not before: Wed 14 Jun 2023 11:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/23 maxlen: 24
46.228.128.0/24 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/24 maxlen: 24
46.228.135.0/24 maxlen: 24
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:c5:1f:e2:e4:de:be:45:e9:7c:47:07:63:c6:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 14 11:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3d0ee5dd0bcf39033934516cdfc614691dd8927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7b:f2:43:16:0d:b0:d2:7f:d2:e6:17:50:30:
23:e2:be:19:5a:a6:53:29:42:ae:93:8a:1e:70:d2:
3e:5c:29:f0:1d:18:44:91:a3:7b:62:61:e9:19:3e:
05:c2:2e:c5:a5:59:3f:a4:11:e5:a9:69:ad:b1:dc:
c6:1f:18:43:cc:c1:11:c3:56:d4:c5:4d:90:91:b7:
d1:a1:e3:d8:e4:3e:b7:42:0f:b5:87:91:fe:95:26:
cc:45:fa:e8:4b:11:d0:6d:38:d8:20:27:38:f4:cc:
06:67:16:5a:71:31:14:5a:e9:1a:af:60:49:a6:da:
df:14:1a:c4:94:8f:a7:11:f9:53:d8:22:d9:1d:25:
02:a3:5b:0a:6d:12:2f:aa:d9:dc:f5:3e:95:3b:cb:
79:71:6b:59:d1:a7:f6:04:89:37:4f:74:dc:bb:89:
21:8d:32:c6:40:f8:97:6c:09:b2:cf:b9:89:f6:bc:
c1:3d:89:ce:ea:30:12:00:e2:e5:5d:5a:95:f9:e4:
22:49:a7:7e:c8:df:d0:74:6b:da:d6:14:9e:55:dc:
ba:bb:4c:a3:89:3e:ce:8b:9c:9c:18:9a:42:af:90:
0b:de:63:9b:e9:97:2f:21:65:ca:00:7b:7d:50:30:
98:dc:e4:ed:f1:22:20:e1:31:88:58:25:de:4c:f7:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:EE:5D:D0:BC:F3:90:33:93:45:16:CD:FC:61:46:91:DD:89:27
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/49DuXdC885Azk0UWzfxhRpHdiSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
67:92:bd:4f:67:10:df:fd:5f:fa:3d:a7:dd:ff:1c:79:d5:d2:
1e:c1:96:63:e1:da:d3:32:9a:0f:8a:96:b5:43:7b:ef:da:5d:
ba:85:47:b5:81:66:0b:20:1d:3e:99:4a:b4:27:ba:ac:83:e7:
de:9b:f1:fb:3a:39:81:c7:7a:ff:9e:5f:ba:26:11:a3:7f:3e:
6d:0b:c4:12:de:90:bb:34:83:7e:72:73:d1:c5:01:94:2c:b9:
b7:8e:85:f7:e2:78:d8:c4:c7:54:5c:f2:59:92:11:99:99:0c:
47:da:66:4c:48:92:bd:f5:03:a9:c3:02:f5:ce:2c:32:47:94:
80:a0:c2:d0:83:3c:d0:23:10:fd:a8:05:6b:00:c5:7c:8f:17:
2b:81:a1:fa:de:24:ad:4e:17:9e:71:90:88:eb:3c:13:87:d0:
8c:fb:1d:79:94:c6:fa:ca:43:19:32:77:e3:73:b8:7b:14:7a:
d5:59:57:74:95:7e:92:2c:36:03:60:38:3c:18:88:03:0e:38:
eb:e3:16:e3:bf:c4:6b:ed:d5:84:fc:a3:22:8f:65:de:86:ef:
ff:6c:22:1e:6c:db:cb:18:b0:6e:08:31:05:7f:19:88:95:15:
77:6c:48:0b:c6:45:71:77:a5:1d:48:f0:92:12:84:4c:c5:58:
c5:b5:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org