Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/05llg2YfoLw81d-soscI8v_Sfo0.roa
File: 05llg2YfoLw81d-soscI8v_Sfo0.roa (raw, json)
Hash identifier: OAyAddQbevPYChNjCweqVF2jgFI3ND6+Eu2091sQbw0=
Subject key identifier: D3:99:65:83:66:1F:A0:BC:3C:D5:DF:AC:A2:C7:08:F2:FF:D2:7E:8D
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E1F9CC17BA03F04954435B6F7F039267A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/05llg2YfoLw81d-soscI8v_Sfo0.roa
Signing time: Fri 08 Mar 2024 19:49:10 +0000
ROA not before: Fri 08 Mar 2024 19:49:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 46.3.8.0/22 maxlen: 22
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Mar 2024 19:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1f:9c:c1:7b:a0:3f:04:95:44:35:b6:f7:f0:39:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 8 19:49:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3996583661fa0bc3cd5dfaca2c708f2ffd27e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:87:56:a9:17:f0:05:cd:d4:1f:f4:9c:0c:
32:f6:2b:fe:0f:eb:17:5f:b8:48:1d:89:a4:12:5f:
e2:68:7a:7e:08:76:90:67:d6:a0:8a:f5:12:e9:44:
e9:f3:9a:eb:c2:54:60:0a:e9:0d:ae:c8:2d:6d:ed:
53:74:74:dc:b7:3b:68:13:c5:37:a2:e5:bb:d9:5d:
d8:1c:e1:fe:2f:32:9f:7f:b1:6d:06:35:59:7e:54:
57:d6:20:6c:79:13:c9:96:c0:f6:04:36:d8:26:49:
d6:a1:75:8d:dd:b3:86:dd:ca:69:5f:5b:35:11:01:
f2:a2:ab:63:7d:d0:fd:bb:9e:0c:b9:f0:75:aa:7e:
b9:0e:c7:45:9e:6e:0b:af:fe:c0:1a:2c:51:03:89:
51:91:ca:04:a5:84:50:c5:62:33:02:39:8b:5f:5b:
5a:22:dc:d2:f7:23:c1:06:74:7f:12:07:19:34:eb:
45:fb:2f:d5:49:f6:cf:43:30:0d:68:1a:21:14:0d:
4c:18:7f:80:f1:22:36:00:88:7c:7d:41:36:e4:48:
e6:b9:40:25:d2:01:0b:4c:f6:a7:45:42:b5:3f:89:
bd:6a:dc:27:f8:5a:73:40:67:13:61:64:0d:8b:fe:
ed:ae:87:aa:fc:02:71:70:98:e6:73:e1:3c:3c:e8:
e4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:99:65:83:66:1F:A0:BC:3C:D5:DF:AC:A2:C7:08:F2:FF:D2:7E:8D
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/05llg2YfoLw81d-soscI8v_Sfo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/24
46.3.160.0/22
46.3.184.0-46.3.188.255
46.3.201.0/24
46.3.206.0-46.3.215.255
46.3.228.0/23
46.3.236.0/23
46.3.243.0-46.3.244.255
46.3.246.0/24
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
46.232.64.0-46.232.66.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ab:b7:cc:b5:5e:1a:a9:5a:93:7c:21:75:49:70:d7:48:ba:
79:a5:9a:75:ce:e1:b8:60:ce:5c:f8:e2:6c:d7:cf:8a:7b:9c:
eb:85:42:95:c5:08:c0:3b:09:d3:71:e1:4a:a1:1a:d8:24:28:
a4:b6:3e:40:96:d0:23:15:da:8b:60:98:7a:69:a9:9a:6e:7b:
74:f9:77:42:94:02:ac:58:c0:fd:74:a0:50:41:0e:6f:62:d5:
82:8b:2e:57:82:e7:4f:42:8b:a3:84:f5:74:ae:89:81:49:92:
a5:a1:82:c2:0d:0f:fa:01:10:a3:f6:fb:f7:f3:c0:70:27:74:
a1:5d:97:c1:a6:a3:66:d6:9e:97:55:2f:84:49:aa:42:55:a1:
d9:91:a2:dd:e4:0d:3c:17:16:74:9d:67:01:e3:1e:89:5f:1e:
14:50:58:65:c6:3e:a6:68:21:32:c8:6c:b5:20:b7:9a:c4:dd:
25:28:00:7c:b5:30:e7:c3:2b:39:02:4c:8a:bc:14:6b:2e:3e:
85:a9:03:68:9f:ae:05:30:50:ff:9d:aa:d7:89:3e:91:47:37:
ff:a8:0e:e7:01:bf:3d:0b:2d:2e:b6:88:89:50:6b:d6:c7:7d:
dc:54:aa:d5:e6:25:fe:b3:ed:6f:c0:24:37:0a:8f:ff:e8:aa:
df:19:2e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 22:22:50 2024 by rpki-client on console-ams.rpki-client.org