Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-h2sz1HCOx0YYoleke5JYIRNjvc.roa
File: 1-h2sz1HCOx0YYoleke5JYIRNjvc.roa (raw, json)
Hash identifier: V2VMNOvG+1v1D7N2AJof0AVGBZcXj7m29JxLFKqf5nY=
Subject key identifier: FA:1D:AC:CF:51:C2:3B:1D:18:62:89:5E:91:EE:49:60:84:4D:8E:F7
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CD989091E24665E8FAC2FF0C1CB791C1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-h2sz1HCOx0YYoleke5JYIRNjvc.roa
Signing time: Fri 10 Mar 2023 22:16:13 +0000
ROA not before: Fri 10 Mar 2023 22:16:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 46.3.168.0/22 maxlen: 22
46.3.172.0/22 maxlen: 22
46.3.176.0/22 maxlen: 22
46.3.180.0/22 maxlen: 22
46.3.184.0/22 maxlen: 22
46.3.192.0/22 maxlen: 22
46.3.192.0/23 maxlen: 23
46.3.196.0/22 maxlen: 22
80.243.128.0/22 maxlen: 22
80.243.136.0/23 maxlen: 23
46.3.140.0/22 maxlen: 22
80.243.140.0/23 maxlen: 23
46.232.2.0/23 maxlen: 23
46.232.4.0/22 maxlen: 22
46.3.206.0/23 maxlen: 23
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 23
149.126.216.0/22 maxlen: 22
149.126.220.0/22 maxlen: 22
149.126.232.0/22 maxlen: 22
149.126.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:98:90:91:e2:46:65:e8:fa:c2:ff:0c:1c:b7:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:16:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1daccf51c23b1d1862895e91ee4960844d8ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ea:2d:72:31:54:80:6e:59:48:4d:c1:e4:50:
13:8b:84:0f:72:bd:aa:3f:08:cc:be:79:5d:c3:70:
03:ba:f3:cf:ff:f6:ea:ca:d6:07:43:73:02:b5:5e:
de:f3:ad:65:03:9b:e5:e0:55:26:e1:8f:a2:ad:b3:
d5:4a:86:ef:ba:75:51:13:7e:69:e8:46:a3:92:ba:
7e:33:ef:eb:64:0f:07:93:2c:8b:97:6c:99:36:f5:
a7:d1:fb:9c:06:ce:38:59:89:c2:cd:4d:5a:a8:1e:
31:7d:e1:a7:6d:f0:44:48:7c:a3:5b:77:4b:0b:ca:
d1:17:2c:9b:a8:71:3f:d5:bf:67:e7:75:d5:58:3f:
21:66:4c:5a:2e:85:ad:fd:aa:01:9f:36:28:32:84:
83:e9:35:f9:2a:af:2c:cb:5b:da:16:38:7d:bb:d6:
f2:06:ae:53:51:75:50:af:43:d2:32:dd:94:13:3b:
74:a3:7f:f8:e3:c8:22:41:84:31:40:1c:68:e4:48:
27:e0:84:4e:d1:6e:19:4d:bf:d4:e7:f3:ce:3e:8d:
22:b6:8d:6e:44:57:91:92:66:27:a7:13:80:d6:bd:
2d:77:c0:fc:08:2c:9b:b0:c1:85:8a:7d:8e:de:94:
76:47:f5:95:9a:d5:be:de:0c:25:09:23:f4:4d:02:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1D:AC:CF:51:C2:3B:1D:18:62:89:5E:91:EE:49:60:84:4D:8E:F7
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-h2sz1HCOx0YYoleke5JYIRNjvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.140.0/22
46.3.168.0-46.3.187.255
46.3.192.0/21
46.3.206.0/23
46.3.223.0/24
46.3.228.0/23
46.232.2.0-46.232.7.255
80.243.128.0/22
80.243.136.0/23
80.243.140.0/23
149.126.216.0/21
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:3d:00:f3:4a:e4:28:d6:fe:45:c9:1e:ef:33:96:66:f4:28:
a7:ae:5f:05:2d:bd:f3:b3:bd:d8:a1:bb:c8:ce:a5:16:f3:c2:
6a:cc:16:13:51:a4:d1:7d:61:30:69:6e:62:22:38:c7:4b:e5:
9d:01:7e:3f:77:c7:81:90:f9:14:ef:ae:6a:dd:da:dd:5f:32:
db:da:50:36:e1:32:73:0b:3f:1b:34:dc:71:e8:22:de:21:e4:
81:64:15:b8:b8:c6:bf:c4:40:81:22:d7:48:ac:b2:2e:59:29:
ee:a8:6f:69:ba:1e:8d:79:65:8e:8b:c6:fd:5a:1f:bc:0a:1a:
14:f6:7d:07:30:53:38:9b:c5:7a:f7:a1:0a:f8:d7:14:8f:71:
00:52:d7:b8:9e:17:58:a1:75:50:53:06:7c:67:a2:4f:13:34:
fb:ae:ab:58:fb:5a:f4:89:13:62:ac:af:b0:6b:aa:b8:33:29:
aa:03:38:62:05:d3:9d:f9:47:87:55:d3:97:98:d1:31:08:a4:
2e:90:55:d9:76:bc:37:b7:c6:c6:1e:00:7f:28:09:2d:6f:aa:
6b:bc:08:85:6e:b9:48:88:c8:35:a0:6f:e5:bf:f4:a9:b5:b1:
89:b4:a3:68:f0:bc:7e:d4:49:72:c8:46:8b:3e:26:f4:80:1d:
e4:c7:4b:39
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 20 21:33:08 2023 by rpki-client on console-fra.rpki-client.org