Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-jj1kKmz6LZnNy2gidPq5-Slixw.roa
File: 1-jj1kKmz6LZnNy2gidPq5-Slixw.roa (raw, json)
Hash identifier: WZv2PooV4D1mRTV65ABtf7gM8lScAFTyyGnv+Kk51I4=
Subject key identifier: FA:38:F5:90:A9:B3:E8:B6:67:37:2D:A0:89:D3:EA:E7:E4:A5:8B:1C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01881B500631D093088E487866F99E36E9A4
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-jj1kKmz6LZnNy2gidPq5-Slixw.roa
Signing time: Sun 14 May 2023 17:30:09 +0000
ROA not before: Sun 14 May 2023 17:30:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1b:50:06:31:d0:93:08:8e:48:78:66:f9:9e:36:e9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 14 17:30:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa38f590a9b3e8b667372da089d3eae7e4a58b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:9b:bc:fa:6d:65:b0:6f:f4:7b:1a:9f:e5:
14:ac:f4:e4:fd:b8:fc:7f:23:63:f0:b8:6b:de:c7:
21:c9:73:35:2f:a7:65:b7:60:ce:b6:4c:b4:d0:6e:
36:4f:fa:53:17:e6:20:ce:d6:4c:14:25:4a:e3:9b:
24:23:db:92:3a:b3:91:ac:65:79:01:ad:d2:f4:f2:
77:f7:42:3f:17:07:2c:f0:e4:45:3a:50:a4:c4:b7:
4e:d2:c6:4f:90:b6:4e:1f:f4:08:00:27:36:30:2b:
f6:d6:fd:40:d0:56:50:cf:42:4c:cc:47:8a:37:77:
d3:ec:30:35:19:da:97:2a:a3:75:bb:c7:a5:e7:ab:
f8:a5:49:c9:c2:70:05:04:22:d9:d7:6a:e0:a8:f1:
45:e6:5b:ec:b2:8c:c9:93:a6:45:1a:49:62:9a:ab:
65:fc:ec:4f:c2:13:f4:fa:0e:24:0e:e9:6d:49:da:
38:26:30:9c:85:21:3b:aa:cf:c4:80:58:17:4d:4b:
56:0a:bd:6a:49:9b:ad:0f:57:ce:dd:52:90:a8:5a:
3d:1d:e2:61:51:39:83:5d:f7:29:07:fc:1c:84:e9:
8f:56:4d:8f:d0:36:50:c7:6a:58:6b:b1:76:d3:d4:
f2:69:fc:df:20:ac:44:8f:8e:11:b9:15:70:2e:01:
ca:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:F5:90:A9:B3:E8:B6:67:37:2D:A0:89:D3:EA:E7:E4:A5:8B:1C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/1-jj1kKmz6LZnNy2gidPq5-Slixw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0/24
46.3.202.0/24
46.3.245.0-46.3.246.255
46.3.250.0/24
46.3.252.0/24
46.232.64.0-46.232.72.255
Signature Algorithm: sha256WithRSAEncryption
85:eb:aa:b8:dc:5e:44:04:cf:1a:ef:bf:8f:4d:88:39:11:35:
d5:07:ee:60:f7:e4:de:ac:95:51:d6:7e:c8:2d:b7:1c:b9:d1:
14:a6:9c:ea:7a:54:9f:24:d8:dd:9d:53:5a:cd:4b:1e:15:de:
38:89:37:35:c9:d5:ad:27:fa:71:c7:9b:11:c9:d0:96:62:f4:
58:37:c5:67:01:40:b0:ff:f1:65:ac:fd:f0:a4:21:9b:b2:8b:
65:42:f0:43:52:f7:a7:fc:6c:8d:a4:8d:4e:d2:fa:b1:45:fe:
ad:4a:86:0c:bb:1f:f4:98:d5:3c:a6:df:a2:50:3d:65:ec:66:
bf:3c:90:75:70:73:97:95:06:f4:04:37:84:76:6f:8f:3e:56:
b3:24:78:22:77:5d:97:eb:d1:52:f5:29:ab:5e:6e:83:85:da:
5e:18:3a:da:86:52:ff:ff:4b:22:ff:71:23:0f:91:84:2c:e1:
a0:ca:58:05:ea:fb:f9:56:46:e0:74:18:4c:af:9b:7e:38:90:
fa:54:fe:62:f6:11:74:e0:1c:19:fd:63:e3:0a:c6:b9:c3:dd:
99:3b:af:4a:19:1c:af:96:b4:5b:d6:e5:1b:06:25:b6:d9:ec:
0c:da:6a:5e:87:81:05:fd:4d:f9:d0:d0:da:76:cb:a5:a8:a7:
d1:18:d4:ff
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAYgbUAYx0JMIjkh4ZvmeNumkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNTE0MTczMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTM4ZjU5MGE5YjNlOGI2NjczNzJkYTA4OWQzZWFlN2U0YTU4YjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vWbvPptZbBv9Hsan+UUrPTk/bj8
fyNj8Lhr3schyXM1L6dlt2DOtky00G42T/pTF+YgztZMFCVK45skI9uSOrORrGV5
Aa3S9PJ390I/Fwcs8ORFOlCkxLdO0sZPkLZOH/QIACc2MCv21v1A0FZQz0JMzEeK
N3fT7DA1GdqXKqN1u8el56v4pUnJwnAFBCLZ12rgqPFF5lvssozJk6ZFGklimqtl
/OxPwhP0+g4kDultSdo4JjCchSE7qs/EgFgXTUtWCr1qSZutD1fO3VKQqFo9HeJh
UTmDXfcpB/wchOmPVk2P0DZQx2pYa7F209TyafzfIKxEj44RuRVwLgHKfwIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFPo49ZCps+i2ZzctoInT6ufkpYscMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvMS1qajFrS216Nkxabk55MmdpZFBxNS1TbGl4dy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTYvNjIyOTgxLTk2NTAtNDI3MS05MmNhLTdjZmVmNDI3NmEw
Zi8xL1ZZanhsX2wtaVFCMVZVVG9FTTNlLWRrUHZFRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBlBggrBgEFBQcBBwEB/wRWMFQwUgQCAAEwTAMEAi4DWAME
AC4DZQMEAi4DoAMEAy4DuAMEAC4DyAMEAC4DyjAMAwQALgP1AwQALgP2AwQALgP6
AwQALgP8MAwDBAYu6EADBAAu6EgwDQYJKoZIhvcNAQELBQADggEBAIXrqrjcXkQE
zxrvv49NiDkRNdUH7mD35N6slVHWfsgttxy50RSmnOp6VJ8k2N2dU1rNSx4V3jiJ
NzXJ1a0n+nHHmxHJ0JZi9Fg3xWcBQLD/8WWs/fCkIZuyi2VC8ENS96f8bI2kjU7S
+rFF/q1Khgy7H/SY1Tym36JQPWXsZr88kHVwc5eVBvQEN4R2b48+VrMkeCJ3XZfr
0VL1KateboOF2l4YOtqGUv//SyL/cSMPkYQs4aDKWAXq+/lWRuB0GEyvm344kPpU
/mL2EXTgHBn9Y+MKxrnD3Zk7r0oZHK+WtFvW5RsGJbbZ7Azaal6HgQX9TfnQ0Np2
y6Wop9EY1P8=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org