Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/22rKzcsMVi_P2Iq6IDOttjAlDtY.roa
File: 22rKzcsMVi_P2Iq6IDOttjAlDtY.roa (raw, json)
Hash identifier: i8Hz8RxlNPk5LppqLA6a38MMeiWSQq/tzC0eDQKrW9k=
Subject key identifier: DB:6A:CA:CD:CB:0C:56:2F:CF:D8:8A:BA:20:33:AD:B6:30:25:0E:D6
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719565759B617871E3890CFEF40111B0
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/22rKzcsMVi_P2Iq6IDOttjAlDtY.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.48.0/20 maxlen: 20
46.232.64.0/21 maxlen: 24
46.3.64.0/22 maxlen: 24
46.232.80.0/20 maxlen: 20
46.3.68.0/22 maxlen: 24
46.3.80.0/21 maxlen: 21
46.3.4.0/22 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.16.0/22 maxlen: 24
46.232.32.0/20 maxlen: 20
46.3.24.0/22 maxlen: 24
46.3.32.0/20 maxlen: 20
46.3.157.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.92.0/22 maxlen: 24
46.3.96.0/20 maxlen: 20
46.3.120.0/21 maxlen: 21
46.3.135.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.224.0/22 maxlen: 24
149.126.215.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:65:75:9b:61:78:71:e3:89:0c:fe:f4:01:11:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db6acacdcb0c562fcfd88aba2033adb630250ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:68:2f:89:ad:aa:2e:92:35:94:e4:98:29:
7e:a8:ee:51:40:06:4b:ec:f6:d4:14:36:7e:94:70:
89:e9:9d:00:0b:99:ae:c8:de:f2:2e:71:f3:da:84:
b1:c4:d5:d3:75:67:f6:6a:39:1b:cb:67:cf:29:d9:
03:cc:44:46:44:95:53:e5:bc:e0:5a:e8:a3:d3:1e:
3d:f2:dc:39:ee:1a:b2:9e:d4:f9:78:5d:6b:81:ee:
a7:66:70:4d:74:16:d2:33:25:84:83:87:4a:f2:fa:
35:46:9b:4b:04:9d:8d:36:ad:d4:09:44:3d:57:ff:
7c:a0:b4:36:72:a8:b1:d9:b2:3d:29:7b:9b:6e:95:
f4:14:ee:91:f0:32:9e:f0:1b:42:74:a0:0b:e0:52:
f7:1a:e7:6b:ba:c8:06:61:4e:98:61:48:f2:f0:a0:
7c:70:95:1f:24:09:a8:ce:35:f9:a0:b2:71:ee:bf:
b0:00:2d:4a:45:73:d0:87:0c:55:6d:a9:81:13:c3:
76:0e:71:07:47:61:b2:82:50:7e:56:00:5b:1d:c9:
98:2d:32:31:e7:81:a0:6a:e6:bf:40:e6:ef:d0:20:
69:96:89:43:38:57:b4:a0:44:a3:cf:00:91:01:5c:
41:84:7d:54:b8:f9:3d:17:e3:6b:17:43:38:a4:67:
8a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:CA:CD:CB:0C:56:2F:CF:D8:8A:BA:20:33:AD:B6:30:25:0E:D6
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/22rKzcsMVi_P2Iq6IDOttjAlDtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.32.0-46.3.71.255
46.3.80.0/21
46.3.92.0-46.3.111.255
46.3.120.0/21
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.200.0/24
46.3.216.0-46.3.231.255
46.3.250.0/24
46.3.252.0/24
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
98:31:d7:28:68:e5:bc:23:f8:a5:03:d3:55:fb:05:ba:61:5d:
eb:39:e9:b4:43:e4:7a:fe:38:0d:b5:99:3b:08:fa:0b:d0:af:
5f:ce:75:27:82:f8:86:17:75:94:6c:70:8d:17:02:e0:b4:91:
27:7c:e3:00:57:73:d5:0a:e2:c6:68:9e:da:7c:71:14:9a:3d:
e3:7b:c4:d3:04:7c:87:29:e3:59:d2:a0:b7:92:59:47:a0:71:
7a:91:ae:ed:d9:54:e7:49:d1:34:b3:8f:ac:fa:69:f5:81:b6:
d8:b0:17:d6:01:e5:45:dd:bb:6d:45:1c:13:0e:a2:70:eb:71:
14:e4:cf:e9:25:02:43:64:fc:a0:93:e1:ab:30:a6:25:79:f6:
03:79:1a:b6:1d:b6:f0:f7:cc:c9:01:c9:d6:24:fd:0b:e9:08:
85:d3:c4:f6:19:f8:1b:bd:b5:a3:6c:ae:4a:96:60:09:ea:c4:
29:f8:f1:c8:e4:f9:78:94:47:6d:88:25:b5:fb:95:69:fa:a6:
25:22:39:a4:c4:40:eb:9e:0a:e4:06:c0:87:7d:b4:77:d1:47:
b3:3a:df:08:87:94:ef:b8:c0:a8:21:a1:0c:6d:f3:d0:d9:ba:
27:5b:73:37:7e:2b:af:b8:9e:d3:42:33:9e:4e:fc:04:01:2e:
76:66:1e:12
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgISAYVxlWV1m2F4ceOJDP70ARGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjZhY2FjZGNiMGM1NjJmY2ZkODhhYmEyMDMzYWRiNjMwMjUwZWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV5oL4mtqi6SNZTkmCl+qO5RQAZL
7PbUFDZ+lHCJ6Z0AC5muyN7yLnHz2oSxxNXTdWf2ajkby2fPKdkDzERGRJVT5bzg
Wuij0x498tw57hqyntT5eF1rge6nZnBNdBbSMyWEg4dK8vo1RptLBJ2NNq3UCUQ9
V/98oLQ2cqix2bI9KXubbpX0FO6R8DKe8BtCdKAL4FL3GudrusgGYU6YYUjy8KB8
cJUfJAmozjX5oLJx7r+wAC1KRXPQhwxVbamBE8N2DnEHR2GyglB+VgBbHcmYLTIx
54Ggaua/QObv0CBplolDOFe0oESjzwCRAVxBhH1UuPk9F+NrF0M4pGeKvwIDAQAB
o4ICszCCAq8wHQYDVR0OBBYEFNtqys3LDFYvz9iKuiAzrbYwJQ7WMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvMjJyS3pjc01WaV9QMklxNklET3R0akFsRHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHIBggrBgEFBQcBBwEB/wSBuDCBtTCBsgQCAAEwgasDBAIu
AwQDBAIuAxADBAIuAxgwDAMEBS4DIAMEAy4DQAMEAy4DUDAMAwQCLgNcAwQELgNg
AwQDLgN4AwQALgOHAwQBLgOcAwQCLgO8AwQALgPIMAwDBAMuA9gDBAMuA+ADBAAu
A/oDBAAuA/wwDAMEAy7oGAMEBC7oIAMEAy7oQAMEBC7oUAMEAJV+yAMEAJV+ywME
AJV+1wMEAJV++zALAwQAlX79AwMAlX4wDQYJKoZIhvcNAQELBQADggEBAJgx1yho
5bwj+KUD01X7BbphXes56bRD5Hr+OA21mTsI+gvQr1/OdSeC+IYXdZRscI0XAuC0
kSd84wBXc9UK4sZontp8cRSaPeN7xNMEfIcp41nSoLeSWUegcXqRru3ZVOdJ0TSz
j6z6afWBttiwF9YB5UXdu21FHBMOonDrcRTkz+klAkNk/KCT4aswpiV59gN5GrYd
tvD3zMkBydYk/QvpCIXTxPYZ+Bu9taNsrkqWYAnqxCn48cjk+XiUR22IJbX7lWn6
piUiOaTEQOueCuQGwId9tHfRR7M63wiHlO+4wKghoQxt89DZuidbczd+K6+4ntNC
M55O/AQBLnZmHhI=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org