Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2O5wX1Hq9ERL9fw1LZsvrG85E_Y.roa
File: 2O5wX1Hq9ERL9fw1LZsvrG85E_Y.roa (raw, json)
Hash identifier: QWWG03j2V2IAW14+J4OetFWsFA9bxAStjYPlQ2ERAi8=
Subject key identifier: D8:EE:70:5F:51:EA:F4:44:4B:F5:FC:35:2D:9B:2F:AC:6F:39:13:F6
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6DD5D343A62D0D70899487CDAED7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2O5wX1Hq9ERL9fw1LZsvrG85E_Y.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.232.91.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.26.0/23 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.17.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.28.0/22 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6d:d5:d3:43:a6:2d:0d:70:89:94:87:cd:ae:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8ee705f51eaf4444bf5fc352d9b2fac6f3913f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:73:52:e1:c6:5c:9f:89:1a:29:d5:8e:39:fb:
ef:f5:68:c5:7d:33:dc:cc:45:11:73:19:e1:75:5b:
bc:0b:0c:ce:67:c0:ce:51:63:2a:00:9e:e9:bc:59:
8d:c8:57:2b:2c:52:b3:51:91:57:76:cb:15:a8:10:
95:f7:5b:3c:e2:c5:57:47:46:3a:87:76:48:97:39:
6d:7e:9f:f4:69:f5:35:1c:b9:e2:2e:56:6e:be:7b:
1c:79:f2:65:57:7f:7f:e0:a3:45:3d:92:e9:36:32:
99:0a:fc:d3:7d:53:72:aa:1b:08:cd:cf:3e:7b:54:
c9:01:cf:ec:17:27:a9:af:66:78:ea:d4:82:bb:70:
01:1f:4f:40:ab:dd:e0:1c:05:d1:ef:60:83:aa:a7:
b5:1d:06:3f:dd:b9:f2:61:ce:ca:33:38:70:b6:3e:
9e:6c:4f:0d:39:78:99:59:7b:18:47:20:29:0f:4d:
a9:20:e1:8a:16:cf:2e:c1:51:f7:89:83:cf:b1:f7:
9d:cc:c9:46:b1:59:2e:58:ab:56:31:5e:7a:5a:02:
69:fd:2c:6d:97:16:7d:5a:34:92:0e:8d:f3:4f:c0:
a8:e0:7b:96:63:44:22:82:32:76:53:95:34:72:1b:
15:2a:52:b7:83:37:61:c9:0f:f3:89:c7:1f:b0:21:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:70:5F:51:EA:F4:44:4B:F5:FC:35:2D:9B:2F:AC:6F:39:13:F6
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/2O5wX1Hq9ERL9fw1LZsvrG85E_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0-46.3.76.255
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.26.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7e:14:b7:de:94:fc:4a:49:a7:e6:63:42:46:c0:b8:db:f0:
c6:3a:d9:13:a8:94:66:de:aa:1e:1c:bf:1a:c9:cc:3c:41:38:
fc:4d:0a:94:68:6f:ad:16:4a:6c:02:9f:11:9b:c1:1b:a4:34:
7e:5b:ab:77:5d:4f:a6:d7:0a:2f:bb:d0:65:70:c4:10:a5:1e:
0f:19:f6:ef:95:ab:35:e5:0c:bc:37:c1:c7:aa:0d:d7:d8:58:
af:98:d8:b7:d2:b2:14:13:58:ab:a4:62:fd:fa:28:fd:d0:6d:
41:d3:ea:68:5f:ef:32:91:9b:8a:ff:7b:c4:5c:ca:79:bb:cc:
af:5d:8e:79:71:b7:46:55:4a:b0:a5:33:ef:1a:72:b7:af:fa:
76:e2:43:3e:a0:a7:17:3a:63:00:9c:dd:18:9d:67:bb:11:14:
6a:66:02:c8:86:a4:7e:50:84:df:a8:22:3d:a9:9b:59:93:b8:
8b:b9:6e:ce:f2:59:3c:5b:28:8d:f8:cc:47:01:dd:c3:17:64:
83:ed:51:3a:57:2a:7c:60:85:44:be:f8:41:b1:cb:77:7b:b7:
45:61:03:a9:29:5f:7b:48:ed:8e:c6:1e:f1:e6:cc:5c:4b:88:
de:24:e6:c2:39:5e:a4:48:5d:57:ee:4a:60:a7:e3:2b:c4:41:
f0:52:8f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 16:00:14 2024 by rpki-client on console-ams.rpki-client.org