Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3OoKICpRf8e3t2DmZAhO0zZ0RB4.roa
File: 3OoKICpRf8e3t2DmZAhO0zZ0RB4.roa (raw, json)
Hash identifier: 0OyM34XLJCI1EHiF7Ys8NhUEMBuFLMYMfP2NoSb5nB8=
Subject key identifier: DC:EA:0A:20:2A:51:7F:C7:B7:B7:60:E6:64:08:4E:D3:36:74:44:1E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01857C2CFFF8B72100974CE02718DA0644EE
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3OoKICpRf8e3t2DmZAhO0zZ0RB4.roa
Signing time: Wed 04 Jan 2023 09:46:41 +0000
ROA not before: Wed 04 Jan 2023 09:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.80.0/20 maxlen: 24
46.3.68.0/22 maxlen: 22
46.3.80.0/22 maxlen: 22
46.3.4.0/22 maxlen: 22
46.232.24.0/21 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.32.0/20 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.30.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.152.0/22 maxlen: 22
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
149.126.215.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:2c:ff:f8:b7:21:00:97:4c:e0:27:18:da:06:44:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 4 09:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcea0a202a517fc7b7b760e664084ed33674441e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:ba:f1:30:82:f8:08:aa:09:d8:36:d5:d4:
85:4a:84:51:8f:41:0e:35:b0:32:87:ee:03:11:b2:
d9:37:5b:d5:ac:43:22:a4:52:8b:4e:26:c2:ef:75:
4d:6e:14:e7:23:cf:8e:4f:78:55:17:47:23:2e:58:
b2:c4:5a:2f:e1:bb:ee:75:19:aa:13:f7:32:b7:c3:
d1:ce:04:5f:d6:1d:b1:1c:fd:fc:7f:16:41:4b:c0:
36:85:c1:57:4e:03:96:61:52:4c:81:3f:47:1e:4d:
71:b9:7c:27:22:a9:44:49:7f:5d:ff:a4:61:a1:a7:
64:3c:6c:60:86:8d:bc:12:a5:f5:db:33:31:18:2e:
2e:37:36:11:66:42:51:9a:01:94:bc:da:d2:8c:3d:
f5:86:72:b6:1a:dc:a6:db:ba:ea:ca:d3:f7:6b:7e:
3e:48:e1:17:7d:c4:11:5e:75:97:1f:16:4f:e7:e0:
19:65:2a:7b:e9:c8:e5:1c:2c:49:c8:24:23:8b:05:
d1:57:ff:17:7a:d6:d9:0a:53:a7:60:c8:d5:84:14:
47:76:15:52:13:ea:c5:82:57:ae:d7:ed:8a:fc:55:
96:f3:99:97:d6:5d:b3:33:be:5d:a3:03:64:8e:38:
56:63:3d:6c:33:e2:fd:98:c2:77:ad:5c:18:57:f4:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EA:0A:20:2A:51:7F:C7:B7:B7:60:E6:64:08:4E:D3:36:74:44:1E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3OoKICpRf8e3t2DmZAhO0zZ0RB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/21
46.3.80.0/22
46.3.92.0/22
46.3.135.0/24
46.3.152.0-46.3.157.255
46.3.188.0/22
46.3.200.0/24
46.3.203.0-46.3.204.255
46.3.208.0/21
46.3.224.0/22
46.3.250.0/24
46.3.252.0/24
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
5e:f1:55:e6:d1:72:7a:85:2a:31:ae:c2:e2:a8:5c:3d:46:f3:
00:41:0c:83:19:46:5f:08:fc:c1:7e:9d:01:1c:27:b2:6f:17:
a5:df:1a:b7:4d:a0:1d:75:a0:4e:0e:46:c2:83:e0:b5:71:b8:
f6:a8:0c:38:64:69:f9:66:e0:7a:b7:96:5e:ab:3a:27:ae:c6:
df:7e:8a:23:e0:c6:b7:10:84:60:51:e6:82:e6:1d:fa:da:14:
18:1f:f2:cf:b9:12:82:cf:02:07:31:75:9a:be:33:f3:07:67:
a0:08:7b:a0:5e:46:4b:d2:a8:d0:8d:53:fd:a7:4c:c8:c6:5e:
c8:63:b9:3b:b1:3e:74:a5:17:16:1f:23:cd:1f:57:2c:ff:78:
76:4c:1e:1f:da:6a:fe:a9:59:f4:15:4f:50:a2:27:52:48:72:
e1:67:22:a1:16:ab:cd:9e:32:52:c2:46:15:61:2b:76:90:26:
34:bb:7d:ae:b7:a0:fe:aa:d6:b5:63:d2:d0:06:23:3a:51:38:
8f:cc:bd:c4:eb:d8:1f:af:80:4a:65:82:34:72:12:7b:74:a5:
2d:36:3a:72:36:77:9d:e2:ad:40:35:01:0a:70:40:40:e4:5b:
f5:4b:46:59:55:a2:82:35:ce:ef:c8:ea:c6:b2:32:1b:a6:8b:
5c:b6:52:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org