Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3pLwdCoFXq_oV8DRx2uVC2XXZGw.roa
File: 3pLwdCoFXq_oV8DRx2uVC2XXZGw.roa (raw, json)
Hash identifier: uLH9ud5lbnlBIhEcYVhGOSZm/WgxgWAhrRNdS0ruPig=
Subject key identifier: DE:92:F0:74:2A:05:5E:AF:E8:57:C0:D1:C7:6B:95:0B:65:D7:64:6C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719553DB40C858BE1A368E04EDE21169
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3pLwdCoFXq_oV8DRx2uVC2XXZGw.roa
Signing time: Mon 02 Jan 2023 08:24:49 +0000
ROA not before: Mon 02 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 46.3.160.0/22 maxlen: 22
46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.243.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.213.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.229.0/24 maxlen: 24
149.126.230.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:53:db:40:c8:58:be:1a:36:8e:04:ed:e2:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de92f0742a055eafe857c0d1c76b950b65d7646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:c3:f3:1a:98:72:f9:6e:37:f2:f6:09:be:
1c:dc:8f:89:f5:07:d8:13:5b:fa:b9:9a:7b:3d:20:
bd:ca:26:21:2f:7b:f2:c2:be:cf:f0:48:80:e7:8d:
6d:1e:78:f8:f5:fb:ec:bf:c5:eb:f1:e2:b5:da:25:
cb:7f:59:a5:63:56:2b:eb:62:05:30:71:00:e7:ad:
77:0b:fb:24:a2:d1:5e:9c:97:5d:04:4d:4f:fa:85:
b4:b1:e2:ec:19:61:45:7b:e0:16:a3:54:0c:72:db:
4b:3e:bb:7e:f9:ee:e7:0a:5e:14:7e:64:d6:d8:05:
d5:ac:cf:12:89:af:bd:1e:82:3a:d7:f3:fd:ff:26:
49:0c:ed:e1:4e:98:d3:c7:51:33:ac:00:b3:57:7c:
41:0c:87:16:76:38:8f:b3:31:82:4e:fc:ab:34:df:
dd:8d:79:1e:cf:99:ad:f8:81:ed:ae:97:b1:3d:ae:
cc:0b:f8:21:eb:52:27:48:fd:3e:39:a4:48:70:e0:
83:3c:d0:69:9c:dd:1e:ec:e2:0e:92:a0:26:88:b3:
07:56:4a:e0:99:54:61:de:8e:af:e7:a5:89:20:e1:
cd:5b:62:f8:80:3c:6c:2a:b4:05:83:9f:7d:44:b2:
10:79:cf:fb:59:b6:0c:06:40:29:0d:a6:c2:6c:bf:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:92:F0:74:2A:05:5E:AF:E8:57:C0:D1:C7:6B:95:0B:65:D7:64:6C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/3pLwdCoFXq_oV8DRx2uVC2XXZGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.134.0/24
46.3.160.0/22
46.3.201.0/24
46.3.205.0/24
46.3.248.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.213.0-149.126.214.255
149.126.224.0-149.126.226.255
149.126.228.0/22
149.126.242.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0b:e9:63:fe:93:f4:47:69:5d:66:fa:8e:cc:30:ff:01:bb:
4b:b0:2e:cb:b6:47:f6:ca:36:2d:d7:c1:8f:50:1f:d4:18:b2:
7a:eb:c6:ff:75:70:45:89:3f:1a:c7:03:3c:df:f4:00:0b:43:
1e:5c:55:53:57:ed:0d:12:60:b1:94:70:00:c6:b8:88:8d:89:
53:63:4e:30:fe:a1:c9:c1:70:4f:07:ec:2d:68:8c:86:fc:9b:
a4:2d:e3:07:3b:06:85:12:53:17:7e:6a:67:e3:98:1b:62:f3:
8b:a5:5f:54:4c:c0:5b:af:3c:d4:57:24:e3:7e:87:f2:0d:aa:
1d:ad:cd:31:d1:62:ba:c9:4a:8c:91:33:80:e7:e7:b8:d7:9d:
04:e0:82:34:4e:f8:16:c8:5f:16:81:1d:d9:0b:89:8c:09:51:
3f:5b:de:e5:73:2f:2a:cb:df:89:4b:60:9d:6b:7d:be:de:46:
92:79:4e:7f:55:f4:ed:94:5d:5b:35:de:f6:8e:b6:a6:b8:eb:
65:b1:12:d7:9a:ea:50:e7:27:2b:6e:e7:c0:54:03:b5:e7:d0:
fd:e7:f8:58:c8:7c:c7:93:01:46:ca:e4:ba:05:d5:e2:ca:1e:
a4:13:b8:ca:4a:d4:cd:c1:13:a6:b2:06:01:70:60:ae:fe:38:
c4:a2:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:35 2023 by rpki-client on console-fra.rpki-client.org