Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZFkLbMJW6xg2Qv84NWzC5UZjhg.roa
File: 4ZFkLbMJW6xg2Qv84NWzC5UZjhg.roa (raw, json)
Hash identifier: 7ZqjibSubvdhsOaRdkaUlAJ0xaxgqyKuWwZaS4s8Lvk=
Subject key identifier: E1:91:64:2D:B3:09:5B:AC:60:D9:0B:FC:E0:D5:B3:0B:95:19:8E:18
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01895A5ADEAE5983DA271DD0B7373FF6F1E5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZFkLbMJW6xg2Qv84NWzC5UZjhg.roa
Signing time: Sat 15 Jul 2023 16:20:51 +0000
ROA not before: Sat 15 Jul 2023 16:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.3.0.0/16 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.232.112.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
46.3.205.0/24 maxlen: 24
149.126.192.0/18 maxlen: 24
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
149.126.213.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:5a:de:ae:59:83:da:27:1d:d0:b7:37:3f:f6:f1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 15 16:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e191642db3095bac60d90bfce0d5b30b95198e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:42:49:d7:70:bc:49:c5:23:c6:e2:ec:c6:
21:7b:ae:43:e9:3c:97:04:a5:2e:7b:71:f0:72:38:
ae:23:01:4d:ba:1f:15:1c:ab:5c:3b:92:92:b7:5b:
44:29:7a:a3:2e:75:41:2a:12:56:aa:bf:8a:fc:71:
49:a1:00:09:c2:49:71:e8:7a:f6:d7:f8:a5:06:31:
5a:22:ac:cc:36:42:6a:58:62:65:5e:da:9b:30:99:
f1:4f:4d:09:5f:95:d5:48:db:3c:d6:36:16:d7:5c:
a8:83:bc:eb:3e:e2:71:63:9e:81:cd:5b:7f:50:95:
cb:e9:b2:39:44:f6:9b:37:19:a6:46:8c:cf:69:8a:
7c:6f:0f:27:45:94:d6:ec:33:13:2d:47:25:50:d9:
b0:94:5e:71:16:69:a6:df:a6:f9:d5:67:86:c5:9d:
16:25:64:bb:63:09:82:aa:63:07:52:87:e2:c2:f2:
22:b1:77:25:aa:d2:c4:f8:bb:70:78:97:27:b8:f8:
33:43:d4:12:d7:99:c7:14:fe:a2:cc:cc:1b:d6:a5:
d7:8c:7b:b0:81:51:52:2c:35:a9:83:4d:f6:df:24:
a2:31:3e:80:98:64:fa:13:83:1e:17:e6:8e:b8:06:
c4:0d:33:99:a1:cf:6c:c0:35:20:87:28:69:de:04:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:91:64:2D:B3:09:5B:AC:60:D9:0B:FC:E0:D5:B3:0B:95:19:8E:18
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/4ZFkLbMJW6xg2Qv84NWzC5UZjhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/16
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1b:92:0a:33:53:31:db:ad:5f:8a:9b:07:39:52:52:0c:0f:3d:
65:0d:58:44:9c:34:44:65:4a:44:8d:bb:ea:6a:57:74:26:13:
32:99:eb:2b:fd:6a:26:63:89:ac:62:8e:ad:19:fd:71:c2:2f:
26:0d:eb:37:63:fb:37:b1:c9:27:20:3b:ab:e5:38:f7:ca:92:
e4:5e:a0:b5:0a:47:b3:91:bf:87:b3:11:6c:98:34:6f:fd:8d:
19:67:08:f1:36:9f:52:c4:c6:d0:97:8a:c9:55:0a:1f:e1:fa:
7f:9f:0c:8f:bc:50:d8:a9:cd:66:f3:50:63:3f:e5:10:4a:35:
e4:ce:7e:1e:89:d4:7c:f9:d1:23:35:99:69:d2:c1:9b:4a:7c:
15:05:78:c0:2b:48:13:b1:85:f2:13:04:a7:74:c4:89:70:7c:
34:e5:89:ff:bd:01:df:aa:2d:0c:b8:34:27:bd:a2:e8:03:be:
da:30:13:9a:5d:5c:32:3b:e3:e4:60:7f:17:0d:98:63:fa:36:
45:74:6c:83:05:f7:e2:d3:3f:e9:00:7b:9b:e4:f1:d3:d8:92:
e0:b1:56:34:ca:81:42:3c:a3:d9:62:1f:aa:9c:7c:c7:1f:b4:
0a:8b:91:06:0a:cc:19:c2:cd:2e:2f:bd:ee:6a:d2:d3:34:e8:
56:bb:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org