Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5HhmFhhrR25BjwjKdBp_Fy6GdKI.roa
File: 5HhmFhhrR25BjwjKdBp_Fy6GdKI.roa (raw, json)
Hash identifier: 65g0b9Ui777Eiv66PW4a2Bhubprwua/Z/+V6NmwLbuU=
Subject key identifier: E4:78:66:16:18:6B:47:6E:41:8F:08:CA:74:1A:7F:17:2E:86:74:A2
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01883466E68F622EFFE6918D95B3CE694D86
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5HhmFhhrR25BjwjKdBp_Fy6GdKI.roa
Signing time: Fri 19 May 2023 14:25:38 +0000
ROA not before: Fri 19 May 2023 14:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 46.3.160.0/20 maxlen: 20
46.3.176.0/20 maxlen: 20
46.3.96.0/19 maxlen: 19
46.3.128.0/23 maxlen: 23
46.232.64.0/19 maxlen: 19
46.232.64.0/18 maxlen: 18
46.3.64.0/20 maxlen: 20
46.3.80.0/20 maxlen: 20
46.3.80.0/22 maxlen: 22
46.232.96.0/19 maxlen: 19
46.232.0.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.232.16.0/22 maxlen: 22
46.3.12.0/22 maxlen: 22
46.232.32.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:66:e6:8f:62:2e:ff:e6:91:8d:95:b3:ce:69:4d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 19 14:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4786616186b476e418f08ca741a7f172e8674a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7e:5e:84:f4:99:83:2b:d2:b8:2d:76:e9:16:
e4:df:9d:4c:64:0a:00:0a:c4:81:3d:be:cf:4f:bf:
0a:f2:c0:d4:22:b6:07:af:5c:2e:14:a1:5c:a8:7f:
ab:9c:3a:fa:5c:ac:c8:c3:ad:55:a7:86:0a:db:3d:
3d:26:8a:9c:2a:fb:ec:78:53:72:a1:fc:68:12:07:
c4:9c:b3:2f:23:8f:bb:0a:3e:7d:4a:d5:1b:b1:9d:
e1:b1:93:df:ee:a9:30:c5:17:42:7d:5f:6a:cf:e5:
de:07:5b:5f:2e:e1:57:f7:88:d3:ad:96:6c:0f:fd:
5a:b7:f4:6e:c3:8e:03:64:1d:9f:d5:2a:3d:a7:50:
f7:ce:45:3e:d7:49:fe:30:a4:97:a4:a1:6f:2d:18:
ce:e7:90:37:00:e4:b3:f4:ed:4d:71:2f:79:96:82:
54:28:d2:d2:11:0b:0e:55:7e:d2:48:32:8f:b2:3d:
e8:6b:a8:71:ba:24:74:fc:5b:56:64:97:79:cc:d5:
8e:69:71:76:43:da:55:d7:02:27:93:77:01:c1:e1:
95:15:19:04:ec:f4:fd:23:02:38:63:b5:cf:66:10:
f4:ce:4a:c8:74:21:ca:25:97:94:56:0e:58:f6:40:
fa:37:55:d1:03:ad:b8:f3:40:0e:60:7b:23:a7:af:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:78:66:16:18:6B:47:6E:41:8F:08:CA:74:1A:7F:17:2E:86:74:A2
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/5HhmFhhrR25BjwjKdBp_Fy6GdKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0/22
46.3.64.0-46.3.129.255
46.3.160.0/19
46.3.216.0/21
46.232.0.0/24
46.232.16.0/22
46.232.32.0-46.232.127.255
Signature Algorithm: sha256WithRSAEncryption
63:4c:2d:99:55:a5:6d:50:4d:ca:40:10:91:e3:0e:69:d5:31:
80:da:5b:af:39:de:1f:4c:0b:f9:a4:88:83:cc:3b:1e:37:59:
47:c9:ed:a1:4f:ae:93:63:33:84:7a:84:0f:0e:90:23:0a:e2:
ab:83:30:20:79:db:a7:9b:1d:00:40:06:29:13:eb:c7:23:38:
27:45:63:ac:86:e9:5a:92:45:a2:e1:99:60:82:5e:cd:9b:5a:
2b:66:fe:a9:0a:5a:de:c0:10:cb:92:bc:79:26:39:82:3b:0c:
48:c1:24:5c:e0:61:c9:9a:28:01:7f:cf:1f:6e:eb:80:92:d4:
4f:ce:37:51:e3:17:9d:77:5b:22:1e:3e:17:37:e6:6e:ce:6b:
74:e9:90:c1:7d:79:e2:ea:ad:5f:7a:53:35:3b:11:d0:e6:52:
54:03:05:22:03:19:26:33:c0:27:f4:ae:78:30:0b:c3:c7:90:
56:80:fa:b3:ef:9d:c1:ba:44:91:bb:ad:df:df:9a:ac:86:c1:
fe:7b:f3:8b:44:42:12:70:83:f3:41:67:87:51:6c:d7:89:04:
c0:1a:67:7f:3c:67:11:e8:78:b2:12:16:65:6a:06:c4:36:57:
b7:77:9b:aa:85:b1:c0:41:05:be:c7:0f:85:59:f6:91:8b:ee:
3e:74:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org