Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7UANjH_CobFcsOgJ8Othw4GuxoE.roa
File: 7UANjH_CobFcsOgJ8Othw4GuxoE.roa (raw, json)
Hash identifier: z1uXOtrVwozfrOrHoAkmtZE3O+/Ut9mZht5iY4Ru0p0=
Subject key identifier: ED:40:0D:8C:7F:C2:A1:B1:5C:B0:E8:09:F0:EB:61:C3:81:AE:C6:81
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6F80C794A4CC3F2BB056DB73875C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7UANjH_CobFcsOgJ8Othw4GuxoE.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207636
IP address blocks: 46.3.192.0/19 maxlen: 19
80.243.128.0/20 maxlen: 24
46.3.129.0/24 maxlen: 24
46.3.131.0/24 maxlen: 24
46.3.128.0/24 maxlen: 24
149.126.241.0/24 maxlen: 24
46.3.85.0/24 maxlen: 24
149.126.199.0/24 maxlen: 24
149.126.194.0/24 maxlen: 24
46.232.8.0/22 maxlen: 22
46.232.12.0/22 maxlen: 22
149.126.211.0/24 maxlen: 24
149.126.209.0/24 maxlen: 24
46.3.224.0/19 maxlen: 19
149.126.212.0/24 maxlen: 24
46.3.12.0/22 maxlen: 22
46.3.22.0/24 maxlen: 24
46.3.20.0/24 maxlen: 24
46.3.23.0/24 maxlen: 24
46.3.237.0/24 maxlen: 24
46.3.21.0/24 maxlen: 24
149.126.227.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6f:80:c7:94:a4:cc:3f:2b:b0:56:db:73:87:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed400d8c7fc2a1b15cb0e809f0eb61c381aec681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:b6:08:60:3c:1c:d6:0a:55:fe:49:47:b0:
3e:97:c5:f4:d6:df:83:7f:46:bc:36:b6:4a:a5:47:
38:b8:c8:7d:2e:79:a6:ce:89:4c:d0:83:2d:2f:c6:
47:5e:29:40:91:e1:30:bb:61:1a:c8:2a:4e:af:13:
04:41:50:7f:82:cc:c7:88:b4:58:3d:70:1c:dc:05:
db:29:15:4e:de:89:09:95:55:b8:9c:87:dd:4e:5c:
2c:2e:47:79:df:c8:42:ed:63:8a:0e:59:7e:b5:c5:
65:84:85:26:07:4e:43:b2:8b:9d:24:27:b2:a1:5d:
a0:e3:16:fe:c2:aa:6f:8e:9b:78:dd:27:a1:e7:2d:
a8:05:50:73:0d:40:d0:08:ce:de:97:44:c6:b2:77:
b9:63:63:27:b2:cc:df:67:7a:c9:c0:7c:f6:3e:43:
85:b0:c8:e4:77:42:0f:5e:22:56:82:89:b5:80:a3:
ec:54:b3:f8:e3:8d:d5:79:2e:49:f2:ea:b7:df:bf:
fa:f8:01:4c:04:48:cd:b5:fc:ca:21:b4:26:7d:70:
74:71:f9:d1:7b:d2:bd:14:f6:bd:87:f3:5f:8a:c9:
c7:eb:75:a1:8d:39:de:2f:04:b6:5d:d8:d1:09:0c:
5d:70:2a:70:55:e8:cd:30:f5:70:9d:03:37:e8:58:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:40:0D:8C:7F:C2:A1:B1:5C:B0:E8:09:F0:EB:61:C3:81:AE:C6:81
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/7UANjH_CobFcsOgJ8Othw4GuxoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.12.0/22
46.3.20.0/22
46.3.85.0/24
46.3.128.0/23
46.3.131.0/24
46.3.192.0/18
46.232.8.0/21
80.243.128.0/20
149.126.194.0/24
149.126.199.0/24
149.126.209.0/24
149.126.211.0-149.126.212.255
149.126.227.0/24
149.126.241.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2f:e8:a1:8c:6d:7b:be:ad:fb:66:87:c3:95:83:b6:37:02:
da:e9:79:fb:60:f2:31:d2:48:6a:f3:f5:b1:66:52:6b:b4:77:
d7:38:0d:9f:93:7c:f2:2a:82:2f:d2:ab:3f:c9:5c:57:04:52:
08:c5:c5:a9:3f:09:0c:5e:4c:04:76:52:d9:37:a9:fd:b9:ba:
37:32:ef:75:0e:38:25:ff:3c:8a:20:ad:12:6e:e4:d0:3f:55:
86:fb:29:b4:84:86:db:f7:38:3d:2e:80:06:62:16:74:15:03:
10:b7:be:8e:fb:f0:28:b8:84:3c:55:03:4d:c6:0b:79:65:a6:
6a:d2:7a:a1:b4:54:ec:bd:78:44:0d:f7:c0:87:f4:9d:87:62:
c3:b1:31:05:db:42:db:6b:45:f8:28:e6:42:ee:1c:53:e8:00:
25:70:75:b9:c1:4f:1c:45:26:c8:3a:71:67:78:d7:35:d9:01:
3d:54:7a:e7:d7:18:b9:e6:ae:73:3b:42:11:72:ef:45:64:90:
b8:19:4a:96:e7:fe:85:19:53:77:70:77:2d:44:89:3c:41:59:
2e:cd:aa:c7:fd:7e:8c:b1:9d:ea:e4:5f:54:28:53:40:ef:3b:
ae:80:d8:79:ec:66:31:25:eb:29:85:dd:4a:c2:14:9f:67:5d:
27:cd:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:33:41 2024 by rpki-client on console-fra.rpki-client.org