Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8n6NH8XFWD8rvcbHWVVtAbQHbO4.roa
File: 8n6NH8XFWD8rvcbHWVVtAbQHbO4.roa (raw, json)
Hash identifier: ql3yGA4IW2jDGyAewvUrbWcdsGW/noajK9D86mpzgHk=
Subject key identifier: F2:7E:8D:1F:C5:C5:58:3F:2B:BD:C6:C7:59:55:6D:01:B4:07:6C:EE
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018B38AEE08C8BBD656D4D5AFEF31583BA1A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8n6NH8XFWD8rvcbHWVVtAbQHbO4.roa
Signing time: Mon 16 Oct 2023 13:31:06 +0000
ROA not before: Mon 16 Oct 2023 13:31:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.232.91.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.26.0/23 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.17.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.28.0/22 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:ae:e0:8c:8b:bd:65:6d:4d:5a:fe:f3:15:83:ba:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 16 13:31:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f27e8d1fc5c5583f2bbdc6c759556d01b4076cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dd:5c:8f:1f:59:98:de:40:38:0f:23:50:36:
c7:9a:f3:49:55:09:41:bd:4b:9b:6a:ff:c1:55:4e:
94:6a:43:c8:db:b6:19:58:45:50:49:ae:2e:95:b6:
62:0a:f5:fc:de:4f:fa:79:52:64:6d:94:f5:df:b6:
35:23:0d:c1:b2:9f:1a:3d:2e:19:dd:a8:a1:16:80:
90:98:b7:f4:d7:94:8a:bd:d2:e3:21:57:10:ed:f8:
74:00:d4:65:8b:7e:e8:c4:39:c3:2f:7f:cc:0d:4d:
78:07:b0:12:13:5b:73:8b:14:39:5a:6c:ea:ae:7b:
c5:f6:94:c7:ef:d6:0e:e5:e3:82:1c:87:54:1f:2c:
39:07:95:19:da:f1:0e:ad:1a:ad:93:cf:09:3d:a8:
30:98:19:fe:63:6f:bb:4e:87:88:99:8b:05:40:4e:
78:9f:ea:83:35:a7:9b:3e:f9:5a:6e:ce:ed:b3:d1:
4d:bb:e7:da:7b:9b:44:ea:6a:2b:fd:22:3e:e0:e0:
fb:e6:ca:34:7a:6b:91:88:98:9d:0c:31:1e:96:d5:
c6:64:5b:d7:ad:f0:8b:b6:a4:d1:ba:d6:c2:08:58:
da:e8:16:92:03:89:0f:14:15:51:9a:03:44:20:90:
1f:cf:ab:f6:eb:62:78:29:c6:04:48:67:a4:79:71:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7E:8D:1F:C5:C5:58:3F:2B:BD:C6:C7:59:55:6D:01:B4:07:6C:EE
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/8n6NH8XFWD8rvcbHWVVtAbQHbO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0-46.3.76.255
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.26.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e4:eb:d1:97:c0:07:36:df:64:99:69:29:93:dc:29:10:9c:
8e:f8:23:f1:4f:84:36:34:3b:5f:1d:68:27:8f:4e:73:d4:e7:
8b:99:aa:e6:fd:e6:df:4a:6a:86:54:b0:e4:8a:ee:a1:5a:7e:
0f:e6:ae:71:bd:6a:26:33:60:35:a1:95:cd:5a:71:06:cf:0b:
c4:94:65:a7:06:b9:17:35:1e:99:6e:e3:fd:fd:a8:c1:7b:a4:
d9:e7:78:05:5a:79:ca:3e:05:87:6e:8d:dd:dd:60:1c:23:49:
3c:9d:55:1e:c9:eb:ea:7e:8a:e8:a8:0f:9b:09:bc:9a:e3:21:
ef:e8:ed:c7:65:f7:f3:1f:1e:2f:a0:af:b0:e5:44:e2:77:0e:
7f:39:68:7b:94:a4:0b:e7:33:4e:e0:e2:aa:cb:48:ab:4e:1c:
d8:bb:bb:c2:98:f2:93:1a:65:ec:ca:6a:0c:bd:29:28:44:56:
0c:ad:6e:1b:fc:a6:eb:27:6b:bc:43:1b:94:1b:b9:a5:fc:2b:
32:d1:7e:8e:a2:ca:b8:25:ff:b1:0d:b8:ec:34:bc:f2:72:16:
e8:6a:d9:32:72:d2:d3:99:08:70:e7:2e:68:99:1b:5b:0a:e4:
18:42:b6:a5:ef:41:3f:45:4a:72:1d:75:0c:3f:00:e3:1b:f8:
74:40:70:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org