Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/DyojDDBv3Ubk6dcZWsuUu6DEOpo.roa
File: DyojDDBv3Ubk6dcZWsuUu6DEOpo.roa (raw, json)
Hash identifier: phNl11qIhE5+w+o4ZoOCMYP/4ilTH1DWw5WBUFqBxt0=
Subject key identifier: 0F:2A:23:0C:30:6F:DD:46:E4:E9:D7:19:5A:CB:94:BB:A0:C4:3A:9A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E3C1C3564A768281E7A5DAB12F551718A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/DyojDDBv3Ubk6dcZWsuUu6DEOpo.roa
Signing time: Thu 14 Mar 2024 08:37:45 +0000
ROA not before: Thu 14 Mar 2024 08:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:1c:35:64:a7:68:28:1e:7a:5d:ab:12:f5:51:71:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 14 08:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f2a230c306fdd46e4e9d7195acb94bba0c43a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:fc:1b:86:d8:9a:5d:fe:f0:d3:1f:9e:77:
d5:f8:8c:5d:fc:92:4c:5d:42:28:1c:6e:8c:85:a9:
e2:c7:5e:c3:78:da:3c:81:4c:b2:15:a4:8b:ba:fd:
b1:d5:90:bb:06:4d:82:0d:32:db:11:76:ca:20:70:
f7:a0:cf:68:48:16:81:fe:08:f7:8d:a7:42:95:0e:
5a:f4:69:ec:84:b2:df:4c:d8:9d:38:82:63:eb:63:
bf:34:89:de:0e:dc:5b:1e:c3:56:f5:c3:cc:be:6c:
e7:89:51:2c:e4:d9:14:5f:fc:00:d6:a3:db:ca:3a:
52:31:6a:88:82:77:6f:67:7a:55:33:b9:69:fa:4a:
54:7c:9a:c1:2e:9e:83:17:34:d8:33:41:7e:87:3b:
df:00:40:bd:3b:bb:b7:20:46:ea:f4:5a:0a:47:8e:
14:e7:2b:db:af:50:eb:00:33:07:7d:cf:4d:2a:af:
1b:75:f6:77:8b:14:8c:93:da:44:cc:6f:5e:3d:5c:
8b:f1:71:78:5a:18:72:c7:be:24:16:c2:5b:45:dd:
e2:14:43:38:64:66:eb:d3:d4:f3:9e:0c:9c:24:d2:
47:86:80:cf:78:6e:f2:9c:72:5a:09:de:e1:5d:02:
52:47:b1:8a:89:ab:1f:48:90:ed:54:56:4e:56:5f:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2A:23:0C:30:6F:DD:46:E4:E9:D7:19:5A:CB:94:BB:A0:C4:3A:9A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/DyojDDBv3Ubk6dcZWsuUu6DEOpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.188.0/24
46.3.190.0/23
46.3.200.0/23
46.3.220.0/23
46.3.230.0/23
46.3.246.0/24
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.64.0/20
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
97:79:a2:e6:98:50:c6:5f:a9:ed:6a:dc:77:06:71:31:4a:f4:
1f:96:78:f7:7e:6b:aa:00:14:0e:7a:a4:9f:92:d9:b3:f8:0c:
08:e4:14:bc:a2:2b:6b:48:55:95:d3:ad:31:5a:77:18:b9:a1:
d4:58:3e:c3:93:31:35:96:d5:3d:74:aa:0c:44:6e:d9:d5:34:
98:e9:92:4b:86:2e:73:72:ef:c1:07:58:ec:57:dc:08:01:b9:
f6:9f:8b:32:57:91:9e:b9:d3:54:9d:24:fd:cc:50:f0:64:85:
32:42:e9:2f:15:ed:fe:45:f2:b4:06:1e:87:0d:43:b5:9f:63:
1b:8b:df:e2:a1:b1:ff:52:30:fe:ae:5d:27:45:b6:22:fb:30:
e7:e8:cd:3d:f9:3b:7c:0d:e0:9e:43:fa:5b:fd:07:a6:79:a8:
8b:a7:90:9a:2f:b8:dc:28:82:e1:81:89:24:1a:03:1b:f6:5c:
4e:98:c9:c7:d8:e2:f8:99:e5:1a:f3:9a:de:9d:7a:5f:5f:e8:
93:7b:3f:b6:bd:95:25:10:14:77:15:50:e2:7f:10:72:c7:96:
f8:14:5e:d9:e8:6a:a3:dc:d9:1a:38:ad:53:11:db:98:e2:f3:
3f:f5:2f:0c:de:ec:da:0b:03:bf:9a:9e:8e:d4:c2:58:6c:10:
28:9d:3c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:41:25 2024 by rpki-client on console-ams.rpki-client.org