Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Gzzus46uQCahwaAHBOUmomQBitQ.roa
File: Gzzus46uQCahwaAHBOUmomQBitQ.roa (raw, json)
Hash identifier: FC+nwB9rvHoMvurODuxW6jV9theghS3VE5MYxbrfRfc=
Subject key identifier: 1B:3C:EE:B3:8E:AE:40:26:A1:C1:A0:07:04:E5:26:A2:64:01:8A:D4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E729DF1A9D9B00A5F2856F9770BB0
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Gzzus46uQCahwaAHBOUmomQBitQ.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.135.0/24 maxlen: 24
46.232.64.0/21 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.80.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
46.3.216.0/21 maxlen: 21
46.3.224.0/21 maxlen: 21
46.3.32.0/20 maxlen: 20
Validation: Failed, certificate revoked on Thu 21 Mar 2024 20:56:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:72:9d:f1:a9:d9:b0:0a:5f:28:56:f9:77:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b3ceeb38eae4026a1c1a00704e526a264018ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e8:7f:85:19:0b:80:f3:ed:9e:5b:49:c0:fd:
7e:e0:ed:bc:74:9a:da:c4:4c:7c:6a:db:25:3c:f8:
70:21:6d:19:bd:76:f7:56:09:fa:50:22:a3:f4:bc:
af:f1:cd:01:78:7b:9b:a5:e7:57:fe:71:6e:80:39:
23:6d:51:c7:0e:31:d1:96:b3:fd:3f:75:21:c7:93:
a2:8f:10:11:76:d9:03:39:a1:ed:23:ef:36:51:fc:
6b:f3:c1:d5:ce:7b:b9:2d:54:06:2a:3e:f8:5b:a2:
20:56:55:ed:98:84:05:e9:56:26:69:0e:cc:f1:99:
6e:e5:ea:93:02:cb:05:7b:31:47:79:9f:cc:60:98:
9b:89:84:14:40:87:ad:98:25:c7:1a:06:12:e2:61:
7c:d0:ec:92:b0:28:bd:b2:d6:b0:2c:e7:1d:89:11:
fa:07:14:9e:b6:fc:1f:58:44:2d:c1:ee:88:55:a3:
90:18:26:06:db:3c:90:50:e8:3b:7e:26:7d:ea:a7:
02:03:60:ab:b3:f1:84:50:0e:2e:cf:d9:df:b4:b7:
63:05:b5:7a:c6:cf:f7:de:96:1e:ee:06:6b:b0:92:
e0:cc:71:a1:fb:7d:67:6e:74:8d:fa:bc:7c:a1:43:
dd:1e:19:a2:3c:80:c7:fa:eb:89:c4:06:e0:b2:d7:
ef:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:EE:B3:8E:AE:40:26:A1:C1:A0:07:04:E5:26:A2:64:01:8A:D4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Gzzus46uQCahwaAHBOUmomQBitQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.32.0/20
46.3.80.0/21
46.3.120.0/21
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.216.0-46.3.231.255
46.232.64.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
0b:4d:f1:e1:e9:9a:6f:5c:ab:38:71:ed:a4:47:1f:3f:04:80:
b0:4a:d2:39:b9:2d:cc:1e:66:66:d9:81:8d:a4:49:df:60:4f:
59:8c:28:cd:20:a1:58:61:6e:0d:e8:38:f7:f9:bd:30:a6:0a:
83:b3:6c:e1:1d:cb:55:d9:5d:33:ef:9f:c5:c9:04:b6:a7:61:
0d:e2:33:c9:42:7b:b6:73:4d:1c:d3:9f:cc:e2:1a:4d:0a:88:
b3:dd:d7:78:73:60:ed:d6:a1:af:e5:00:d2:73:b6:82:10:eb:
ba:f9:c2:06:17:34:93:e6:9b:37:70:9c:e9:28:10:5b:91:da:
62:45:f2:86:0f:b1:e5:88:a9:ca:b5:57:99:14:5c:ac:45:32:
1c:67:35:ff:b2:f6:8a:85:17:6f:32:d1:a7:2a:30:54:f8:7e:
58:20:35:1b:a7:ae:1f:1e:28:56:b4:c6:68:46:f2:29:35:5e:
63:a4:98:08:76:b8:63:1c:7b:01:71:52:37:3f:0d:7a:4d:74:
54:a3:71:f1:89:27:44:44:e1:99:62:45:99:d8:74:41:f3:a2:
d9:a8:79:ff:13:1a:6d:e7:21:37:06:5d:35:cc:f0:9a:b2:ff:
98:f6:e7:51:ce:b8:b1:2b:96:5d:0e:65:93:3a:49:f5:fa:bf:
94:fc:17:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 00:01:54 2024 by rpki-client on console-fra.rpki-client.org