Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QQnUvvgBEk4BjizmUcl74l53oiE.roa
File: QQnUvvgBEk4BjizmUcl74l53oiE.roa (raw, json)
Hash identifier: gt+/RXTU3jM/ysVtBQCf6c8b5h84JKYsPDcY0HuXH94=
Subject key identifier: 41:09:D4:BE:F8:01:12:4E:01:8E:2C:E6:51:C9:7B:E2:5E:77:A2:21
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946C39CCF0AA26D46F28DC284C93987AF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QQnUvvgBEk4BjizmUcl74l53oiE.roa
Signing time: Tue 11 Jul 2023 21:02:51 +0000
ROA not before: Tue 11 Jul 2023 21:02:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/21 maxlen: 21
46.232.94.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.24.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.25.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:c3:9c:cf:0a:a2:6d:46:f2:8d:c2:84:c9:39:87:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 21:02:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4109d4bef801124e018e2ce651c97be25e77a221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:d0:c0:3b:ca:b3:17:22:15:6b:cd:81:8f:
74:c5:35:16:df:03:ce:51:48:eb:d5:bc:3b:06:db:
1a:a0:d1:06:a9:eb:10:c4:a9:05:ca:8f:a8:6a:0d:
3a:69:4b:09:27:bc:ba:61:7c:34:62:25:14:8d:d2:
40:32:9b:89:09:cd:48:9e:5e:fd:60:93:67:d0:bd:
6a:19:0f:07:01:e0:26:d6:dd:14:0c:af:63:d1:28:
87:e6:62:ba:77:26:d2:71:68:53:fa:86:68:bb:eb:
bb:c1:ef:41:ce:ac:57:f6:94:f0:64:ed:63:e8:16:
a9:53:f8:af:67:f4:4a:70:0c:f2:cd:a2:2e:f6:51:
27:68:e3:da:24:ee:57:26:a3:b5:bd:59:74:5a:49:
4b:f4:28:6a:38:f0:18:6f:f6:4b:43:0e:2f:18:c6:
19:84:31:30:32:a5:65:80:e7:25:27:c3:af:ce:69:
01:d6:9c:fb:0f:48:77:45:4b:b3:de:ec:af:c7:46:
d6:30:ae:d6:0a:27:dc:56:1c:c0:c1:d0:ad:5f:8d:
fe:8c:2d:8b:34:b0:d5:f5:3d:fc:b7:ff:37:10:c5:
54:fa:e5:97:f0:05:58:0b:4c:e9:17:13:b1:89:df:
2a:96:30:25:88:4b:88:48:c7:23:bc:ed:4d:19:1a:
13:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:D4:BE:F8:01:12:4E:01:8E:2C:E6:51:C9:7B:E2:5E:77:A2:21
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/QQnUvvgBEk4BjizmUcl74l53oiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/20
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.24.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.208.255
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ac:30:75:78:27:20:a9:a3:ea:21:0b:e8:20:0b:e1:01:ab:
3c:4e:1d:25:29:d1:51:96:84:06:7c:71:6a:20:05:97:7d:f5:
27:a7:13:c4:c5:0b:a7:6a:fe:2e:de:5e:96:94:a6:ec:76:7c:
e0:8d:18:dc:69:0a:5e:13:e1:c3:41:24:16:58:7f:3f:6c:54:
5b:c0:49:bf:6f:73:3d:db:33:ae:a6:64:6c:4e:d6:df:d6:11:
2a:46:f7:73:66:cb:4e:c7:d0:f9:a3:74:4e:ad:55:4f:c6:53:
82:67:7c:17:3f:e2:69:7c:ea:e5:da:51:7b:df:d3:8d:1d:bf:
64:cf:06:58:61:75:32:8e:ac:a8:67:e5:be:03:81:2d:dc:a2:
5c:dd:25:90:d6:1b:83:f0:e7:58:86:07:c4:56:f0:1d:a5:38:
c7:e6:12:a7:c8:2a:88:73:b5:17:59:7e:e2:6a:fe:48:17:7b:
65:f2:23:5a:ed:64:13:ea:43:26:99:f3:40:bf:16:84:0b:a3:
53:14:6e:17:0f:04:18:ff:da:68:e9:11:09:f0:21:0b:0e:6d:
5a:26:22:1d:70:63:e0:8d:5b:ed:c5:b5:0e:32:c0:e2:d9:a0:
5e:d2:38:80:d9:13:e5:8c:95:a2:85:e3:a5:b2:0c:42:03:b0:
e7:8e:b9:f3
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYlGw5zPCqJtRvKNwoTJOYevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwNzExMjEwMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTA5ZDRiZWY4MDExMjRlMDE4ZTJjZTY1MWM5N2JlMjVlNzdhMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+jQwDvKsxciFWvNgY90xTUW3wPO
UUjr1bw7BtsaoNEGqesQxKkFyo+oag06aUsJJ7y6YXw0YiUUjdJAMpuJCc1Inl79
YJNn0L1qGQ8HAeAm1t0UDK9j0SiH5mK6dybScWhT+oZou+u7we9BzqxX9pTwZO1j
6BapU/ivZ/RKcAzyzaIu9lEnaOPaJO5XJqO1vVl0WklL9ChqOPAYb/ZLQw4vGMYZ
hDEwMqVlgOclJ8OvzmkB1pz7D0h3RUuz3uyvx0bWMK7WCifcVhzAwdCtX43+jC2L
NLDV9T38t/83EMVU+uWX8AVYC0zpFxOxid8qljAliEuISMcjvO1NGRoTAwIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFEEJ1L74ARJOAY4s5lHJe+Jed6IhMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUVFuVXZ2Z0JFazRCaml6bVVjbDc0bDUzb2lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAIu
AwQDBAIuAxADBAIuAxgDBAAuAx4DBAMuAyADBAQuA0ADBAEuA1YDBAIuA1wDBAIu
A5QwDAMEAC4DywMEAC4DzAMEAi4D4DAMAwQDLugYAwQELuggAwQELuhQAwQBlX7A
MAwDBACVfsMDBACVfsYwDAMEA5V+yAMEAJV+yjAMAwQClX7MAwQAlX7QAwQAlX7S
AwQBlX7WAwQBlX7gAwQAlX72MA0GCSqGSIb3DQEBCwUAA4IBAQAArDB1eCcgqaPq
IQvoIAvhAas8Th0lKdFRloQGfHFqIAWXffUnpxPExQunav4u3l6WlKbsdnzgjRjc
aQpeE+HDQSQWWH8/bFRbwEm/b3M92zOupmRsTtbf1hEqRvdzZstOx9D5o3ROrVVP
xlOCZ3wXP+JpfOrl2lF739ONHb9kzwZYYXUyjqyoZ+W+A4Et3KJc3SWQ1huD8OdY
hgfEVvAdpTjH5hKnyCqIc7UXWX7iav5IF3tl8iNa7WQT6kMmmfNAvxaEC6NTFG4X
DwQY/9po6REJ8CELDm1aJiIdcGPgjVvtxbUOMsDi2aBe0jiA2RPljJWiheOlsgxC
A7Dnjrnz
Generated at Wed Aug 23 11:59:26 2023 by rpki-client on console-ams.rpki-client.org