Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R-wr0r2I5RbGrE75HbFPEGDMN2A.roa
File: R-wr0r2I5RbGrE75HbFPEGDMN2A.roa (raw, json)
Hash identifier: i8BknGfJFHYOVBJoEimWVokXztxcSLUHk8bjvK6uMHQ=
Subject key identifier: 47:EC:2B:D2:BD:88:E5:16:C6:AC:4E:F9:1D:B1:4F:10:60:CC:37:60
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E414E77290B6CE20AFEA04D04DB0DD2B5
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R-wr0r2I5RbGrE75HbFPEGDMN2A.roa
Signing time: Fri 15 Mar 2024 08:50:45 +0000
ROA not before: Fri 15 Mar 2024 08:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 46.3.86.0/23 maxlen: 23
46.232.4.0/23 maxlen: 23
46.232.20.0/22 maxlen: 22
46.232.72.0/21 maxlen: 21
46.232.96.0/20 maxlen: 20
149.126.193.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 19:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:4e:77:29:0b:6c:e2:0a:fe:a0:4d:04:db:0d:d2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 15 08:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47ec2bd2bd88e516c6ac4ef91db14f1060cc3760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:2d:4e:17:6f:85:00:ad:82:16:49:76:30:ce:
99:18:66:35:10:62:a6:dc:60:0b:2f:3c:9a:24:31:
03:e4:c0:3d:7e:1a:58:f5:61:a2:f4:0b:5c:ad:9d:
dc:9d:11:09:65:01:6a:34:3d:a9:38:0b:09:c0:2f:
48:ed:ff:73:dd:fd:1f:f9:4a:95:4c:a0:e3:50:a5:
68:3b:bd:21:c9:b6:b1:d4:08:24:cc:96:49:36:7e:
34:12:de:df:a8:7a:cf:dd:75:87:37:a3:81:b1:8e:
39:18:ac:be:6a:88:9d:8c:da:6e:46:91:f8:86:00:
97:0c:3c:7f:2c:a7:6d:ff:58:eb:ee:21:de:c7:7f:
5c:71:9f:65:8c:c5:12:96:90:d4:f9:d1:28:38:01:
a3:a4:97:c2:bd:6e:93:b1:d0:19:e0:5c:eb:27:d0:
8e:5c:8c:83:61:be:3a:a8:4c:86:39:82:58:8b:39:
15:d2:00:fc:4d:06:ed:ec:5b:63:e6:ed:0a:be:5c:
1d:b1:65:1f:86:04:41:d9:02:5b:1d:6e:07:13:59:
93:71:d3:38:c6:4f:c1:5e:a0:10:5a:19:8e:91:b5:
00:cb:44:3c:7e:9a:50:6c:b9:e7:4b:7f:d2:f6:98:
74:7a:cd:1b:9b:b2:37:17:52:0e:0a:8e:5f:74:f6:
f1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EC:2B:D2:BD:88:E5:16:C6:AC:4E:F9:1D:B1:4F:10:60:CC:37:60
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/R-wr0r2I5RbGrE75HbFPEGDMN2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.86.0/23
46.232.4.0/23
46.232.20.0/22
46.232.72.0/21
46.232.96.0/20
149.126.193.0/24
149.126.195.0-149.126.196.255
149.126.198.0/24
149.126.201.0-149.126.202.255
149.126.204.0-149.126.206.255
149.126.208.0/24
149.126.210.0/24
149.126.214.0/24
149.126.224.0/23
Signature Algorithm: sha256WithRSAEncryption
74:bc:ec:62:b4:3b:47:91:eb:28:2a:71:90:77:1d:e6:4b:a4:
d5:93:19:04:65:c8:e8:eb:9d:0d:dd:45:53:60:ea:fd:fa:5e:
6b:c5:99:92:54:56:d8:13:5b:b5:d9:7f:28:ff:6d:70:2e:ac:
a4:7f:2b:39:9f:34:30:88:61:77:f6:c0:a4:fe:ea:7c:f1:59:
ec:2b:f2:e8:05:88:11:ec:95:6c:cd:b3:f4:95:33:15:17:77:
c8:96:26:71:18:ae:44:2f:14:13:92:68:e6:ee:66:3f:1f:33:
9b:1f:f6:95:6a:88:a1:04:46:12:68:c4:88:31:3a:26:6b:f6:
37:ac:74:0d:e8:fc:5d:9b:74:08:2e:f8:ad:39:7e:61:c3:1c:
b4:2d:be:d2:47:05:14:d2:ed:fc:bf:03:8d:27:42:fa:b5:28:
8e:07:c6:0d:60:36:30:b8:74:86:84:ad:e3:06:54:d2:cf:3e:
02:30:ab:79:62:11:63:ba:59:a0:be:6e:fa:ca:54:56:13:d0:
2c:6b:fa:e3:21:4e:22:10:6a:82:66:c2:55:d5:27:61:d9:98:
f7:bc:aa:6b:7f:97:ed:7f:ff:d4:23:3d:bd:7c:4d:e1:0b:5f:
7e:27:a2:60:58:22:5f:ce:4c:be:3f:bd:28:4f:f1:b0:37:c7:
93:39:6e:54
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAY5BTncpC2ziCv6gTQTbDdK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjQwMzE1MDg1MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2VjMmJkMmJkODhlNTE2YzZhYzRlZjkxZGIxNGYxMDYwY2MzNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S1OF2+FAK2CFkl2MM6ZGGY1EGKm
3GALLzyaJDED5MA9fhpY9WGi9AtcrZ3cnREJZQFqND2pOAsJwC9I7f9z3f0f+UqV
TKDjUKVoO70hybax1AgkzJZJNn40Et7fqHrP3XWHN6OBsY45GKy+aoidjNpuRpH4
hgCXDDx/LKdt/1jr7iHex39ccZ9ljMUSlpDU+dEoOAGjpJfCvW6TsdAZ4FzrJ9CO
XIyDYb46qEyGOYJYizkV0gD8TQbt7Ftj5u0KvlwdsWUfhgRB2QJbHW4HE1mTcdM4
xk/BXqAQWhmOkbUAy0Q8fppQbLnnS3/S9ph0es0bm7I3F1IOCo5fdPbxRwIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFEfsK9K9iOUWxqxO+R2xTxBgzDdgMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvUi13cjByMkk1UmJHckU3NUhiRlBFR0RNTjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAS4DVgME
AS7oBAMEAi7oFAMEAy7oSAMEBC7oYAMEAJV+wTAMAwQAlX7DAwQAlX7EAwQAlX7G
MAwDBACVfskDBACVfsowDAMEApV+zAMEAJV+zgMEAJV+0AMEAJV+0gMEAJV+1gME
AZV+4DANBgkqhkiG9w0BAQsFAAOCAQEAdLzsYrQ7R5HrKCpxkHcd5kuk1ZMZBGXI
6OudDd1FU2Dq/fpea8WZklRW2BNbtdl/KP9tcC6spH8rOZ80MIhhd/bApP7qfPFZ
7Cvy6AWIEeyVbM2z9JUzFRd3yJYmcRiuRC8UE5Jo5u5mPx8zmx/2lWqIoQRGEmjE
iDE6Jmv2N6x0Dej8XZt0CC74rTl+YcMctC2+0kcFFNLt/L8DjSdC+rUojgfGDWA2
MLh0hoSt4wZU0s8+AjCreWIRY7pZoL5u+spUVhPQLGv64yFOIhBqgmbCVdUnYdmY
97yqa3+X7X//1CM9vXxN4QtffieiYFgiX85Mvj+9KE/xsDfHkzluVA==
Generated at Fri Apr 12 20:47:53 2024 by rpki-client on console-fra.rpki-client.org