Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tdqei9tETaAhtkuPf-IgPBQfIjA.roa
File: Tdqei9tETaAhtkuPf-IgPBQfIjA.roa (raw, json)
Hash identifier: dWk8IYVxTtMem84oRPndzKMygrSZoQLMG+b7s02h5tk=
Subject key identifier: 4D:DA:9E:8B:DB:44:4D:A0:21:B6:4B:8F:7F:E2:20:3C:14:1F:22:30
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E3C1C34518B0455D505CC7A43C4ED256F
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tdqei9tETaAhtkuPf-IgPBQfIjA.roa
Signing time: Thu 14 Mar 2024 08:37:45 +0000
ROA not before: Thu 14 Mar 2024 08:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 393427
IP address blocks: 46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:31:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3c:1c:34:51:8b:04:55:d5:05:cc:7a:43:c4:ed:25:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 14 08:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dda9e8bdb444da021b64b8f7fe2203c141f2230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9a:41:0c:55:aa:12:3b:2a:92:19:c9:92:70:
90:40:29:7e:d8:46:2d:8c:aa:e3:5d:e8:47:97:13:
20:d6:cf:96:91:3b:9e:35:d7:23:f7:98:85:19:e6:
72:1b:5a:e8:62:f6:b6:74:a0:5d:45:59:21:c5:80:
a9:e3:af:aa:d1:4c:1a:44:be:95:0e:74:0d:e8:72:
6b:ee:f9:3d:79:c1:4d:30:7b:0d:58:5a:05:25:63:
98:c7:0f:e5:b6:d8:81:0d:9e:87:63:4d:47:18:a8:
49:78:84:a9:60:ad:47:bb:56:1c:70:e4:18:e4:bd:
f4:85:18:c0:9a:92:13:76:a9:31:31:29:e6:6a:57:
cc:41:71:a9:17:15:be:15:04:1a:e4:07:71:c6:8e:
24:fb:3b:6e:90:43:f2:f1:bc:36:aa:a0:2b:1b:6d:
16:08:92:1c:1b:33:6c:42:60:94:7f:11:fc:68:9b:
55:55:af:9c:d0:3e:35:a7:20:d4:d1:a8:69:cd:19:
8d:1f:95:c4:2c:c6:87:04:02:8d:c1:0d:97:19:e6:
b2:f2:39:ae:6a:4b:f1:81:c2:2f:42:4f:aa:69:01:
d3:37:1a:91:50:90:38:b1:e2:20:bd:74:3d:be:a3:
a2:14:9c:cd:6e:41:e9:7d:c6:11:96:fb:39:a5:52:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DA:9E:8B:DB:44:4D:A0:21:B6:4B:8F:7F:E2:20:3C:14:1F:22:30
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Tdqei9tETaAhtkuPf-IgPBQfIjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.160.0/22
46.3.188.0/24
46.3.190.0/23
46.3.200.0/24
46.3.246.0/24
46.3.250.0/24
46.3.252.0/24
46.232.64.0-46.232.72.255
Signature Algorithm: sha256WithRSAEncryption
74:df:94:46:23:95:5d:3a:c6:2a:4b:24:80:09:8f:cb:dd:c2:
d0:90:e8:29:85:64:1c:67:ab:12:92:06:55:96:1b:c1:b1:7b:
36:c0:6b:17:52:23:5b:5a:0c:b8:34:3f:3a:95:23:72:e9:4e:
39:33:32:02:23:81:53:16:05:28:ee:8e:6f:26:be:49:a4:01:
b0:17:78:44:07:8f:a8:8e:f2:f2:15:2f:4b:37:06:fd:de:bf:
19:17:47:9e:e0:ef:90:53:42:4e:d5:02:a0:c1:aa:b1:91:18:
14:71:09:a1:b5:82:6f:e3:4a:03:85:53:c3:d6:d1:c1:ec:1a:
86:b5:c6:0b:85:82:48:78:c1:e1:80:cd:4e:ce:8c:52:02:ee:
d0:1f:93:f3:0f:97:3a:49:95:d0:2c:08:31:6d:79:3c:78:85:
f3:87:f5:58:e4:b0:d1:ee:5d:e9:91:f7:75:01:18:03:88:e0:
b6:b6:3f:b4:3d:8b:e8:42:f0:62:e6:68:1f:68:d5:5f:d7:41:
b9:d6:21:7c:fb:9e:35:ff:c7:7b:01:b7:fd:d2:c9:cb:2e:0d:
91:15:dc:52:7a:de:f7:86:d1:d7:32:24:13:3c:40:4c:a3:df:
a5:7e:27:eb:c6:3f:de:5d:3d:a9:19:4a:f7:43:14:9c:31:b5:
25:eb:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 15 13:41:26 2024 by rpki-client on console-ams.rpki-client.org