Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ut844AU_CqolSfKmKnLxzoXIAHw.roa
File: Ut844AU_CqolSfKmKnLxzoXIAHw.roa (raw, json)
Hash identifier: KoMxNLkIUweLowo18OOy7roGrOsucgmkwRZ04LgUM5c=
Subject key identifier: 52:DF:38:E0:05:3F:0A:AA:25:49:F2:A6:2A:72:F1:CE:85:C8:00:7C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A8ABC4AE470B84526C969C9BBE5A18349
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ut844AU_CqolSfKmKnLxzoXIAHw.roa
Signing time: Tue 12 Sep 2023 18:51:50 +0000
ROA not before: Tue 12 Sep 2023 18:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.96.0/20 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.232.112.0/20 maxlen: 22
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
149.126.226.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:bc:4a:e4:70:b8:45:26:c9:69:c9:bb:e5:a1:83:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 12 18:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52df38e0053f0aaa2549f2a62a72f1ce85c8007c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0c:68:94:5b:a1:f0:aa:93:22:f3:26:70:49:
f1:c1:d7:98:ee:40:de:9c:1e:df:aa:4b:87:f1:de:
51:90:c3:4d:36:aa:4e:90:c7:aa:1d:9f:2f:1a:16:
1b:e3:c3:b7:05:c1:37:f4:65:d7:5e:e4:af:3d:fb:
ad:7c:f2:8a:9b:f8:62:a9:f3:ca:e0:b4:95:91:29:
45:b0:25:cb:74:b3:18:8d:68:18:84:c2:aa:70:1d:
c2:58:fa:b6:8f:b7:a5:ae:fd:db:eb:a5:08:67:32:
99:0d:b7:9c:df:cd:42:84:35:96:6c:fd:aa:2b:48:
09:b7:8e:c0:b4:5f:07:3e:22:1c:71:cf:74:d2:ba:
cf:24:2d:d9:8a:db:42:8c:5c:5a:65:9f:f3:4c:8d:
24:5b:6f:d5:73:ac:58:55:60:29:16:47:67:c2:56:
c8:0e:4e:05:69:f9:1c:a4:71:4b:61:1c:e6:71:64:
dd:5a:69:84:a8:61:ea:36:6c:e0:a3:71:be:31:0e:
4e:1a:f1:55:6f:5c:38:86:48:13:f9:4e:b3:81:59:
b3:67:f6:a1:5d:89:54:d0:8c:e0:7d:b4:e0:6e:b1:
7c:76:c5:0d:59:0a:a3:d6:c1:11:1a:bd:7c:f2:bb:
a4:1f:b2:37:25:b9:41:d5:b9:57:9a:59:2c:f4:ee:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:DF:38:E0:05:3F:0A:AA:25:49:F2:A6:2A:72:F1:CE:85:C8:00:7C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Ut844AU_CqolSfKmKnLxzoXIAHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.89.0-46.3.91.255
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.188.0/24
46.3.190.0/23
46.3.200.0/23
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.246.0/24
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.64.0/22
46.232.69.0-46.232.70.255
46.232.72.0/21
46.232.96.0/19
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/24
149.126.246.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:95:76:5c:48:40:e6:38:21:38:4b:b3:eb:c4:86:ac:09:68:
5b:d7:f1:c8:e4:f0:c8:8f:ab:7e:b7:bb:4c:c0:fd:71:2b:ed:
a2:ee:10:9c:98:8d:57:e6:df:af:42:97:9c:76:a5:56:69:a3:
d3:c8:0c:33:07:1f:94:c7:72:32:8c:a8:43:67:39:c3:b8:69:
0c:04:9c:1a:f7:df:59:f3:51:c0:90:57:e3:d0:68:20:9d:c1:
97:2c:14:2a:02:3c:bb:44:0b:9b:c6:c7:23:e1:db:08:b7:dd:
bf:cb:5e:68:fa:bf:26:d7:05:ce:47:22:06:2a:7b:c0:4f:6e:
20:5f:81:7f:63:16:ad:8c:4a:1f:c5:5d:64:3f:77:08:0d:b9:
57:d3:b2:66:86:8b:3f:7c:20:aa:77:eb:54:d2:f4:89:93:78:
42:54:af:15:57:29:0d:c5:a4:a3:e7:4e:79:85:46:6e:74:bd:
57:5a:21:42:b1:ee:98:86:5c:87:55:92:7c:b9:ff:a0:de:d9:
84:06:3a:cd:40:4e:b8:7d:2d:1b:7a:fb:a8:83:08:5c:9b:7e:
2b:40:78:f4:3c:ce:27:4b:ca:3b:97:0c:05:4e:bb:4a:49:c1:
fc:0e:96:94:7c:fd:2c:c1:41:05:07:44:ee:8b:8b:45:15:40:
c2:56:d1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org