Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WSQed9N1igNiCD5vxPLHFh9BObg.roa
File: WSQed9N1igNiCD5vxPLHFh9BObg.roa (raw, json)
Hash identifier: sqwZujBrkOKC/RIaE8eWR5+yKxAoR5refqqQ5chAcD0=
Subject key identifier: 59:24:1E:77:D3:75:8A:03:62:08:3E:6F:C4:F2:C7:16:1F:41:39:B8
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A221843CDA8E00998B6B9D029575FE694
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WSQed9N1igNiCD5vxPLHFh9BObg.roa
Signing time: Wed 23 Aug 2023 11:12:10 +0000
ROA not before: Wed 23 Aug 2023 11:12:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/21 maxlen: 21
46.232.94.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.24.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.25.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:18:43:cd:a8:e0:09:98:b6:b9:d0:29:57:5f:e6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 23 11:12:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59241e77d3758a0362083e6fc4f2c7161f4139b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d6:6e:f7:2f:ed:97:c8:cb:02:eb:26:23:fb:
76:31:55:05:18:df:72:c5:64:78:37:e6:27:c1:00:
a0:e9:ac:b7:70:29:94:f0:e6:a3:c8:cc:27:57:f5:
b4:44:a7:fc:15:eb:2f:6e:4c:cb:77:92:67:9c:a4:
a0:89:42:ad:db:4c:58:43:7b:7e:fc:80:9f:b9:e3:
47:a8:84:db:6a:97:f6:30:bf:46:27:02:ce:ca:a5:
a4:8e:c2:54:43:93:60:a3:0b:d1:b1:09:8f:72:ce:
cd:c9:f5:3d:d4:7f:e4:52:1e:05:4b:d4:a9:82:35:
7a:f0:cb:5f:4f:f6:b7:f0:c6:ef:cf:33:54:c7:51:
3d:19:58:23:d5:d3:cd:40:df:0d:34:80:4f:8b:09:
9b:b9:fd:36:4d:28:49:b2:d6:f9:be:9e:c2:87:2e:
57:9c:ac:4a:a1:8a:5a:85:c4:4f:24:25:33:00:0f:
ae:f8:48:f3:f1:d1:c9:6b:3a:42:89:26:df:75:59:
4d:8d:0a:f7:7e:50:83:9e:11:97:b2:f0:64:c3:40:
14:e2:ad:9b:e1:39:f9:79:25:3c:b3:88:52:45:c0:
9e:a9:3c:15:e7:60:84:99:54:a0:ad:06:ee:bc:c7:
5a:5f:c2:06:d1:c1:ca:f4:33:29:3b:c2:bb:01:00:
e7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:1E:77:D3:75:8A:03:62:08:3E:6F:C4:F2:C7:16:1F:41:39:B8
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/WSQed9N1igNiCD5vxPLHFh9BObg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/20
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.24.0/21
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.208.255
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1e:e9:dc:b4:3c:6f:a5:e2:91:69:8e:41:eb:52:21:aa:85:
9d:7d:e3:bb:92:cd:b4:77:d2:bd:d1:7d:0c:3e:98:ec:dc:a1:
f1:47:19:97:ae:e6:1e:9e:b1:20:83:9f:ee:0a:a7:72:9e:a3:
57:1a:84:fe:e6:e5:5d:d6:d6:11:29:17:c1:81:9b:85:3c:a9:
bb:3b:4a:8d:37:77:29:7c:4a:3e:a3:3f:86:05:66:d6:0e:df:
a6:c0:d9:4f:52:24:3d:91:93:f0:bc:6f:08:2a:ae:c9:61:89:
75:7b:4a:35:7a:d3:3d:a0:1b:1a:c4:26:8f:dd:82:03:52:d3:
d5:16:f9:fe:42:58:13:88:41:73:44:71:91:08:11:7d:11:57:
59:5d:e1:0e:c1:4e:01:3c:bc:0f:23:76:d6:56:5d:69:1a:c0:
90:25:d3:12:d4:ee:8b:bf:22:43:b0:d6:a6:e9:43:b0:50:03:
05:0d:d4:f0:1a:9c:e5:9b:2b:3a:35:7a:0d:06:31:55:f8:d0:
bd:d3:54:00:d7:bb:7f:31:23:a5:c0:e6:c0:86:51:45:0b:31:
bc:fd:3b:d7:a8:9f:2f:b7:03:a2:4f:e0:87:18:89:15:13:ef:
d3:cc:d7:00:41:e2:71:e5:e1:be:6c:44:9a:bc:7a:bc:a6:04:
e4:eb:53:ba
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYoiGEPNqOAJmLa50ClXX+aUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwODIzMTExMjEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTI0MWU3N2QzNzU4YTAzNjIwODNlNmZjNGYyYzcxNjFmNDEzOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptZu9y/tl8jLAusmI/t2MVUFGN9y
xWR4N+YnwQCg6ay3cCmU8OajyMwnV/W0RKf8FesvbkzLd5JnnKSgiUKt20xYQ3t+
/ICfueNHqITbapf2ML9GJwLOyqWkjsJUQ5NgowvRsQmPcs7NyfU91H/kUh4FS9Sp
gjV68MtfT/a38MbvzzNUx1E9GVgj1dPNQN8NNIBPiwmbuf02TShJstb5vp7Chy5X
nKxKoYpahcRPJCUzAA+u+Ejz8dHJazpCiSbfdVlNjQr3flCDnhGXsvBkw0AU4q2b
4Tn5eSU8s4hSRcCeqTwV52CEmVSgrQbuvMdaX8IG0cHK9DMpO8K7AQDnzQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFFkkHnfTdYoDYgg+b8TyxxYfQTm4MB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvV1NRZWQ5TjFpZ05pQ0Q1dnhQTEhGaDlCT2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAIu
AwQDBAIuAxADBAIuAxgDBAAuAx4DBAMuAyADBAQuA0ADBAEuA1YDBAIuA1wDBAIu
A5QwDAMEAC4DywMEAC4DzAMEAi4D4AMEAy7oGAMEBC7oUAMEAZV+wDAMAwQAlX7D
AwQAlX7GMAwDBAOVfsgDBACVfsowDAMEApV+zAMEAJV+0AMEAJV+0gMEAZV+1gME
AZV+4AMEAJV+9jANBgkqhkiG9w0BAQsFAAOCAQEAhx7p3LQ8b6XikWmOQetSIaqF
nX3ju5LNtHfSvdF9DD6Y7Nyh8UcZl67mHp6xIIOf7gqncp6jVxqE/ublXdbWESkX
wYGbhTypuztKjTd3KXxKPqM/hgVm1g7fpsDZT1IkPZGT8LxvCCquyWGJdXtKNXrT
PaAbGsQmj92CA1LT1Rb5/kJYE4hBc0RxkQgRfRFXWV3hDsFOATy8DyN21lZdaRrA
kCXTEtTui78iQ7DWpulDsFADBQ3U8Bqc5ZsrOjV6DQYxVfjQvdNUANe7fzEjpcDm
wIZRRQsxvP0716ifL7cDok/ghxiJFRPv08zXAEHiceXhvmxEmrx6vKYE5OtTug==
-----END CERTIFICATE-----
Generated at Fri Sep 1 15:37:17 2023 by rpki-client on console-ams.rpki-client.org