Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/X-_tZePCZaXRLu1c9dWsCN6Arls.roa
File: X-_tZePCZaXRLu1c9dWsCN6Arls.roa (raw, json)
Hash identifier: hU2JXoACCkUp47gW17LX/bpgjE8IZRk0oF+hDx9U5hY=
Subject key identifier: 5F:EF:ED:65:E3:C2:65:A5:D1:2E:ED:5C:F5:D5:AC:08:DE:80:AE:5B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CDA2A2EB0F09151ED2E29227B582AEFF
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/X-_tZePCZaXRLu1c9dWsCN6Arls.roa
Signing time: Fri 10 Mar 2023 22:27:13 +0000
ROA not before: Fri 10 Mar 2023 22:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.80.0/20 maxlen: 24
46.3.68.0/22 maxlen: 22
46.3.80.0/22 maxlen: 22
46.3.4.0/22 maxlen: 22
46.232.24.0/21 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.24.0/22 maxlen: 22
46.232.32.0/20 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
149.126.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:a2:a2:eb:0f:09:15:1e:d2:e2:92:27:b5:82:ae:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fefed65e3c265a5d12eed5cf5d5ac08de80ae5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:89:ba:5d:e9:9b:bb:12:d2:55:c4:06:a2:
bd:0f:38:f4:ae:a5:54:53:97:aa:e5:1f:67:66:67:
5e:ce:92:77:a0:37:ec:90:95:ce:81:31:1c:41:df:
45:fd:7b:0b:2a:da:14:1e:06:62:a6:05:4f:df:cd:
d7:66:c8:e2:56:dd:f5:ad:90:02:6f:c6:c4:c5:fd:
e9:11:e1:c5:b4:83:29:4b:0c:d0:26:96:fd:f7:fe:
a8:21:ba:4c:4f:d4:f2:f5:d0:39:56:7d:0f:7c:93:
31:d5:2b:47:34:44:80:40:63:fd:84:b2:f2:91:d9:
3d:77:bb:61:09:78:b3:9c:fb:55:07:8d:c6:3a:86:
f2:9e:7b:02:19:f7:ba:b6:45:30:f6:08:97:27:3c:
8d:eb:8d:ef:9a:71:50:37:c2:ff:37:c3:c1:39:ec:
41:74:c9:cc:b7:79:f8:16:59:4f:c2:18:d5:9b:95:
95:a9:cc:2f:bd:b4:72:de:3e:17:72:2a:ef:42:e9:
42:f1:df:cc:c4:7c:78:ae:ae:88:91:ca:46:9b:c2:
f1:cd:80:43:a0:09:8a:e9:3b:c3:93:03:ea:c2:3f:
d0:d7:fe:f0:16:f8:ce:ce:82:c1:26:2c:f8:73:e8:
ee:97:69:28:78:0c:67:02:74:e9:bf:44:84:04:77:
2c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:ED:65:E3:C2:65:A5:D1:2E:ED:5C:F5:D5:AC:08:DE:80:AE:5B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/X-_tZePCZaXRLu1c9dWsCN6Arls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/21
46.3.80.0/22
46.3.92.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.203.0-46.3.204.255
46.3.208.0/21
46.3.224.0/22
46.232.24.0-46.232.47.255
46.232.64.0/21
46.232.80.0/20
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
06:ce:b9:05:86:21:70:ae:2a:fc:c2:48:33:d1:60:9d:ea:c5:
79:6c:26:4d:81:e0:58:51:58:6e:23:70:ab:dc:ed:38:29:e8:
3f:8c:a8:db:d4:7c:a7:ac:0b:6d:6b:a4:fe:0d:da:b9:90:e1:
04:0f:53:b6:a6:8b:5f:fe:a0:d1:ed:0b:5d:f5:fa:f3:b7:33:
7a:81:d9:33:bf:4b:5b:3b:82:19:6c:11:7a:10:fa:14:c2:d9:
53:fa:03:27:4a:df:ab:5e:19:2e:df:7c:66:48:79:bb:e8:f6:
22:d1:11:b4:09:9a:f9:e5:75:74:02:92:25:07:c5:38:98:2e:
cb:8a:b0:e1:8c:a9:f5:c6:78:d5:ca:93:ae:8d:bd:32:65:d4:
38:c7:20:dc:88:0c:8c:71:6b:60:d6:3c:7a:bd:52:a6:35:7a:
56:05:d5:2a:f8:a1:29:1d:24:d8:88:c5:cd:be:74:ba:f6:3c:
8f:0f:f2:08:98:8d:07:fa:ac:eb:c1:ea:11:be:3a:c1:59:05:
7d:8f:22:b2:a0:86:da:9f:59:17:53:27:36:19:26:23:67:47:
6e:5f:90:5d:20:68:13:f6:5a:5f:05:5a:65:52:39:65:d8:fc:
ef:33:de:a9:73:37:68:c0:f2:88:0d:a1:b4:cf:ac:ac:4f:45:
fc:3a:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org