Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XX2JZZcnt6rMTrTtYCjhbusEiAI.roa
File: XX2JZZcnt6rMTrTtYCjhbusEiAI.roa (raw, json)
Hash identifier: +DyiY4QptjXwaJULA2EDV3hKe0rs4y3TY9CVfVe9K50=
Subject key identifier: 5D:7D:89:65:97:27:B7:AA:CC:4E:B4:ED:60:28:E1:6E:EB:04:88:02
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018B852F109A1A87A414A589015296BDC96A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XX2JZZcnt6rMTrTtYCjhbusEiAI.roa
Signing time: Tue 31 Oct 2023 10:02:16 +0000
ROA not before: Tue 31 Oct 2023 10:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.156.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:2f:10:9a:1a:87:a4:14:a5:89:01:52:96:bd:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Oct 31 10:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d7d89659727b7aacc4eb4ed6028e16eeb048802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1e:a6:3e:15:1f:ca:29:2c:d4:5d:e5:7c:6f:
ce:9c:a5:ce:69:d1:9f:46:27:21:31:97:69:c1:11:
20:b0:37:fd:76:49:ce:ae:2b:d7:3c:73:55:5d:19:
99:31:80:32:84:74:e0:41:21:3f:c6:19:3d:70:fc:
27:58:13:b4:c3:e1:d4:ce:55:55:cc:ca:14:90:26:
ce:58:ef:c1:c7:26:95:9a:39:90:3a:ea:aa:dd:18:
fa:57:c6:8f:51:c9:6f:91:0f:08:75:67:c7:0e:3b:
69:09:01:c0:77:89:41:89:89:da:6a:cb:e7:47:80:
55:47:a7:c2:43:c3:20:21:89:91:36:e6:c1:03:36:
eb:18:90:ec:e2:4f:72:95:5a:8f:3d:86:1e:90:d5:
af:e1:3e:d8:7b:1c:43:fe:2b:f5:1e:0b:9f:f3:df:
a1:d7:f7:92:76:ef:7e:af:c5:72:a6:45:42:bf:7f:
23:91:c0:df:41:3f:dd:20:1b:d4:dc:b3:c5:27:25:
44:c8:bf:10:88:b9:36:c5:62:38:07:a2:a8:f5:9f:
2e:97:3b:11:ae:1b:ba:a7:cb:cc:48:e7:47:7e:0d:
76:b2:1d:17:d6:a6:17:89:b1:82:e0:cf:28:94:7a:
d5:a2:c7:e5:58:a2:f3:ee:b2:ec:48:2b:8f:e7:56:
5a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7D:89:65:97:27:B7:AA:CC:4E:B4:ED:60:28:E1:6E:EB:04:88:02
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/XX2JZZcnt6rMTrTtYCjhbusEiAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.208.0/21
46.232.64.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
76:20:a4:cb:92:0d:8d:b3:19:79:62:5e:3c:8e:3f:c3:c3:b7:
bf:2e:fa:09:23:0c:80:ee:d3:a6:36:cd:10:e2:dc:29:87:e3:
4c:10:1d:f2:a7:6d:cc:e0:75:6b:5d:ea:d6:2b:d4:85:10:aa:
8f:4b:e8:00:6d:27:9d:91:41:5b:3f:12:1a:c6:25:ca:94:62:
a4:d3:66:c8:50:df:1e:ab:46:fc:b5:41:2e:4e:b2:24:72:bf:
47:28:59:fc:cd:ca:9f:98:8d:a5:20:61:6f:e6:ad:a6:8e:06:
16:7a:71:39:8f:20:b7:bf:01:7a:81:e9:76:34:39:dd:fa:7d:
f6:2e:ae:b4:a6:0c:59:f7:eb:59:be:b7:03:54:e5:1e:85:88:
41:94:31:87:e7:0c:43:8e:3b:e6:95:e9:17:50:4e:6a:a9:a5:
f4:ce:28:80:13:e5:5d:35:12:b5:43:ce:98:e5:d0:3c:0a:7e:
86:47:5e:a0:1b:8e:69:93:e6:2a:82:21:c3:ad:e0:3d:7a:12:
bf:96:d7:49:09:b4:eb:68:7a:d4:88:60:35:b5:7a:2c:26:e9:
48:a2:33:72:b9:b8:7b:8e:bd:9e:2e:20:c5:e3:8b:99:17:ec:
41:c5:5f:55:b8:4d:58:40:ea:68:43:5f:c7:6a:8e:6a:5b:40:
95:09:69:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org