Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Yd3RG1J0G6zIWhaLxWi_etvurlw.roa
File: Yd3RG1J0G6zIWhaLxWi_etvurlw.roa (raw, json)
Hash identifier: EA4n77nI3C7gB+SyWlpbqC694eQLLlUDiU3DH9hJCUw=
Subject key identifier: 61:DD:D1:1B:52:74:1B:AC:C8:5A:16:8B:C5:68:BF:7A:DB:EE:AE:5C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188A971E00B8B53626C4D3B0E92DFF4F05D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Yd3RG1J0G6zIWhaLxWi_etvurlw.roa
Signing time: Sun 11 Jun 2023 07:53:12 +0000
ROA not before: Sun 11 Jun 2023 07:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:71:e0:0b:8b:53:62:6c:4d:3b:0e:92:df:f4:f0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 11 07:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61ddd11b52741bacc85a168bc568bf7adbeeae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:6e:26:c2:b2:29:a7:95:80:e5:31:1f:61:
84:fb:54:47:a5:d9:b5:07:2b:a4:9e:41:80:e2:f2:
d5:fa:cd:41:a6:2d:6d:23:22:5f:cd:e8:ba:ab:fe:
e5:ce:8f:1b:3f:e7:55:50:12:1a:11:75:44:1c:7b:
1c:63:d7:20:ad:57:a2:8d:34:20:95:a1:af:61:63:
7d:03:40:ed:c8:8a:a8:6f:fb:04:07:52:6a:75:4f:
7f:46:c5:4d:a1:bc:93:08:a7:57:50:6a:d8:43:ee:
a4:9c:26:07:e1:2e:92:1b:9a:ca:e8:6e:3d:79:8e:
cf:77:2c:2b:7c:aa:2b:f8:be:5f:26:3c:e7:cb:b5:
a8:35:09:bb:ff:9c:cd:7c:97:20:7b:68:c6:0a:0c:
f6:4c:5e:05:93:9d:9c:da:c7:1c:f9:82:a1:ab:28:
53:8e:d8:eb:89:a8:6e:a1:13:97:90:cc:80:ed:2d:
96:92:10:49:b7:ea:f8:33:b5:68:fa:51:68:31:9c:
59:76:8b:e7:b6:c2:8b:74:3c:af:c5:25:d8:87:a6:
0a:e1:ed:e3:1f:1b:bd:77:cd:ab:07:2f:b5:a1:90:
03:32:90:57:32:ad:05:ca:42:84:1b:39:1a:66:fc:
56:ca:ad:4a:b7:4e:1b:40:17:a1:82:52:86:50:4f:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DD:D1:1B:52:74:1B:AC:C8:5A:16:8B:C5:68:BF:7A:DB:EE:AE:5C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/Yd3RG1J0G6zIWhaLxWi_etvurlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.152.0/22
46.3.238.0/23
149.126.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:a9:f7:d5:98:f6:81:11:45:6f:76:46:d2:5a:5f:c7:2c:90:
30:2f:61:46:b2:3b:f9:a4:b8:ac:d1:fd:8b:04:1c:38:04:85:
1c:34:11:e2:be:61:d3:c6:9a:2f:51:f9:39:d9:b4:f9:ab:09:
78:e3:e7:93:b0:46:39:8f:48:f2:e6:a6:3b:8f:01:5e:d5:89:
ce:79:d3:8c:42:41:70:c2:bf:4f:96:20:d7:19:bf:90:bb:47:
77:7a:29:33:33:dd:12:d1:0e:18:72:4a:f2:3e:ba:f0:a8:10:
a1:5b:31:3c:8c:b6:bf:d2:60:31:5e:a6:dd:74:92:4d:77:e7:
b2:8c:c2:1b:83:0e:b9:79:de:fa:13:5c:bb:f2:3b:83:83:91:
39:fe:55:2a:55:46:f0:df:63:df:5e:fe:4c:58:68:36:ae:14:
57:df:29:f1:9f:b9:0d:8e:13:4c:0a:d1:63:fb:07:ec:c8:7d:
3e:48:a0:da:45:19:bb:74:2e:f5:91:18:cb:5c:c0:aa:c0:e5:
6d:b3:7c:5e:b7:99:2f:21:12:d2:14:2c:a9:5b:9d:89:5c:4a:
0f:d7:4f:dd:8f:65:7b:34:9f:01:64:25:e7:45:6e:e5:0b:2c:
66:95:95:84:9e:b3:52:39:8c:24:30:dd:9d:e6:9c:cd:22:1e:
46:46:b9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org