Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZRz7HAn4_d8LxAbzHxytnxxlIP0.roa
File: ZRz7HAn4_d8LxAbzHxytnxxlIP0.roa (raw, json)
Hash identifier: FM1L2AhVdObcrDxVYT4STP3AZGaiBpUrUT/exEmtcWM=
Subject key identifier: 65:1C:FB:1C:09:F8:FD:DF:0B:C4:06:F3:1F:1C:AD:9F:1C:65:20:FD
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188F52BEE806674B374DC38C569B9880EC3
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZRz7HAn4_d8LxAbzHxytnxxlIP0.roa
Signing time: Mon 26 Jun 2023 00:47:56 +0000
ROA not before: Mon 26 Jun 2023 00:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/20 maxlen: 24
46.3.0.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f5:2b:ee:80:66:74:b3:74:dc:38:c5:69:b9:88:0e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 26 00:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=651cfb1c09f8fddf0bc406f31f1cad9f1c6520fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4d:24:28:a7:34:35:74:33:ad:54:2f:b5:5a:
40:ea:ec:6d:0f:2a:b9:7a:34:4e:2e:37:4c:bd:34:
55:de:24:46:09:fb:46:c3:0d:c5:db:62:5a:a6:a6:
66:28:1d:57:32:a7:b3:c6:bc:7b:0e:b8:9f:ae:c7:
50:f2:11:0b:e8:83:b4:63:6e:07:9c:a7:67:1d:ca:
ee:0f:34:46:a4:30:7a:f6:f9:28:77:10:37:e3:6a:
04:16:69:b0:fb:c7:af:61:00:a4:da:a2:f3:53:76:
a8:ac:e3:95:c9:50:7a:a5:08:d5:65:c5:2f:36:9e:
ab:c1:19:14:09:9d:c9:5c:9d:40:c4:5a:92:10:4e:
4c:46:f9:f7:92:90:e9:39:a9:83:d2:8e:63:1d:fa:
b8:70:ef:9a:11:5d:01:1a:d9:98:29:27:ff:26:39:
82:b8:48:91:7b:08:b8:90:53:60:bb:c5:44:51:c6:
a8:ec:94:fc:f4:9d:ae:d3:6f:3e:66:96:83:aa:e0:
ea:c2:e6:d2:4e:7e:64:f1:c5:91:55:b1:62:54:96:
50:f8:f3:02:b7:40:48:94:87:c2:23:be:0a:78:f5:
16:51:11:78:ba:b6:96:07:5c:71:b8:04:a2:a1:7b:
88:1d:be:58:5d:ca:34:55:fb:bd:fd:e2:9f:fb:4b:
56:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1C:FB:1C:09:F8:FD:DF:0B:C4:06:F3:1F:1C:AD:9F:1C:65:20:FD
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ZRz7HAn4_d8LxAbzHxytnxxlIP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0/20
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
55:af:a3:f5:05:62:24:49:94:99:63:00:50:a8:ca:c2:13:53:
1a:86:e4:01:e5:93:1a:5d:9e:a7:b0:30:94:4d:fa:17:c9:fc:
39:9b:17:44:a6:89:89:39:d6:02:f4:e3:a4:c3:75:ef:78:0e:
55:38:69:e6:56:33:34:ef:96:45:50:0b:1d:d8:e3:ad:0a:fa:
57:b6:a8:08:10:09:b3:f6:02:20:96:40:40:cd:36:56:a3:82:
81:79:20:31:9e:af:cf:e7:77:ac:79:07:91:97:09:ec:c1:c1:
1b:20:12:25:12:64:b4:90:be:dd:e7:64:6a:27:7e:53:72:26:
7b:ad:30:de:6e:ee:23:75:b6:9d:c5:a9:64:17:01:00:0c:a0:
ef:f9:a9:a5:ab:03:7e:5e:bd:0c:a9:8b:12:d8:27:32:b9:18:
0a:d1:5b:73:fd:6a:84:32:84:b7:c8:9e:8e:f4:1b:db:19:d0:
c8:1d:56:a0:36:43:ff:95:b8:be:8a:65:1d:33:62:22:16:45:
6d:4c:5d:f1:b4:cc:80:73:3b:6e:9d:d0:9b:ed:3e:43:d2:94:
d7:0b:a5:46:fd:c9:a7:50:52:e2:bb:a4:39:3b:30:df:6a:ae:
a8:4d:c2:33:5f:32:1d:78:b9:ab:5e:ae:a8:76:5e:a2:ce:8f:
84:a2:56:6b
-----BEGIN CERTIFICATE-----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 at Mon Aug 14 13:49:38 2023 by rpki-client on console-ams.rpki-client.org