Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aAOESn8x9Smegwn0HnscOb2peJ4.roa
File: aAOESn8x9Smegwn0HnscOb2peJ4.roa (raw, json)
Hash identifier: pT0qLVCybBCeVRgpp/1mLgSpyHULaJUwDhy7n0dpWpg=
Subject key identifier: 68:03:84:4A:7F:31:F5:29:9E:83:09:F4:1E:7B:1C:39:BD:A9:78:9E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01889F5BE6478A7B22C88D5B4077B48124BC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aAOESn8x9Smegwn0HnscOb2peJ4.roa
Signing time: Fri 09 Jun 2023 08:53:00 +0000
ROA not before: Fri 09 Jun 2023 08:53:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.70.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.24.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.25.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.94.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:5b:e6:47:8a:7b:22:c8:8d:5b:40:77:b4:81:24:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 9 08:53:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6803844a7f31f5299e8309f41e7b1c39bda9789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:09:3c:33:3e:cf:69:50:8d:43:93:e2:56:
67:a3:ea:f9:9a:95:b8:56:f4:b1:2f:21:12:a1:24:
f6:61:ef:51:cb:7b:2b:2c:04:73:a6:7b:c0:d4:72:
39:68:12:71:26:ac:93:ae:1f:96:05:ed:1d:17:6b:
1a:58:2e:0e:3d:d9:8e:50:a8:cf:e4:ce:a4:02:10:
53:61:b1:a8:8b:38:01:c4:55:0e:b4:06:88:d3:41:
c2:a0:75:9c:97:d9:ae:9e:4a:17:ee:9d:d3:ef:16:
f2:3b:30:76:1d:3f:23:cc:7a:77:e8:52:a6:9d:00:
47:7a:f7:76:de:a1:55:ec:c6:ab:c4:82:8a:5d:4f:
f0:60:bd:e3:8e:ab:7f:0b:0e:b3:65:c2:63:1c:26:
43:0e:2b:a5:37:2d:3e:72:2e:db:a1:44:a0:f6:ec:
3b:2a:e7:a3:85:eb:bc:2b:03:99:b2:78:51:3d:7a:
5c:1d:34:9e:cf:2a:98:2c:87:20:83:56:4f:12:9f:
f4:da:b0:55:c9:4f:c5:48:ff:55:18:ba:36:cb:d0:
fd:f5:6c:b5:f0:11:b4:04:c4:a0:35:0a:90:fc:dd:
6f:c4:f5:aa:51:8c:eb:f5:b5:f7:8e:25:09:33:d6:
7f:93:a8:24:54:a1:87:72:06:5e:38:82:27:0e:5a:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:03:84:4A:7F:31:F5:29:9E:83:09:F4:1E:7B:1C:39:BD:A9:78:9E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aAOESn8x9Smegwn0HnscOb2peJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.33.0-46.3.35.255
46.3.37.0-46.3.39.255
46.3.64.0/20
46.3.93.0-46.3.95.255
46.3.148.0/22
46.3.204.0/24
46.3.224.0/22
46.232.24.0/21
46.232.80.0/20
149.126.192.0/24
149.126.197.0/24
149.126.200.0/24
149.126.207.0/24
149.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a0:e3:5e:a2:59:b2:6a:cc:34:e1:59:ff:2b:05:42:67:d2:
15:e0:8b:24:c1:a0:1f:5e:cd:9a:7a:33:54:81:c0:5c:0f:80:
5b:6b:49:13:c0:57:af:79:15:de:f8:ff:e6:de:ef:be:7c:37:
4a:f0:4d:5d:4b:88:25:f7:2c:08:1f:da:d8:71:a5:a0:94:3c:
60:fb:05:c8:15:62:28:4f:23:4a:2a:78:85:0a:28:2b:02:80:
92:c2:31:73:44:87:37:4b:76:96:ce:de:47:69:9d:fa:c9:ca:
21:6d:4a:d3:ba:18:d0:ec:b0:0c:4f:f5:c4:9f:97:0c:64:26:
3b:40:0d:c4:bb:65:e9:76:53:bf:a7:aa:94:82:75:30:9c:95:
17:90:69:5e:43:66:8c:ce:33:d4:08:ab:db:19:43:fd:c9:40:
34:e2:47:5b:c9:22:cd:53:24:cd:65:36:90:3e:ec:9e:fe:ba:
ee:b0:6c:69:e9:6b:3d:9b:3f:4f:6e:43:88:c4:16:b6:46:9c:
89:e7:fc:c2:6d:ac:1b:7e:d7:00:e2:d4:70:3b:15:26:a5:8e:
18:c1:77:ec:17:a4:13:ad:2b:e0:18:30:bc:81:4a:10:9e:b0:
95:6e:fb:bd:bc:6b:7a:8e:7d:6f:94:7e:15:5b:c1:96:27:5d:
67:ca:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org