Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aa5vdxmB7kp_ZIUOTyXDhUEH5Ew.roa
File: aa5vdxmB7kp_ZIUOTyXDhUEH5Ew.roa (raw, json)
Hash identifier: wYVDLwfZfanpMlOlJIrSJgVrqqSNlVERt7PfPqc6gtY=
Subject key identifier: 69:AE:6F:77:19:81:EE:4A:7F:64:85:0E:4F:25:C3:85:41:07:E4:4C
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0189F44064903E5479653B4D461D9756FB21
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aa5vdxmB7kp_ZIUOTyXDhUEH5Ew.roa
Signing time: Mon 14 Aug 2023 13:33:27 +0000
ROA not before: Mon 14 Aug 2023 13:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48024
IP address blocks: 46.232.56.0/21 maxlen: 24
46.3.96.0/22 maxlen: 24
46.3.100.0/24 maxlen: 24
46.3.102.0/24 maxlen: 24
46.232.6.0/24 maxlen: 24
46.3.104.0/22 maxlen: 24
46.3.103.0/24 maxlen: 24
46.3.0.0/22 maxlen: 24
46.3.108.0/22 maxlen: 24
46.232.48.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:40:64:90:3e:54:79:65:3b:4d:46:1d:97:56:fb:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Aug 14 13:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69ae6f771981ee4a7f64850e4f25c3854107e44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c9:35:24:ae:df:f5:51:66:f0:ed:aa:af:cf:
d2:17:fc:73:d4:57:18:46:1d:b4:fd:de:3a:e3:2a:
2c:b2:55:fd:a7:5e:40:0a:94:99:c9:98:56:cd:fb:
37:73:85:c0:c8:cb:c3:48:41:e3:4e:9a:39:99:54:
1b:03:57:c8:68:23:44:83:4c:9b:90:d3:bf:1c:ae:
6d:0e:a2:ec:bc:78:e9:1d:b2:3d:6f:28:30:9c:8b:
40:42:62:86:9b:94:d7:32:5b:5d:1c:f3:dd:30:8c:
c9:73:28:6a:75:f9:f6:11:e9:a3:a5:08:9f:51:59:
5e:ce:a6:a2:6f:b1:18:74:c2:bd:d7:a5:2e:17:69:
c6:63:9d:c0:25:28:fd:a8:23:28:8f:b7:72:ef:6e:
46:b7:b2:dc:76:0b:7d:0e:6a:04:4e:c5:cb:7a:90:
15:f6:42:79:2e:9b:ee:fb:cd:7c:79:48:2b:03:7e:
eb:b0:1c:a4:79:90:c3:b1:a0:46:c4:9b:50:99:7f:
c7:ff:71:41:38:78:d8:44:7c:4a:f2:8f:53:eb:7f:
1a:69:a3:e2:b6:e1:b8:c7:d3:da:1f:72:6c:bf:41:
77:4b:0f:20:06:b7:19:f4:4c:a5:cc:5d:eb:24:69:
9e:96:82:3b:c2:55:61:4f:9b:5a:53:2e:82:03:b8:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AE:6F:77:19:81:EE:4A:7F:64:85:0E:4F:25:C3:85:41:07:E4:4C
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/aa5vdxmB7kp_ZIUOTyXDhUEH5Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.0.0/22
46.3.96.0-46.3.100.255
46.3.102.0-46.3.111.255
46.232.6.0/24
46.232.48.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:93:25:c4:c0:bc:8f:5a:51:bc:63:c8:55:15:5d:8a:fb:37:
59:85:7a:cf:4f:ec:40:75:f2:8e:7d:1a:86:b7:c2:ba:26:01:
d5:f6:0e:b4:61:bc:ac:76:82:8e:37:6f:3d:c5:d6:3d:2e:68:
8c:86:86:9c:b2:8f:da:d3:38:c7:9a:6e:e2:f6:b2:d9:4d:d5:
ee:e3:b1:e2:2c:3a:36:f4:1f:04:cd:48:7c:7c:05:e3:ff:d4:
a2:a5:0c:be:3f:61:1f:1f:ee:15:23:e3:68:de:a5:b5:9d:b6:
6e:d6:b6:52:d3:0e:ae:5f:af:c1:47:2b:7b:c5:b1:6c:a1:ea:
2c:6d:17:4a:04:ee:14:7b:de:3f:de:2d:6a:86:38:c8:92:57:
eb:bb:7b:9e:88:21:c2:ff:ac:48:a8:8d:33:d3:b3:99:0c:ff:
17:d4:7f:5b:a6:f0:ea:01:1f:ea:f8:2f:9b:40:1d:e4:59:fe:
16:89:c5:4d:31:e2:c7:3f:28:80:d7:ca:17:2d:d0:fe:fb:a2:
a8:63:09:4d:ea:5e:98:8a:7b:5c:a3:59:c0:08:26:29:78:07:
fe:27:38:3e:22:8e:1a:a8:fe:fd:5f:be:20:5c:51:ff:e2:49:
9d:0d:59:99:23:be:20:2b:fe:0b:7e:00:8e:64:80:ff:56:30:
e2:47:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:59 2024 by rpki-client on console-fra.rpki-client.org