Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ewy9JqVkEONROtM0Gn89v9B0Ewc.roa
File: ewy9JqVkEONROtM0Gn89v9B0Ewc.roa (raw, json)
Hash identifier: Tw4xJMfFuHd0T1pkHzMX7WPlltB56tR9NX1Mf8ReJ/M=
Subject key identifier: 7B:0C:BD:26:A5:64:10:E3:51:3A:D3:34:1A:7F:3D:BF:D0:74:13:07
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01883466E7245798293993D1784528350696
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ewy9JqVkEONROtM0Gn89v9B0Ewc.roa
Signing time: Fri 19 May 2023 14:25:38 +0000
ROA not before: Fri 19 May 2023 14:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.135.0/24 maxlen: 24
46.232.64.0/21 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.204.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:34:66:e7:24:57:98:29:39:93:d1:78:45:28:35:06:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 19 14:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b0cbd26a56410e3513ad3341a7f3dbfd0741307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:a1:52:14:fc:18:9a:4f:f4:63:3d:6d:ad:
52:df:6c:5e:6d:a8:1f:e3:1e:83:15:36:bc:ed:bc:
86:1d:9a:b4:fc:ce:df:6e:2e:b3:4d:e5:4e:38:95:
7b:ad:77:6b:17:41:cb:47:f1:b5:b6:1e:c9:3e:e3:
05:84:b7:b2:20:ef:a2:00:c7:b8:b7:db:38:24:21:
f0:0c:89:77:96:7a:8e:cd:8d:85:73:e0:18:d3:7d:
45:5f:8c:9e:c3:b5:9e:9b:04:7b:5d:8d:13:8a:ed:
58:2a:81:e5:49:c5:b7:62:e4:04:8f:06:2e:5a:a8:
76:2e:6c:a3:d7:0d:d0:1e:42:5c:cb:9e:8c:75:d6:
44:f1:03:68:a4:34:9d:31:6f:ea:3e:24:f9:ef:45:
3e:5e:e9:b9:03:d7:16:01:3e:65:49:1f:19:cf:65:
4d:05:ae:ae:88:18:c0:fa:f7:3f:fc:3e:16:ef:0c:
6c:62:69:42:52:71:dc:0c:3f:63:9c:07:b8:5f:82:
35:e1:2b:14:f1:ca:d6:e3:23:d9:26:ec:3e:61:fe:
a0:8e:e6:79:77:22:3a:2c:80:9e:02:c4:03:c1:f3:
e2:ba:17:46:81:63:54:6a:36:a4:d8:34:0e:3c:dc:
3f:44:bb:4a:f9:fd:99:0d:f0:e5:78:a0:40:08:4c:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0C:BD:26:A5:64:10:E3:51:3A:D3:34:1A:7F:3D:BF:D0:74:13:07
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/ewy9JqVkEONROtM0Gn89v9B0Ewc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.204.0/24
46.3.208.0/21
46.232.64.0/21
149.126.200.0/24
149.126.203.0/24
149.126.215.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
11:45:2a:da:2b:9e:59:95:66:06:e4:c8:1c:6b:78:73:95:b7:
c0:6f:94:04:d1:9f:6b:2e:09:98:18:f6:2c:be:2c:03:df:bc:
73:d5:b2:6b:07:e6:8d:73:72:2d:de:7d:bb:a2:07:23:03:d5:
60:0c:4a:55:c0:1d:61:5d:9b:a4:9e:29:57:1e:56:9a:df:b8:
af:63:0a:34:bc:20:ec:73:ca:ff:ea:d5:8f:53:48:9f:23:47:
d3:d2:4e:fb:d9:ed:53:8f:48:d0:e5:28:2f:06:85:b0:e5:65:
b3:4b:9c:73:b5:d1:8f:85:7c:27:f4:a6:b9:51:4b:09:b4:ac:
31:24:4c:f9:62:a1:24:57:a1:37:0b:71:7c:66:36:44:ac:be:
18:ec:69:58:8c:83:5e:bf:bb:3b:ff:7a:5e:ad:a1:1b:7b:cf:
06:56:00:e0:50:30:25:9d:36:ea:40:71:e9:a9:47:bd:89:1c:
e2:56:a9:41:8f:ed:80:e4:05:c2:8c:5e:5d:e4:64:12:ee:1a:
d5:84:d1:48:b5:b5:50:e9:17:c4:52:eb:c5:0b:c2:1d:a5:13:
33:2d:c2:52:0b:46:9f:0c:f0:7d:35:6f:ba:e5:73:ef:e9:3b:
5d:3d:eb:97:c2:9a:8b:5f:0c:78:06:83:80:c8:c6:cd:32:2c:
df:90:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org