Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fZDW0pWDZKhhuivIzMMQt1KADKQ.roa
File: fZDW0pWDZKhhuivIzMMQt1KADKQ.roa (raw, json)
Hash identifier: iy1rsRKKZGyD38FmXjEw4LkBU3E8ik9UD8f3fTp7YNI=
Subject key identifier: 7D:90:D6:D2:95:83:64:A8:61:BA:2B:C8:CC:C3:10:B7:52:80:0C:A4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0185719563961046D36BC92595F4C4AB235C
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fZDW0pWDZKhhuivIzMMQt1KADKQ.roa
Signing time: Mon 02 Jan 2023 08:24:53 +0000
ROA not before: Mon 02 Jan 2023 08:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398083
IP address blocks: 46.3.80.0/21 maxlen: 22
46.3.216.0/21 maxlen: 22
46.3.224.0/21 maxlen: 22
46.3.120.0/21 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:63:96:10:46:d3:6b:c9:25:95:f4:c4:ab:23:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d90d6d2958364a861ba2bc8ccc310b752800ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:95:76:87:e2:a5:e9:fe:1f:a1:e5:a7:eb:
5d:f2:d7:95:6c:c2:ee:34:1c:6b:f6:6a:65:84:5d:
f7:25:d4:d7:1e:36:13:76:fd:96:93:6f:1d:c9:42:
94:88:9c:6f:b9:0a:98:f6:00:70:8a:1c:85:bb:b9:
9b:93:a1:98:24:a9:74:fa:09:58:ff:1d:d6:ab:6a:
a8:cc:48:11:17:2a:3e:f0:b2:04:76:6d:0a:bb:52:
bf:e4:9f:c3:12:d8:2a:3b:de:4c:fd:19:77:cf:65:
04:fc:09:30:d3:5c:92:9c:06:a3:91:a4:e2:cc:e5:
0f:6d:f6:64:b6:23:3f:64:75:a9:28:87:dd:7b:9e:
1e:5e:df:ef:1b:32:ce:10:20:f5:b7:41:cc:5d:4e:
1b:1d:27:90:a1:76:7f:5e:a4:18:f4:63:84:af:fa:
bb:5f:6a:de:21:12:db:4a:2c:e0:d0:a6:d1:7b:d8:
29:99:d5:30:f8:a9:fd:3b:b3:01:9d:66:bd:68:53:
48:48:24:00:b5:6c:f4:01:11:c1:72:3f:72:e5:67:
60:c9:f3:1f:49:ca:41:f5:be:ca:99:7e:f6:f7:6b:
6b:81:b6:61:35:40:35:0b:da:3d:4e:5b:ad:12:07:
18:1c:b7:03:d5:6e:c7:11:a3:70:28:59:9d:ad:db:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:90:D6:D2:95:83:64:A8:61:BA:2B:C8:CC:C3:10:B7:52:80:0C:A4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fZDW0pWDZKhhuivIzMMQt1KADKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/21
46.3.120.0/21
46.3.216.0-46.3.231.255
Signature Algorithm: sha256WithRSAEncryption
8b:6a:f5:e5:17:29:64:73:c1:f3:7c:a5:f5:1f:cb:1d:95:45:
2a:88:7e:a0:49:70:54:3a:6d:db:ad:a5:f6:67:53:df:a8:3b:
66:bf:f6:bb:8d:0d:36:82:d4:1a:33:90:52:b5:2b:c4:e4:5d:
fc:61:27:a1:70:b1:98:07:ed:66:15:cc:87:4c:b0:52:6c:7b:
5d:36:f6:f9:dd:c3:24:5d:6f:47:be:e9:08:24:5b:69:87:c5:
03:2e:73:ba:ad:3d:8c:ca:5e:4d:b6:f5:ea:a4:90:59:3b:4d:
9a:e0:34:28:d5:97:f8:24:1a:e5:bc:54:0b:4a:5d:36:42:df:
99:7a:f7:73:93:b2:82:63:8a:a9:8e:43:14:85:7f:c5:c6:a7:
71:65:b3:f7:25:bc:86:49:59:f8:b1:20:98:b0:44:bc:09:9a:
57:93:82:85:7a:b5:10:f4:21:91:d5:3f:9a:ce:ce:a8:2f:c9:
92:74:ab:20:33:ef:41:e9:74:f5:3d:a1:5b:dc:1c:80:16:35:
3a:e7:49:1c:58:4b:62:0a:14:30:26:37:eb:30:84:37:41:f3:
cb:98:06:55:2d:3e:79:45:b2:51:5b:f7:82:f0:6d:8e:1f:60:
69:3f:43:03:47:7c:d8:b0:10:09:97:85:09:29:ba:48:a2:2f:
45:ae:a0:8d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYVxlWOWEEbTa8kllfTEqyNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDkwZDZkMjk1ODM2NGE4NjFiYTJiYzhjY2MzMTBiNzUyODAwY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/6Vdofipen+H6Hlp+td8teVbMLu
NBxr9mplhF33JdTXHjYTdv2Wk28dyUKUiJxvuQqY9gBwihyFu7mbk6GYJKl0+glY
/x3Wq2qozEgRFyo+8LIEdm0Ku1K/5J/DEtgqO95M/Rl3z2UE/Akw01ySnAajkaTi
zOUPbfZktiM/ZHWpKIfde54eXt/vGzLOECD1t0HMXU4bHSeQoXZ/XqQY9GOEr/q7
X2reIRLbSizg0KbRe9gpmdUw+Kn9O7MBnWa9aFNISCQAtWz0ARHBcj9y5WdgyfMf
ScpB9b7KmX7292trgbZhNUA1C9o9TlutEgcYHLcD1W7HEaNwKFmdrduytwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFH2Q1tKVg2SoYboryMzDELdSgAykMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvZlpEVzBwV0RaS2hodWl2SXpNTVF0MUtBREtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQDLgNQAwQD
LgN4MAwDBAMuA9gDBAMuA+AwDQYJKoZIhvcNAQELBQADggEBAItq9eUXKWRzwfN8
pfUfyx2VRSqIfqBJcFQ6bdutpfZnU9+oO2a/9ruNDTaC1BozkFK1K8TkXfxhJ6Fw
sZgH7WYVzIdMsFJse1029vndwyRdb0e+6QgkW2mHxQMuc7qtPYzKXk229eqkkFk7
TZrgNCjVl/gkGuW8VAtKXTZC35l693OTsoJjiqmOQxSFf8XGp3Fls/clvIZJWfix
IJiwRLwJmleTgoV6tRD0IZHVP5rOzqgvyZJ0qyAz70HpdPU9oVvcHIAWNTrnSRxY
S2IKFDAmN+swhDdB88uYBlUtPnlFslFb94LwbY4fYGk/QwNHfNiwEAmXhQkpukii
L0WuoI0=
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org