Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fiPlZT8jNksydwrAsYI-31WQmGs.roa
File: fiPlZT8jNksydwrAsYI-31WQmGs.roa (raw, json)
Hash identifier: kUIfVHN4gG7O5uo/ncl7J3lPq34242qCZt/ZSa/D+Nc=
Subject key identifier: 7E:23:E5:65:3F:23:36:4B:32:77:0A:C0:B1:82:3E:DF:55:90:98:6B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E71FDEEFB6BD5C1C7DCEA31181EEA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fiPlZT8jNksydwrAsYI-31WQmGs.roa
Signing time: Tue 02 Jan 2024 08:33:30 +0000
ROA not before: Tue 02 Jan 2024 08:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.246.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 07:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:71:fd:ee:fb:6b:d5:c1:c7:dc:ea:31:18:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e23e5653f23364b32770ac0b1823edf5590986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:18:5a:41:25:8d:4b:e3:69:d1:1c:e4:4c:
72:c9:15:36:f3:ab:6b:1f:74:5b:0d:50:89:e1:f4:
d3:07:71:40:c5:ed:fb:bd:67:22:8d:fd:9f:92:e4:
9f:f6:9a:7c:b1:d0:7c:e0:38:4b:ad:4e:0b:ba:79:
a7:03:c9:6a:47:91:15:03:0e:dd:93:bc:2b:b0:77:
30:b9:e5:97:26:b5:d3:d7:71:62:fc:0d:63:4e:a3:
cd:f6:6c:91:87:ff:51:44:b9:c0:3c:72:40:d5:9d:
4f:48:83:73:e4:da:af:d4:0d:1f:d8:37:c1:b1:83:
86:32:fd:9c:f3:5c:ab:bd:41:56:68:e6:df:c1:20:
47:79:a4:95:47:9a:cf:ad:14:54:41:d5:ed:07:40:
93:98:de:da:b3:54:35:1b:b8:fd:9b:16:fa:e3:72:
87:21:02:e0:a8:d4:bf:69:be:6e:b3:ee:a5:77:08:
04:5d:ee:ca:62:c1:25:6e:b8:45:00:e7:82:31:c1:
5d:f9:a7:57:df:00:56:44:93:ae:88:90:69:31:e9:
7e:e0:c0:fb:a3:29:f9:3f:65:b3:3c:a0:e5:55:34:
98:f2:d4:a5:15:a6:de:28:4c:3b:ab:6c:97:66:6b:
33:0b:2e:9a:ad:7d:da:fc:ff:91:52:19:bb:63:38:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:23:E5:65:3F:23:36:4B:32:77:0A:C0:B1:82:3E:DF:55:90:98:6B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/fiPlZT8jNksydwrAsYI-31WQmGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.188.0/24
46.3.190.0/23
46.3.200.0/23
46.3.220.0/23
46.3.230.0/23
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0/20
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d8:c3:a6:ea:51:e5:f7:a8:69:e3:03:83:d0:4b:80:27:1e:
55:cb:00:02:19:0d:b9:61:7e:2c:00:8f:25:75:4f:3b:70:d7:
fb:a4:f2:c0:8b:4b:02:38:70:37:e0:cd:e6:ee:6d:01:ae:7e:
23:ac:10:24:cb:aa:da:71:39:d3:f4:00:65:31:4f:ee:ef:a4:
f0:6f:52:a6:0a:72:fe:a8:75:37:8e:81:f9:d2:fb:10:59:66:
50:13:46:e4:77:83:24:c1:a3:71:c5:b5:a9:9a:9a:62:5f:4a:
9e:cc:4a:cb:e1:c1:46:97:61:33:bf:fd:38:1a:27:45:f9:04:
c8:7f:57:9d:3f:ca:43:f5:cc:fa:e4:08:8a:ec:56:a8:e6:ae:
d9:41:7a:93:8d:2d:68:4d:85:81:fd:e8:1d:98:fb:1d:6b:79:
dd:8b:e4:bc:a2:79:1a:44:66:7e:1d:53:ce:6e:16:e7:ad:e9:
f5:c6:a2:2a:70:52:41:8c:2e:9f:0d:6f:b4:2c:6c:30:44:d1:
c1:10:aa:de:f6:f5:f7:25:d4:c8:24:6c:04:b6:c7:2c:6c:16:
99:25:8d:2b:1b:ef:0b:a0:0f:8f:38:bc:e8:5b:17:eb:0e:4c:
4c:a7:be:5e:f6:21:60:de:d8:02:3b:c1:e9:3a:1c:08:a5:75:
ff:7e:fd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 11:47:50 2024 by rpki-client on console-ams.rpki-client.org