Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gGrQbUlg8lAUxrt3jZ7lYNKSHnM.roa
File: gGrQbUlg8lAUxrt3jZ7lYNKSHnM.roa (raw, json)
Hash identifier: DwgWlfuM+p6XAzAnILHo+hN+JKPDWaI1piU14yY46Zw=
Subject key identifier: 80:6A:D0:6D:49:60:F2:50:14:C6:BB:77:8D:9E:E5:60:D2:92:1E:73
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0188354528FD60D2B4684297433C5E7045C9
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gGrQbUlg8lAUxrt3jZ7lYNKSHnM.roa
Signing time: Fri 19 May 2023 18:28:24 +0000
ROA not before: Fri 19 May 2023 18:28:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62
IP address blocks: 46.3.92.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:35:45:28:fd:60:d2:b4:68:42:97:43:3c:5e:70:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 19 18:28:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=806ad06d4960f25014c6bb778d9ee560d2921e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:fb:30:c2:0a:aa:79:4b:41:a0:ce:40:25:
4e:70:07:e7:9f:8b:bf:33:49:f1:be:de:2e:49:19:
58:95:77:12:d0:3b:fd:34:37:b5:30:27:f3:59:d4:
bc:0d:19:3b:45:dd:67:84:de:f5:28:f0:0b:29:54:
fd:9b:c9:d9:79:bd:92:bc:22:46:0a:20:86:19:c0:
2b:19:c1:05:c6:f3:f0:35:94:50:f7:14:90:ac:2e:
45:94:95:21:46:7e:90:02:00:a2:39:4d:a0:23:c7:
0e:1e:b3:bc:88:b4:3b:cb:a6:aa:ba:41:5b:d7:bd:
1e:f9:90:96:ab:73:79:6f:98:97:ae:08:24:03:9b:
da:71:08:5d:c1:b5:24:d2:c3:e4:29:27:3f:cf:c8:
5d:39:80:ed:01:7a:8c:be:50:68:46:0f:82:6d:45:
29:06:0b:c6:90:b7:2f:89:17:80:64:df:50:72:5b:
59:78:5c:13:0b:4e:8d:61:e6:06:d2:80:91:11:21:
8e:24:59:c8:8c:4f:dd:0d:fa:62:e9:6b:8f:24:6f:
9d:2d:aa:f2:83:54:9a:6f:29:66:41:48:81:a1:a9:
da:28:c7:4c:1b:41:0f:00:4f:f3:97:2c:dd:b0:c8:
bf:d4:3d:b3:af:1a:6f:1d:4e:dc:0b:a7:d0:a0:04:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6A:D0:6D:49:60:F2:50:14:C6:BB:77:8D:9E:E5:60:D2:92:1E:73
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gGrQbUlg8lAUxrt3jZ7lYNKSHnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.25.0/24
46.3.32.0/24
46.3.36.0/24
46.3.92.0/24
46.3.203.0/24
149.126.207.0/24
Signature Algorithm: sha256WithRSAEncryption
21:1f:06:7e:54:0c:0f:74:bf:64:5b:ab:a1:76:b7:67:b0:83:
5e:67:57:4d:96:86:48:f1:ee:26:c3:05:1d:04:47:8f:10:19:
05:16:ed:ac:a8:81:ed:6c:50:5e:3b:87:da:5e:40:e0:bf:6c:
88:f2:90:a5:81:b7:31:14:0f:88:ea:01:5c:68:6e:24:6f:d2:
6c:56:c6:1e:47:4d:3d:d5:00:0e:90:d2:f1:35:b2:47:2b:25:
4a:eb:17:6e:4e:61:79:63:50:46:69:20:2b:44:21:a8:7b:59:
83:b1:5e:a9:1f:89:9a:3a:30:33:af:36:eb:c1:10:a5:f2:c1:
89:fa:83:3f:5c:51:6b:8e:a4:aa:b8:82:a5:12:f1:9b:7d:07:
db:1c:7a:25:65:90:fe:6e:89:4e:48:0b:d6:8b:2e:a7:80:fd:
08:af:16:a1:ee:57:98:86:d4:38:48:33:c4:2d:72:e8:d3:2e:
6a:3e:eb:09:8d:73:c4:d1:cb:97:76:91:5c:b0:26:97:ac:d2:
e4:0f:d9:d5:ff:f1:44:58:72:36:10:53:7d:94:54:e5:c5:61:
cb:70:05:63:6c:be:cd:96:81:18:b0:6e:cd:f5:a6:37:74:8b:
34:ca:26:59:68:84:cb:87:60:57:db:2f:98:1f:9a:7f:04:51:
1b:72:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org