Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gbcbf8oc75yoc-JBen3RfMyPJI8.roa
File: gbcbf8oc75yoc-JBen3RfMyPJI8.roa (raw, json)
Hash identifier: /eqbLU6q0yynTvsSHWD9FlXHwnZR5/k5yQMgg1gCaKo=
Subject key identifier: 81:B7:1B:7F:CA:1C:EF:9C:A8:73:E2:41:7A:7D:D1:7C:CC:8F:24:8F
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01890111493AB9B706FFF2A40F2104AA3C95
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gbcbf8oc75yoc-JBen3RfMyPJI8.roa
Signing time: Wed 28 Jun 2023 08:14:17 +0000
ROA not before: Wed 28 Jun 2023 08:14:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.246.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:01:11:49:3a:b9:b7:06:ff:f2:a4:0f:21:04:aa:3c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jun 28 08:14:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81b71b7fca1cef9ca873e2417a7dd17ccc8f248f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:2a:e3:2d:89:95:c7:dc:62:05:bb:33:0e:
06:b0:b1:62:0e:1e:1c:7f:0a:3f:34:83:cb:67:5a:
3d:89:ff:47:62:0f:86:14:76:19:0a:8a:67:94:b5:
0a:8d:57:43:77:11:dc:c2:95:97:a2:40:67:0f:03:
f1:46:85:4e:8a:38:92:8b:b2:17:4f:28:cc:9d:3c:
ef:0d:54:d6:66:9d:c7:bc:7f:bd:9f:99:88:c0:00:
bf:89:be:21:f8:20:3d:47:37:f7:6f:e9:1b:f9:9a:
a3:53:93:03:20:21:44:e7:02:f4:61:89:6b:36:91:
88:44:69:6e:ed:7a:ba:db:fc:54:37:a9:35:48:fc:
4b:81:dc:23:90:03:ae:dc:aa:ee:78:4e:39:95:63:
ec:e7:91:19:f6:c7:5a:eb:c3:eb:d2:41:a9:61:47:
9b:f6:00:94:0e:1b:d9:a8:09:00:46:c6:1c:66:78:
d1:ab:17:91:92:e3:e1:1b:8d:d4:0f:79:b5:c5:b3:
f8:e5:92:85:c9:38:f6:91:ef:26:dc:01:05:e4:fe:
21:66:0f:ce:27:53:fa:b9:36:cc:4b:72:80:a2:c4:
7f:e4:58:6a:b5:b8:c4:52:d2:14:a4:a3:84:a8:ad:
16:9e:3f:d6:65:94:41:73:9e:7f:05:ff:b6:2c:7f:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:B7:1B:7F:CA:1C:EF:9C:A8:73:E2:41:7A:7D:D1:7C:CC:8F:24:8F
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gbcbf8oc75yoc-JBen3RfMyPJI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0-46.3.202.255
46.3.220.0/23
46.3.230.0/23
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0/20
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
94:26:6c:12:e9:fd:9d:37:59:d5:d7:f5:a1:2f:67:81:5a:6c:
6f:6e:26:e4:24:5c:b0:72:b8:f1:13:ec:eb:24:36:e6:df:d8:
ef:2e:ba:89:aa:9c:b5:67:24:4c:9e:91:57:a3:43:71:0f:d5:
6b:74:64:10:2d:29:d9:d0:33:c6:ba:cb:a8:fe:a7:db:1e:07:
36:2c:3c:df:08:24:21:6e:68:24:c9:d6:be:28:b5:74:56:b1:
43:f3:f2:6a:61:70:9a:3f:ce:1c:b1:dd:eb:6e:0b:9d:13:83:
17:9c:80:76:e3:c7:01:99:79:3d:97:f8:a3:be:50:41:7f:7b:
4a:3f:dc:75:b7:f5:c0:3f:02:36:f0:10:00:3c:80:3a:34:0e:
79:1b:ea:f8:49:b0:96:42:48:36:e5:b7:49:fc:6c:9a:79:13:
4e:ef:3f:3c:a2:e6:a1:c6:63:b6:3a:90:1b:71:45:eb:28:da:
1c:46:b1:da:04:d8:2c:45:85:ae:71:86:82:b1:22:aa:1d:25:
07:7e:c3:ce:27:cc:a5:ce:a2:d5:7a:88:99:ec:f5:3a:61:a1:
f6:6d:70:c4:83:c5:62:f8:12:4d:94:a0:54:18:d9:e5:65:32:
31:3e:db:9b:63:75:ca:f5:b4:1e:24:c1:ff:7a:17:04:1c:fe:
60:a9:e2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org