Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gpOMVY5GIr32z5_dvwhWGTsF8oQ.roa
File: gpOMVY5GIr32z5_dvwhWGTsF8oQ.roa (raw, json)
Hash identifier: avSM7fpj/L31oucQH7Vb+pobgMAS2iaREFt9tINivII=
Subject key identifier: 82:93:8C:55:8E:46:22:BD:F6:CF:9F:DD:BF:08:56:19:3B:05:F2:84
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CD9E0F715D8C94521F2659F6506B364E
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gpOMVY5GIr32z5_dvwhWGTsF8oQ.roa
Signing time: Fri 10 Mar 2023 22:22:13 +0000
ROA not before: Fri 10 Mar 2023 22:22:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 46.232.0.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:9e:0f:71:5d:8c:94:52:1f:26:59:f6:50:6b:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:22:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82938c558e4622bdf6cf9fddbf0856193b05f284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:24:be:39:c2:cc:29:1e:09:a1:35:e5:3d:
33:59:ee:2e:86:6c:f3:73:a1:5f:0f:71:9d:af:e4:
27:50:5a:0e:63:b9:01:72:2a:ba:f8:0b:c6:4b:2d:
64:98:a3:72:b0:d6:3f:06:df:c6:46:5b:c2:69:13:
4a:18:30:58:b4:db:1e:cd:50:cf:46:b7:98:02:a4:
77:09:39:e1:fb:56:bf:fd:6c:99:2d:a3:69:cc:2d:
98:0b:20:43:03:9d:d1:d3:f0:39:ad:86:b0:77:2d:
31:3c:68:16:d0:df:bc:3f:5a:61:67:4a:e7:5f:46:
27:69:b1:d0:51:11:c2:a4:7d:d8:56:45:38:74:b3:
7b:b6:44:b5:9a:03:c2:42:98:08:0a:e8:bd:33:35:
84:60:f9:6d:48:c2:bd:6e:77:84:5a:61:bf:85:75:
86:7c:4c:a2:b0:e1:7d:f5:3c:1c:9e:ab:20:2e:85:
b3:23:bc:0b:60:d3:92:80:5f:bc:ac:40:31:eb:a5:
bb:fd:3d:a8:54:f0:b1:b9:55:ff:a2:47:2a:ff:8b:
fa:c3:f7:f6:e0:93:85:8d:3c:f6:da:18:2a:21:3b:
eb:df:62:1c:c8:c7:e3:5b:74:a5:ca:ce:d5:a2:29:
34:48:4f:46:7a:bb:92:58:10:6c:4b:22:82:60:ad:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:93:8C:55:8E:46:22:BD:F6:CF:9F:DD:BF:08:56:19:3B:05:F2:84
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/gpOMVY5GIr32z5_dvwhWGTsF8oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.238.0/24
46.232.0.0/24
149.126.197.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2c:a0:bf:15:a2:9c:57:aa:af:4d:b9:88:10:80:8c:c8:03:
9a:bc:18:1a:60:dd:21:55:91:80:36:a4:85:64:ad:52:3f:67:
ef:2c:a5:87:f2:bc:b9:d7:65:73:db:2b:39:08:4c:5d:ab:d6:
5d:fb:42:f2:18:a9:88:49:64:f5:4d:25:b6:f0:03:20:1e:b6:
90:b2:09:35:84:7e:63:74:37:b1:43:ed:78:5e:33:36:69:76:
aa:64:85:e1:4d:b3:27:e5:d5:d5:1f:fe:3e:32:34:a5:a4:90:
ea:7e:a7:cf:8c:b3:5e:1e:4b:99:91:fa:4a:1f:e7:6f:07:77:
e7:66:93:4d:c6:cd:0f:ae:5a:c7:3b:17:3d:6d:0e:a2:84:20:
dc:cc:0c:a1:a6:16:34:2c:9e:4a:d0:74:dc:51:1e:01:3a:8b:
98:1a:f4:2c:38:0b:f8:a2:be:f7:bb:7f:87:5a:0d:a1:70:0b:
72:13:1b:cd:de:5c:53:33:8f:69:9d:4f:79:9d:37:bd:be:00:
a3:ea:da:49:5b:0d:63:64:68:14:fe:70:9e:f3:ac:ce:f0:17:
13:d7:08:71:26:ed:c0:cc:84:96:ba:1a:fc:11:34:50:3c:aa:
3e:cd:11:7a:e6:ea:cf:57:df:e6:bc:ea:a4:c1:ff:93:d2:bc:
de:49:fb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org