Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/haWRUKWeyKMerNzYWSp3tFW4hVE.roa
File: haWRUKWeyKMerNzYWSp3tFW4hVE.roa (raw, json)
Hash identifier: MAwsUGpe/hDGTUkcGxA8xWcIeOKny+1M3OnmrRwF8Mo=
Subject key identifier: 85:A5:91:50:A5:9E:C8:A3:1E:AC:DC:D8:59:2A:77:B4:55:B8:85:51
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01931BA752780654BE5F51AD4C0C90976073
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/haWRUKWeyKMerNzYWSp3tFW4hVE.roa
Signing time: Mon 11 Nov 2024 14:36:10 +0000
ROA not before: Mon 11 Nov 2024 14:36:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209372
IP address blocks: 46.3.10.0/24 maxlen: 24
46.3.11.0/24 maxlen: 24
46.3.12.0/22 maxlen: 24
46.3.20.0/22 maxlen: 24
46.3.31.0/24 maxlen: 24
46.3.48.0/20 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.3.84.0/22 maxlen: 24
46.3.84.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.128.0/17 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.136.0/22 maxlen: 22
46.3.144.0/22 maxlen: 22
46.3.148.0/22 maxlen: 22
46.3.152.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.158.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.3.168.0/21 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.238.0/24 maxlen: 24
46.3.239.0/24 maxlen: 24
46.232.0.0/17 maxlen: 24
46.232.21.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.112.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
80.243.128.0/20 maxlen: 24
149.126.192.0/18 maxlen: 24
149.126.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 21:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:a7:52:78:06:54:be:5f:51:ad:4c:0c:90:97:60:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Nov 11 14:36:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85a59150a59ec8a31eacdcd8592a77b455b88551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ff:98:df:f8:34:0d:1f:9e:35:56:78:1a:77:
b7:02:67:b2:ef:20:9c:2b:2e:8d:94:80:5f:2d:ad:
3f:f2:93:7b:38:18:b4:18:e9:f1:b3:0e:36:b7:80:
55:7b:1b:4d:44:3f:ae:26:d7:02:b8:3b:a5:a4:e7:
90:31:f8:51:74:b5:6f:bf:61:f3:e3:dd:d6:a5:69:
53:f8:e2:6c:89:38:8c:f1:96:dc:f7:82:3e:6c:96:
a8:27:1a:99:05:27:d9:b8:e7:40:c5:de:df:76:f0:
21:36:0a:5f:79:16:3b:99:9b:e5:04:87:72:c5:74:
96:cf:b5:26:c6:1d:25:e6:81:be:87:b0:26:f5:2b:
db:5b:f2:07:87:8b:04:5c:e7:e4:da:a5:24:69:e6:
eb:3e:27:18:be:ac:08:e1:c3:8a:5f:e1:28:64:f0:
01:c6:79:86:7d:64:e9:0f:26:d3:a7:6b:f8:a3:cf:
ea:b7:23:6c:6b:94:9d:8a:36:a9:b5:a5:b7:8d:b2:
45:35:09:a2:d9:93:bc:5b:0c:5e:8c:1c:f2:d5:7e:
bd:12:09:dc:bf:20:2a:53:fe:90:9a:17:13:16:b3:
de:e3:35:47:66:76:14:94:34:f0:e5:6f:84:80:e6:
f4:b2:c7:27:f8:b9:20:28:c8:f4:de:90:87:e1:05:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A5:91:50:A5:9E:C8:A3:1E:AC:DC:D8:59:2A:77:B4:55:B8:85:51
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/haWRUKWeyKMerNzYWSp3tFW4hVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.10.0-46.3.15.255
46.3.20.0/22
46.3.31.0/24
46.3.48.0/20
46.3.76.0/22
46.3.84.0-46.3.88.255
46.3.128.0/17
46.232.0.0/17
80.243.128.0/20
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
54:9e:54:45:d0:d9:28:54:df:b0:a4:1c:8b:85:e9:47:c0:ca:
fe:da:5d:46:b1:b9:97:b8:ae:e5:9f:11:f8:a5:ae:17:7f:0e:
72:93:fc:23:bc:f0:15:12:c3:4a:10:3a:1a:1d:32:9e:8a:5f:
a6:78:b4:75:4a:42:c0:99:1a:6a:05:61:a8:a3:b6:ba:74:5e:
cf:e2:b0:cf:a0:7f:78:17:eb:19:9e:51:08:cb:99:93:9f:dd:
4d:35:98:3a:d2:2b:dd:e5:c0:10:b7:8d:a7:71:94:66:ef:c6:
28:76:f5:39:d2:65:39:7f:b0:b2:5c:bf:6f:b5:48:46:a9:5f:
74:23:fd:c2:59:17:0a:e6:79:17:14:e3:21:ef:3e:f8:b3:44:
7f:5d:70:d1:7a:9a:7a:18:a5:42:a0:df:0c:26:5e:35:b5:f1:
f2:9b:37:e3:f1:c4:c4:9a:10:dd:f7:7f:af:d5:b6:51:82:2a:
0a:10:32:dc:da:18:b6:eb:93:6b:6d:0f:84:17:f0:01:1e:9a:
2c:db:1d:5f:a9:61:8a:86:65:49:b9:77:15:72:5f:b2:93:22:
d7:5e:50:d3:21:5f:18:c2:91:b5:12:55:c2:5b:f8:c5:3c:54:
18:e1:58:5d:71:54:8d:b9:1a:35:4c:f7:fa:53:ed:d0:3c:34:
96:6c:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:32:25 2024 by rpki-client on console-fra.rpki-client.org