Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jrI1E0oMfpw--x1PyGtoXa_eKkI.roa
File: jrI1E0oMfpw--x1PyGtoXa_eKkI.roa (raw, json)
Hash identifier: M8OUHzuNWA4DQZDiCRjar0rqL5SDgxDbDP+SmrOCMMo=
Subject key identifier: 8E:B2:35:13:4A:0C:7E:9C:3E:FB:1D:4F:C8:6B:68:5D:AF:DE:2A:42
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018946C4854B84A3621C696A0BF7AF7668B1
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jrI1E0oMfpw--x1PyGtoXa_eKkI.roa
Signing time: Tue 11 Jul 2023 21:03:51 +0000
ROA not before: Tue 11 Jul 2023 21:03:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 80.243.128.0/20 maxlen: 24
46.3.48.0/20 maxlen: 20
46.3.84.0/24 maxlen: 24
46.3.87.0/24 maxlen: 24
46.3.86.0/24 maxlen: 24
46.232.16.0/23 maxlen: 23
46.232.18.0/23 maxlen: 23
46.232.21.0/24 maxlen: 24
46.232.23.0/24 maxlen: 24
46.232.22.0/24 maxlen: 24
46.3.152.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.158.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.154.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.155.0/24 maxlen: 24
46.3.159.0/24 maxlen: 24
46.3.153.0/24 maxlen: 24
46.3.164.0/23 maxlen: 23
46.3.166.0/23 maxlen: 23
46.232.112.0/23 maxlen: 23
46.232.116.0/23 maxlen: 23
46.232.114.0/23 maxlen: 23
46.232.118.0/23 maxlen: 23
46.232.124.0/23 maxlen: 23
46.232.126.0/23 maxlen: 23
46.3.136.0/22 maxlen: 22
46.3.135.0/24 maxlen: 24
46.3.144.0/22 maxlen: 22
149.126.192.0/19 maxlen: 24
46.3.205.0/24 maxlen: 24
46.3.212.0/22 maxlen: 22
46.3.208.0/22 maxlen: 22
149.126.213.0/24 maxlen: 24
46.3.232.0/22 maxlen: 22
46.3.239.0/24 maxlen: 24
46.3.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:c4:85:4b:84:a3:62:1c:69:6a:0b:f7:af:76:68:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jul 11 21:03:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8eb235134a0c7e9c3efb1d4fc86b685dafde2a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:9f:32:c4:cb:46:ba:eb:7f:79:e0:64:d1:
97:29:8f:1d:b2:30:b6:cc:47:a2:1b:bc:92:32:0b:
88:b1:59:b3:3d:ca:cb:bd:16:c0:78:4b:db:4f:6e:
72:17:93:84:fb:22:64:60:43:d6:ab:1d:6a:e4:c6:
71:88:c7:92:18:cc:56:82:1c:70:49:02:d6:95:48:
f0:54:f5:af:48:4d:04:58:05:ae:59:0c:77:31:71:
ff:97:5a:86:a3:af:73:3a:9d:66:05:ad:08:da:6c:
38:f3:58:e6:1f:89:77:ed:3c:8a:bb:8c:79:0a:95:
be:89:2e:d1:b5:9b:69:ea:44:b3:80:1f:b7:fb:df:
17:42:52:93:ef:37:df:da:cf:e9:1d:6a:39:1d:d9:
3c:52:e9:1b:4f:31:ed:2e:40:e0:50:dd:4b:7d:40:
7a:9a:55:cf:0d:98:5a:8f:87:16:a2:9d:a4:6b:8b:
5a:d9:fd:e7:d7:5c:6b:db:fd:dc:be:17:b0:12:10:
6b:af:5a:5c:04:ea:56:90:69:1c:ab:97:d0:8c:3a:
e6:30:20:fa:9f:b3:86:5f:f4:76:9b:ed:84:61:a3:
02:a0:ec:9e:fb:d8:70:7d:87:be:7a:cc:76:21:c9:
04:cc:1f:44:ef:4a:90:ea:be:7f:e7:89:2d:a4:7b:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B2:35:13:4A:0C:7E:9C:3E:FB:1D:4F:C8:6B:68:5D:AF:DE:2A:42
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/jrI1E0oMfpw--x1PyGtoXa_eKkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.48.0/20
46.3.84.0/24
46.3.86.0/23
46.3.135.0-46.3.139.255
46.3.144.0/20
46.3.164.0/22
46.3.205.0/24
46.3.208.0/21
46.3.232.0/22
46.3.238.0/23
46.232.16.0/22
46.232.21.0-46.232.23.255
46.232.112.0/21
46.232.124.0/22
80.243.128.0/20
149.126.192.0/19
Signature Algorithm: sha256WithRSAEncryption
72:d8:70:5c:5d:41:3f:ef:a5:5c:dd:ad:18:b2:15:64:80:91:
5e:14:8b:c8:d0:0e:6c:fd:30:fe:9f:13:20:56:0b:3c:63:46:
c9:9e:dd:44:29:ba:a2:c2:61:94:38:bf:ea:ce:13:2f:38:9f:
1c:d3:51:79:61:70:00:73:a2:15:bb:d2:72:72:f0:c6:94:f5:
e2:fe:f4:cf:41:fc:9b:3e:12:ac:da:a6:18:9a:77:d1:1b:d0:
c9:56:d1:0a:3a:44:a5:60:db:d6:3f:14:89:92:be:4e:c8:ea:
d2:9a:5a:2a:60:7a:54:46:85:e6:b8:d7:49:51:b7:50:9a:1b:
db:aa:2c:bd:ae:92:5f:f9:d6:5d:de:0e:64:7c:1d:aa:99:eb:
e2:5c:ac:b0:f7:a4:c5:db:bb:6b:60:69:a6:a9:e2:6a:07:aa:
81:02:b1:dd:55:a3:cd:23:2a:ca:af:bf:45:a1:ea:67:d0:2b:
c1:dd:07:26:87:f0:1e:e3:1c:cf:e0:b7:7f:e0:0e:7e:bc:2e:
76:cf:16:7b:ff:c5:64:5a:e1:9f:5a:e3:a7:25:c9:e2:5e:ed:
72:66:6f:01:41:e8:eb:7e:da:da:82:50:65:76:23:4b:82:c3:
ff:df:a9:74:62:f0:4e:3c:7a:cf:cf:3a:d0:d7:dc:45:7c:2d:
64:de:4b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org