Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/lbzoljLXa_6yj85NRpVJ9H0FWyo.roa
File: lbzoljLXa_6yj85NRpVJ9H0FWyo.roa (raw, json)
Hash identifier: ybmMkYn86lxapFapMZRY5g5+NNV803CpjHi9bdpv9sA=
Subject key identifier: 95:BC:E8:96:32:D7:6B:FE:B2:8F:CE:4D:46:95:49:F4:7D:05:5B:2A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018A51381583DD6AFBCD7E046D9F53FCF012
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/lbzoljLXa_6yj85NRpVJ9H0FWyo.roa
Signing time: Fri 01 Sep 2023 14:49:04 +0000
ROA not before: Fri 01 Sep 2023 14:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.77.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.3.78.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.232.91.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/21 maxlen: 21
46.232.94.0/24 maxlen: 24
46.3.79.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.24.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.232.25.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:38:15:83:dd:6a:fb:cd:7e:04:6d:9f:53:fc:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 1 14:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95bce89632d76bfeb28fce4d469549f47d055b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a4:9b:d7:9f:6d:65:fd:97:af:36:c4:e5:2f:
53:87:f7:3b:30:c7:76:82:f3:b3:ac:23:e4:ce:38:
7a:2d:ec:ce:35:e2:27:1d:dd:2c:ff:c0:31:04:2a:
af:a1:f6:d7:42:7a:0a:4e:df:66:41:a9:02:c3:1c:
9d:6e:d9:69:5b:13:3e:4c:2c:6c:cf:bb:b9:05:94:
af:fe:a4:e7:17:c2:fc:7d:24:7d:6e:a6:ca:e7:5f:
02:55:c9:7e:ad:c2:a3:86:86:a7:31:20:7e:47:38:
07:ea:d8:25:72:c8:a3:07:ec:d3:3e:30:b6:65:27:
e3:a4:8a:4a:c6:44:38:14:9f:26:f6:dd:21:0a:75:
82:e4:b8:03:55:58:52:fd:1a:71:c5:45:68:e3:6c:
e7:94:ac:4d:7d:cd:52:ea:79:25:73:be:63:9d:e9:
d3:a5:0a:1b:bd:34:5d:5e:4a:ae:ee:d7:a5:eb:6a:
f0:53:10:d9:df:37:1e:e6:72:9e:8c:27:4b:34:74:
be:cf:b4:75:af:9f:f6:f2:40:da:33:18:15:58:ff:
3a:e0:fe:ce:46:a1:1d:11:45:72:62:35:2c:7c:a6:
01:5c:c0:21:85:f4:a2:c2:6f:f1:2f:ee:07:46:ab:
e0:47:61:04:14:8f:3e:4d:c1:81:23:51:d4:49:89:
14:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BC:E8:96:32:D7:6B:FE:B2:8F:CE:4D:46:95:49:F4:7D:05:5B:2A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/lbzoljLXa_6yj85NRpVJ9H0FWyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/20
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.24.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.208.255
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:03:6a:2e:c5:2e:a6:58:ae:3c:f5:7c:55:1d:4d:ef:58:13:
5d:49:f9:48:3d:89:06:de:63:e0:2f:c0:4c:f5:01:bb:18:31:
29:18:f1:d8:55:0e:23:9b:73:4b:f3:17:4b:8b:e2:ca:dd:06:
d0:0c:79:2d:49:25:50:9c:c1:62:92:42:f4:e7:ed:9e:5e:6c:
b2:34:01:64:51:91:51:05:b3:ab:6f:62:fc:ee:e3:11:e5:d9:
fa:c0:15:08:b1:78:3d:12:03:d1:b5:eb:3a:2c:9f:d8:11:70:
73:c2:c0:e7:eb:8f:8c:fa:27:54:bc:dd:37:f2:6a:a8:0b:33:
c9:82:e4:75:71:ac:5c:40:a2:ad:1f:e3:80:53:b2:e4:22:05:
14:d2:91:df:02:a2:41:88:ed:8a:00:83:ef:a2:2d:47:a2:3a:
5e:b1:82:dc:f6:b3:14:e7:29:ff:83:fc:41:61:4d:bd:f4:73:
92:f4:79:a5:2b:fe:b7:41:1f:26:a0:6d:31:76:f7:d8:c6:da:
7f:53:07:ef:b3:40:a7:f3:98:a0:05:52:ca:15:e0:07:b9:bf:
92:e6:2b:df:7c:8f:73:33:85:d9:4e:d5:e5:7c:b8:4f:ca:cb:
2b:61:cb:87:63:3c:4c:52:86:34:30:d1:2d:d3:a2:50:e6:22:
d7:59:f7:19
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 26 09:33:37 2023 by rpki-client on console-fra.rpki-client.org