Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mCVQXtMy5HIC5buuQ98GdsjrzpU.roa
File: mCVQXtMy5HIC5buuQ98GdsjrzpU.roa (raw, json)
Hash identifier: dX3Bnfx7zOiube4uCJMxSDUCuicAU8XcWxNrfuU1VWs=
Subject key identifier: 98:25:50:5E:D3:32:E4:72:02:E5:BB:AE:43:DF:06:76:C8:EB:CE:95
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6A20DB49B71B932E7F7FA8662720
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mCVQXtMy5HIC5buuQ98GdsjrzpU.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 46.232.64.0/21 maxlen: 24
46.3.156.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.208.0/21 maxlen: 21
149.126.203.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 20:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6a:20:db:49:b7:1b:93:2e:7f:7f:a8:66:27:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9825505ed332e47202e5bbae43df0676c8ebce95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:70:7e:f3:38:8d:07:f3:77:cc:a3:55:97:
89:5e:16:1d:e0:8e:8b:d7:14:56:63:01:a7:01:8f:
a0:a8:c5:d8:59:37:a9:20:35:29:c0:9d:d8:ed:5d:
10:74:ca:48:36:c1:f8:66:e5:f5:91:cf:ea:56:98:
d0:ff:96:e4:6e:5d:43:6c:61:7a:4b:01:d0:fd:3e:
ff:dc:36:e1:51:19:29:30:14:2c:d8:eb:ee:8f:05:
e3:8c:17:d1:4d:d2:13:6c:b7:70:33:ec:d0:f7:de:
8b:01:91:a4:dd:cd:8d:dc:18:32:43:d1:89:fb:05:
1e:ba:ba:5b:8e:e1:0c:1f:14:e6:e8:87:8a:4d:38:
3c:12:47:5d:de:4b:65:1e:d2:be:23:25:91:52:38:
c1:2b:23:9a:25:1d:ca:8f:27:74:7f:e4:fd:06:10:
c5:2b:40:8b:30:20:5b:6a:59:a6:79:12:26:36:1a:
cf:45:d7:28:f1:00:52:e6:67:39:7d:b1:63:98:68:
6a:28:ca:f6:af:6d:dc:2e:56:6f:f0:db:01:ac:9a:
0b:12:5b:02:bb:15:30:81:07:e6:e4:3f:09:c7:5e:
ee:cb:0f:f3:d4:3e:85:54:d2:58:fb:40:00:86:c0:
30:10:f3:8a:8b:42:85:d4:d4:6b:1f:44:0e:0e:87:
65:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:25:50:5E:D3:32:E4:72:02:E5:BB:AE:43:DF:06:76:C8:EB:CE:95
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/mCVQXtMy5HIC5buuQ98GdsjrzpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.80.0/22
46.3.135.0/24
46.3.156.0/23
46.3.188.0/22
46.3.208.0/21
46.232.64.0/21
149.126.203.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
84:4a:7c:6d:49:0f:12:69:28:85:27:81:b9:b2:86:3f:52:c7:
4f:1c:c3:55:d4:bf:dd:81:bb:de:d3:9c:31:72:2e:52:37:81:
33:73:24:1f:2b:53:98:b2:a1:75:e4:75:11:a1:91:f1:11:47:
eb:5e:75:ae:79:d5:07:d5:ee:d7:fe:ff:58:2e:85:77:10:f0:
5f:41:21:70:00:67:30:f7:ca:44:ce:59:84:95:6c:be:39:01:
d2:4b:a6:38:18:a1:95:8a:1b:d2:2f:94:8d:38:16:45:75:1f:
cd:a0:b9:44:8a:93:da:94:48:d1:aa:aa:f7:6a:be:32:c9:32:
62:7e:7f:ee:59:b7:2f:a1:23:cd:7c:2b:57:82:02:3c:39:3a:
84:db:ef:bd:31:38:2c:45:a0:83:4e:cb:62:30:e0:bc:e3:ac:
23:ba:a0:32:d2:78:01:a5:f6:c3:55:9d:8e:b7:c6:91:4e:9c:
e2:df:de:e5:0d:a3:59:84:d4:f2:29:90:e6:61:fa:d7:4f:26:
d9:44:46:54:34:da:24:d0:3d:f2:24:46:5b:68:4c:68:d3:7d:
35:77:4f:ad:04:72:c4:53:3f:c9:bc:4f:1a:a1:94:87:93:18:
76:9d:bb:4a:2f:9f:da:c6:cb:e0:84:d1:48:7b:22:cf:51:65:
de:43:64:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 00:47:27 2024 by rpki-client on console-ams.rpki-client.org