Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qIpeXHoY4B9RRYbnVUcUtuk15EI.roa
File: qIpeXHoY4B9RRYbnVUcUtuk15EI.roa (raw, json)
Hash identifier: IZDojHCBSB/lXtNbnxYYYn5FKH6mGhN52k07jckXUPg=
Subject key identifier: A8:8A:5E:5C:7A:18:E0:1F:51:45:86:E7:55:47:14:B6:E9:35:E4:42
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018571955E2E0BB3DE1AB749F4D9AE37C6AC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qIpeXHoY4B9RRYbnVUcUtuk15EI.roa
Signing time: Mon 02 Jan 2023 08:24:52 +0000
ROA not before: Mon 02 Jan 2023 08:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 46.3.168.0/22 maxlen: 22
46.3.172.0/22 maxlen: 22
46.3.176.0/22 maxlen: 22
46.3.180.0/22 maxlen: 22
46.3.184.0/22 maxlen: 22
46.3.188.0/24 maxlen: 24
46.3.192.0/22 maxlen: 22
46.3.192.0/23 maxlen: 23
46.3.196.0/22 maxlen: 22
80.243.128.0/22 maxlen: 22
80.243.136.0/23 maxlen: 23
46.3.140.0/22 maxlen: 22
80.243.140.0/23 maxlen: 23
46.3.88.0/22 maxlen: 22
46.232.2.0/23 maxlen: 23
46.232.4.0/22 maxlen: 22
46.3.206.0/23 maxlen: 23
46.3.223.0/24 maxlen: 24
46.3.228.0/23 maxlen: 23
149.126.216.0/22 maxlen: 22
149.126.220.0/22 maxlen: 22
149.126.232.0/22 maxlen: 22
149.126.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:5e:2e:0b:b3:de:1a:b7:49:f4:d9:ae:37:c6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a88a5e5c7a18e01f514586e7554714b6e935e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:d5:1a:6a:fb:04:ab:a0:e5:10:51:e3:c1:
83:59:33:1b:91:21:4a:36:89:6e:f4:2d:10:ac:d3:
d8:2e:a7:7a:fc:35:2f:76:92:e8:30:c3:8d:6a:b2:
bd:73:79:f9:33:fb:b7:ac:e6:f2:b7:11:b8:54:4a:
35:d7:65:b7:14:7a:97:c8:f6:61:ad:c5:52:b7:af:
4c:da:5a:ba:96:a4:fe:48:63:52:5e:87:9e:a1:15:
4b:61:55:41:85:03:fd:3c:dc:bb:d6:1c:33:25:94:
5c:bb:8c:de:b5:8f:37:63:84:a8:f6:25:c0:32:ee:
d7:ea:39:a6:20:37:ca:a8:c4:f1:38:d6:4f:26:44:
17:72:6f:61:9c:ba:a9:83:86:9a:4a:35:65:61:0d:
2a:cd:26:f6:db:04:03:c3:3e:68:0b:a3:8c:a3:7c:
d5:80:dd:0b:86:3f:56:e7:0e:a1:f4:f1:1a:87:c6:
9a:75:ed:14:7d:2b:4b:37:61:9c:ac:c7:fb:21:d7:
f7:9a:01:71:17:32:d2:14:4d:f8:fb:3f:b8:24:c6:
40:0c:f6:2b:0f:a2:aa:d9:19:d9:90:2f:f9:7e:0f:
1a:54:c9:4a:3c:72:f7:48:db:17:31:0c:cd:0c:3c:
41:18:85:bf:62:58:26:b5:63:17:4c:0f:cd:44:d0:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:5E:5C:7A:18:E0:1F:51:45:86:E7:55:47:14:B6:E9:35:E4:42
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qIpeXHoY4B9RRYbnVUcUtuk15EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.140.0/22
46.3.168.0-46.3.188.255
46.3.192.0/21
46.3.206.0/23
46.3.223.0/24
46.3.228.0/23
46.232.2.0-46.232.7.255
80.243.128.0/22
80.243.136.0/23
80.243.140.0/23
149.126.216.0/21
149.126.232.0/21
Signature Algorithm: sha256WithRSAEncryption
63:19:e7:7e:0a:fe:12:e6:2e:b8:7c:e7:6c:9d:12:d7:5e:0c:
b5:1b:50:3c:41:fc:75:6f:0b:4d:40:6b:93:52:54:74:db:cc:
c3:db:1e:b5:84:b7:f5:56:25:a2:f6:0b:66:7e:65:98:cc:2f:
45:92:c1:55:e8:9f:8a:fe:0f:c6:89:41:fb:1b:af:a3:67:c4:
32:5e:8f:74:ea:3c:e4:d2:01:13:e5:8e:b2:fa:3b:92:6c:58:
7d:b9:51:7f:2d:b4:95:73:84:84:c5:64:c4:39:5d:ea:1b:39:
cb:2c:22:da:4c:b9:f1:fc:38:e9:9b:15:74:3e:ac:bf:b8:0b:
cc:4e:a9:49:88:6f:2c:a7:1d:8f:62:db:b5:e1:4e:e2:b9:b6:
a9:8c:a0:17:41:7f:d6:a5:05:68:14:f4:c8:db:f4:85:b9:d0:
4e:5d:28:3d:df:4d:52:c3:a0:38:b6:a7:e8:a0:86:dc:cb:1f:
cd:89:0e:27:ad:8d:d8:b7:26:fd:6c:93:cd:42:35:7f:11:58:
bb:2a:4f:fd:4d:37:54:5e:73:83:40:e6:c6:53:4a:91:a7:76:
56:08:90:f7:5b:bb:d4:6b:88:72:96:31:09:c9:73:a6:26:3d:
3b:78:59:8a:31:d1:92:6a:d7:32:7a:18:4b:64:6f:5e:a1:fc:
54:5c:81:f7
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAYVxlV4uC7PeGrdJ9NmuN8asMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwMTAyMDgyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODhhNWU1YzdhMThlMDFmNTE0NTg2ZTc1NTQ3MTRiNmU5MzVlNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaTVGmr7BKug5RBR48GDWTMbkSFK
Nolu9C0QrNPYLqd6/DUvdpLoMMONarK9c3n5M/u3rObytxG4VEo112W3FHqXyPZh
rcVSt69M2lq6lqT+SGNSXoeeoRVLYVVBhQP9PNy71hwzJZRcu4zetY83Y4So9iXA
Mu7X6jmmIDfKqMTxONZPJkQXcm9hnLqpg4aaSjVlYQ0qzSb22wQDwz5oC6OMo3zV
gN0Lhj9W5w6h9PEah8aade0UfStLN2GcrMf7Idf3mgFxFzLSFE34+z+4JMZADPYr
D6Kq2RnZkC/5fg8aVMlKPHL3SNsXMQzNDDxBGIW/YlgmtWMXTA/NRNCDjQIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFKiKXlx6GOAfUUWG51VHFLbpNeRCMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvcUlwZVhIb1k0QjlSUlliblZVY1V0dWsxNUVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQCLgNYAwQC
LgOMMAwDBAMuA6gDBAAuA7wDBAMuA8ADBAEuA84DBAAuA98DBAEuA+QwDAMEAS7o
AgMEAy7oAAMEAlDzgAMEAVDziAMEAVDzjAMEA5V+2AMEA5V+6DANBgkqhkiG9w0B
AQsFAAOCAQEAYxnnfgr+EuYuuHznbJ0S114MtRtQPEH8dW8LTUBrk1JUdNvMw9se
tYS39VYlovYLZn5lmMwvRZLBVeifiv4PxolB+xuvo2fEMl6PdOo85NIBE+WOsvo7
kmxYfblRfy20lXOEhMVkxDld6hs5yywi2ky58fw46ZsVdD6sv7gLzE6pSYhvLKcd
j2LbteFO4rm2qYygF0F/1qUFaBT0yNv0hbnQTl0oPd9NUsOgOLan6KCG3MsfzYkO
J62N2Lcm/WyTzUI1fxFYuypP/U03VF5zg0DmxlNKkad2VgiQ91u71GuIcpYxCclz
piY9O3hZijHRkmrXMnoYS2RvXqH8VFyB9w==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org