Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qLusZCTWOvrOzNr0YC_z22db644.roa
File: qLusZCTWOvrOzNr0YC_z22db644.roa (raw, json)
Hash identifier: axEcaMPlG3J45BYpHYvQJLIcslDAuaJrA4cl9qlXmoE=
Subject key identifier: A8:BB:AC:64:24:D6:3A:FA:CE:CC:DA:F4:60:2F:F3:DB:67:5B:EB:8E
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CDA9F59F6CCF74E75B8C4AB9609CBE19
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qLusZCTWOvrOzNr0YC_z22db644.roa
Signing time: Fri 10 Mar 2023 22:35:13 +0000
ROA not before: Fri 10 Mar 2023 22:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49505
IP address blocks: 46.3.213.0/24 maxlen: 24
46.3.209.0/24 maxlen: 24
46.3.211.0/24 maxlen: 24
46.3.210.0/24 maxlen: 24
46.3.212.0/24 maxlen: 24
46.3.208.0/24 maxlen: 24
46.3.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:a9:f5:9f:6c:cf:74:e7:5b:8c:4a:b9:60:9c:be:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a8bbac6424d63afaceccdaf4602ff3db675beb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:23:df:7e:c3:be:5b:6f:26:a5:44:75:3c:
3f:a0:ce:0b:27:f2:34:4b:4b:49:77:53:b9:a2:2b:
8c:75:c1:aa:02:d1:e0:09:32:31:6a:bd:08:ad:da:
aa:c4:57:2b:9f:b3:45:42:18:8c:81:aa:47:75:3f:
ff:09:0e:05:93:ff:50:49:7c:c3:b6:59:59:e0:9e:
24:01:40:1d:31:a9:60:f8:ae:9d:f1:e8:9a:1b:89:
9d:e0:82:fc:16:3e:4b:cb:cd:c3:35:ad:25:0b:0d:
fd:a8:e8:bb:a9:e9:f4:94:2d:12:0d:5c:9e:a7:50:
42:cd:1c:b1:cb:13:95:ab:c4:10:c7:0a:a2:0e:37:
9a:68:09:e9:54:30:a8:27:21:36:d1:8f:60:72:2c:
2e:76:38:60:66:7e:ca:c0:08:a6:08:68:dd:64:7c:
8c:36:dc:2a:7b:81:2e:b7:31:a7:4e:dc:89:05:84:
95:97:0e:cf:11:79:39:b9:20:5b:1d:f4:a7:20:9f:
4f:f7:76:67:af:78:f6:35:85:be:dc:f9:d1:44:ee:
45:7c:5e:6b:d1:d7:5b:c0:17:85:50:60:2a:ee:15:
ec:45:ba:b8:2a:82:c3:9d:9b:48:3c:c4:6e:da:be:
13:c2:47:cb:a7:76:19:d4:c6:2f:6d:d4:b1:ca:0b:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BB:AC:64:24:D6:3A:FA:CE:CC:DA:F4:60:2F:F3:DB:67:5B:EB:8E
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/qLusZCTWOvrOzNr0YC_z22db644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.208.0-46.3.214.255
Signature Algorithm: sha256WithRSAEncryption
18:bc:7a:89:c5:d3:c0:69:f2:c7:d2:79:91:4f:9b:9f:4b:c4:
b2:63:90:6e:ae:2b:70:87:e3:22:31:7a:b1:a4:61:22:f6:67:
cd:22:1e:4e:1e:04:dc:23:7b:97:e0:15:0a:95:b9:aa:89:e6:
a2:29:6b:15:c1:c9:ba:38:75:69:d3:6d:f2:94:17:cf:8e:d9:
76:43:cc:85:a8:bb:3b:58:06:73:e9:31:6e:3f:b1:61:36:af:
5d:4d:ac:88:80:3b:b9:37:14:be:9e:82:4c:b7:6f:d0:fb:10:
6f:58:43:a4:ca:75:24:b7:ea:ad:65:80:28:e6:1b:70:10:4c:
64:68:73:db:ee:04:1f:71:fb:04:4b:97:0c:f3:17:e3:86:13:
c5:ae:a6:2b:ff:52:47:e6:54:ed:85:ef:01:d3:b4:7b:cf:9b:
16:0e:3c:3a:60:84:e9:62:c6:ff:31:a1:30:f2:75:c2:f6:f7:
73:5f:28:b7:8c:46:fe:75:3f:b7:b0:26:8c:03:77:2b:c3:fe:
da:d5:21:4c:d5:6a:aa:69:30:ad:ee:f2:ed:b8:8d:cf:6d:fd:
f0:d7:b2:4b:35:1c:b4:ff:f9:4d:54:19:5e:0f:13:45:4c:93:
97:1f:07:1a:df:1f:96:e1:4e:23:d8:4a:0a:d8:3e:07:57:04:
e1:d4:ce:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:36:04 2024 by rpki-client on console-ams.rpki-client.org