Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/taQ3l0bYXXhe8IkAl3KMyy581XU.roa
File: taQ3l0bYXXhe8IkAl3KMyy581XU.roa (raw, json)
Hash identifier: ByK/jwLRU0/Aig4dTrkzTUTYeGzu+sprNjNjrqtt6Iw=
Subject key identifier: B5:A4:37:97:46:D8:5D:78:5E:F0:89:00:97:72:8C:CB:2E:7C:D5:75
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 01881FD0B3494A45A7EC10C6A973A3F9B353
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/taQ3l0bYXXhe8IkAl3KMyy581XU.roa
Signing time: Mon 15 May 2023 14:29:11 +0000
ROA not before: Mon 15 May 2023 14:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.249.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d0:b3:49:4a:45:a7:ec:10:c6:a9:73:a3:f9:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: May 15 14:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5a4379746d85d785ef0890097728ccb2e7cd575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:9f:21:06:bb:60:5d:46:e5:b3:80:80:3c:
b8:6d:bc:1b:09:9e:2c:ae:51:71:91:d7:8d:14:7d:
14:7f:ed:de:20:7d:75:98:2e:92:b9:b5:d4:95:02:
9d:34:9a:da:c9:76:ad:32:71:a5:92:9f:c5:9e:2a:
f9:15:a7:6e:8f:1a:75:f3:c2:2d:2d:1b:3c:af:b1:
6d:8f:6f:f0:36:47:87:8d:31:f8:99:43:fc:8c:7d:
17:34:c0:75:82:36:d7:1e:a2:06:11:49:1f:b2:db:
79:29:82:12:ae:78:ef:15:a6:8f:7b:bd:9a:97:27:
a1:23:93:1a:05:f8:d8:0a:1d:be:5c:2f:a4:e7:7c:
37:4d:2f:81:79:01:7e:ee:7e:89:13:73:3a:08:e6:
65:07:3e:2e:d7:51:54:2b:18:2e:72:e8:66:a2:98:
05:9e:99:2f:be:0a:2b:c2:db:e9:b9:eb:ce:4a:4d:
bd:26:65:3f:8a:d8:f0:ef:a3:00:73:4c:6d:09:57:
80:53:88:13:88:0b:9c:21:9b:75:c0:27:ae:2b:c4:
03:91:ab:a0:40:bc:74:a5:6e:b6:80:33:50:b8:a1:
c1:ca:08:44:e0:80:33:a5:c8:b4:ba:73:e9:fc:fd:
71:2e:1f:ed:a7:b8:e0:f8:6a:11:50:ed:50:4d:53:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A4:37:97:46:D8:5D:78:5E:F0:89:00:97:72:8C:CB:2E:7C:D5:75
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/taQ3l0bYXXhe8IkAl3KMyy581XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0-46.3.202.255
46.3.220.0/23
46.3.230.0/23
46.3.245.0-46.3.246.255
46.3.248.0/21
46.232.64.0-46.232.72.255
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9f:81:d9:a3:d7:2d:54:2b:40:98:ec:be:e4:d8:3c:28:a9:
56:cc:ca:d7:e1:4a:dd:a7:ab:ed:78:3b:b4:69:99:ed:0a:b7:
72:25:76:ae:b2:ac:2b:cd:50:89:c7:a5:20:33:f9:ab:ca:f5:
06:f7:a6:72:f2:9a:66:02:4d:7e:19:2b:ae:16:33:f4:8c:95:
e2:13:24:e9:15:7f:77:b4:e1:5b:9c:61:1d:f3:2a:a4:94:22:
e5:7a:ef:cf:35:bf:20:a2:b0:f8:7a:ca:2d:50:f2:32:fb:53:
83:c4:46:94:a5:41:cc:0a:98:21:78:13:53:ee:d1:9a:cd:3a:
67:38:48:a1:45:b2:5a:95:2a:11:ef:ab:0f:43:08:d7:06:7f:
f0:97:e9:6b:46:e7:64:ee:f7:c2:1d:26:d1:e4:ca:ca:5d:f6:
34:bd:92:9b:72:6f:55:2e:22:2e:bf:4f:5e:61:76:da:b7:94:
24:3b:cb:7b:99:db:4f:e7:b6:e6:dd:1b:48:b0:d1:b2:e3:16:
22:92:d4:d4:04:69:be:80:2b:2d:e3:3b:01:f7:b9:18:df:95:
20:72:aa:cd:b4:f0:cf:1d:b6:1a:05:d5:e4:62:4e:c5:e8:17:
f6:98:e6:1f:cf:f4:15:04:07:97:5d:36:df:9c:a9:3e:a9:86:
bd:6a:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org