Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vBxiFUUmE8jBVKotY1InNFs5-go.roa
File: vBxiFUUmE8jBVKotY1InNFs5-go.roa (raw, json)
Hash identifier: hgO/C6KNu+dSm87iuhfzsv3auZf9XRpT+fZPaKwDbik=
Subject key identifier: BC:1C:62:15:45:26:13:C8:C1:54:AA:2D:63:52:27:34:5B:39:FA:0A
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018AD211F6857DDC51700F3228AA1091F52D
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vBxiFUUmE8jBVKotY1InNFs5-go.roa
Signing time: Tue 26 Sep 2023 15:18:27 +0000
ROA not before: Tue 26 Sep 2023 15:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/22 maxlen: 24
46.232.91.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.26.0/23 maxlen: 24
46.3.16.0/22 maxlen: 22
46.3.17.0/24 maxlen: 24
46.232.27.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.28.0/22 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d2:11:f6:85:7d:dc:51:70:0f:32:28:aa:10:91:f5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 26 15:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc1c6215452613c8c154aa2d635227345b39fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b1:ea:2e:78:e8:bc:9d:7a:11:ed:d9:d4:a0:
1f:62:53:16:64:10:dc:d8:98:0a:9c:51:7f:33:6c:
e4:9b:29:d9:11:db:dc:de:3d:d2:5b:e6:79:63:c0:
ce:f8:23:ce:fc:f8:f3:45:d8:fd:f2:55:7b:9e:3c:
97:4b:1a:3f:03:57:fe:32:f8:4d:9d:41:31:4f:16:
da:dc:78:93:2e:9d:48:db:86:23:9d:d2:45:52:8c:
31:b7:95:d1:d0:e5:b5:fe:31:5e:e3:32:3b:f3:37:
12:b0:20:fb:f7:cd:5d:cb:be:41:b5:4e:3f:a4:a0:
b7:eb:8d:ed:0b:40:ea:d6:67:ca:5b:d2:cc:72:2e:
b9:03:48:a0:cc:13:6e:54:f6:97:d7:d8:dc:aa:0b:
34:68:de:1b:1f:6f:35:9a:93:1f:60:e8:51:8a:29:
2d:5f:03:2f:2b:0c:cc:b7:b0:43:b0:91:f9:71:41:
43:0b:10:0f:96:61:c2:1e:d8:d2:ac:3c:c2:11:80:
2b:f5:87:05:06:47:22:19:4e:c1:b3:b5:61:a3:f6:
85:35:fc:2a:8b:5b:79:5f:bd:e0:10:4b:bd:6f:85:
65:55:20:f1:f1:3a:01:01:26:06:57:7c:f7:d8:cb:
fb:34:76:f3:9b:d5:c6:fe:81:b1:e8:6e:f7:f3:95:
1e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1C:62:15:45:26:13:C8:C1:54:AA:2D:63:52:27:34:5B:39:FA:0A
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/vBxiFUUmE8jBVKotY1InNFs5-go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0-46.3.76.255
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.26.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.208.255
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e2:bb:65:6b:03:f1:da:e1:5b:45:9e:54:46:c9:e9:b1:c9:
da:cf:01:66:56:d4:9b:d1:1a:30:b1:ca:33:ab:24:12:19:18:
d4:1b:e5:0f:38:90:b1:0f:96:d0:00:9e:c6:67:9e:a6:0f:c8:
c7:2b:21:fc:8c:5d:cb:83:d7:bb:d4:e9:4c:b2:00:5f:f8:b2:
5d:67:d5:85:e9:fc:3e:4c:54:72:94:70:5c:22:de:47:ac:88:
5a:6a:0b:1e:3e:38:13:87:a6:43:63:ca:c8:ab:5d:2f:d3:29:
6e:6f:7b:71:49:b3:e6:da:c8:39:78:ba:bb:70:8d:7d:1a:35:
ff:1f:92:66:e7:ca:a7:cd:41:9f:d7:ce:29:a4:b9:42:b7:3f:
34:d2:39:0a:ee:33:c2:44:9c:a6:93:02:4f:49:da:56:f6:46:
ea:72:2d:6c:39:c8:2f:95:74:64:29:f6:6d:c3:fd:b7:6b:82:
c2:3b:7a:b8:cc:d1:3d:12:35:b9:30:cd:3b:63:51:23:5b:84:
53:e4:34:8d:04:d4:8b:b0:b5:c9:84:8d:e0:95:01:22:be:e5:
b1:17:54:aa:dd:fc:27:d1:55:4e:d7:54:44:a5:34:e0:c0:07:
d8:1a:47:b9:23:48:e6:90:c2:7e:0c:5b:a8:97:d6:b3:57:e6:
96:ca:af:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 13:54:43 2023 by rpki-client on console-fra.rpki-client.org