Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xDQX_Wuh9QqQ3vA3wHl7R9Ao6NQ.roa
File: xDQX_Wuh9QqQ3vA3wHl7R9Ao6NQ.roa (raw, json)
Hash identifier: DcXY9HfN/N8o++o5kOhA3YRggwT8PIT2NOLeZmncCs8=
Subject key identifier: C4:34:17:FD:6B:A1:F5:0A:90:DE:F0:37:C0:79:7B:47:D0:28:E8:D4
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 0186CDABCAA585D518BAEA2AB5B6C1BAF60A
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xDQX_Wuh9QqQ3vA3wHl7R9Ao6NQ.roa
Signing time: Fri 10 Mar 2023 22:37:13 +0000
ROA not before: Fri 10 Mar 2023 22:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393427
IP address blocks: 46.232.64.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.72.0/24 maxlen: 24
46.3.88.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.185.0/24 maxlen: 24
46.3.184.0/24 maxlen: 24
46.3.186.0/24 maxlen: 24
46.3.187.0/24 maxlen: 24
46.3.189.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.101.0/24 maxlen: 24
46.3.202.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cd:ab:ca:a5:85:d5:18:ba:ea:2a:b5:b6:c1:ba:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 10 22:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43417fd6ba1f50a90def037c0797b47d028e8d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:ea:fa:e3:1a:2c:a8:5f:8b:e4:63:89:e4:
a9:87:b5:6f:73:84:48:b5:aa:a0:ff:bb:0a:31:62:
a5:24:4a:d5:11:c4:d3:fa:10:f3:5b:25:9f:a2:bd:
63:e9:f9:9e:43:04:df:b0:47:90:2b:59:32:19:5c:
48:a2:6b:7a:f1:76:ba:11:e1:02:72:bd:6b:fb:dc:
1c:8c:a8:72:e5:ed:63:40:06:cc:9c:51:f3:36:fb:
e2:be:92:b2:7c:d6:d1:f7:a4:57:ef:c2:34:e5:d1:
89:64:8c:ab:55:77:34:32:a6:e4:22:9e:36:1d:14:
1a:be:58:cb:37:95:15:18:41:bf:10:47:67:7f:8e:
68:bf:60:0b:44:3e:91:69:a4:83:80:26:09:0c:29:
1a:b9:19:c4:ce:9c:d3:29:e3:99:20:b2:6f:f0:21:
71:42:92:cc:99:0f:55:d9:86:1e:bf:92:fd:c4:66:
88:bc:84:f0:e0:9a:04:3d:1d:a1:d7:c9:6c:5a:55:
43:6c:45:49:c2:3b:8d:0f:ca:29:4d:51:d3:0d:4f:
f3:bc:18:0f:92:2e:7b:4d:a1:b0:d4:27:d2:87:0b:
4c:67:9b:1f:05:1d:3e:c2:9e:05:47:ac:38:5d:81:
80:8e:5e:0a:d3:68:d7:e5:c5:53:04:a2:8c:7d:7d:
c7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:34:17:FD:6B:A1:F5:0A:90:DE:F0:37:C0:79:7B:47:D0:28:E8:D4
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/xDQX_Wuh9QqQ3vA3wHl7R9Ao6NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.101.0/24
46.3.160.0/22
46.3.184.0/21
46.3.200.0/24
46.3.202.0/24
46.3.243.0/24
46.3.245.0-46.3.246.255
46.3.250.0/24
46.3.252.0/24
46.232.64.0-46.232.72.255
Signature Algorithm: sha256WithRSAEncryption
05:9c:19:71:46:75:62:d4:d1:3a:d0:6d:7c:9e:70:7e:5e:61:
aa:c8:2c:66:4d:54:f7:ca:3d:ee:cb:8b:b4:d2:72:71:ad:45:
b3:c7:28:87:9a:ec:83:a6:b0:5f:ef:1d:ff:43:f2:78:49:16:
a7:15:08:1a:51:90:5d:6a:27:19:dd:3d:9a:a1:11:72:98:81:
3c:f6:a7:71:7c:68:a2:74:f7:23:b9:78:a7:36:51:3c:5e:06:
82:5b:15:a5:2b:fc:2e:64:7d:ca:6a:d6:6f:f0:0f:c4:d5:ac:
4a:b3:81:3a:12:2c:03:1b:36:94:0a:b2:b9:ab:1e:9b:17:46:
97:54:eb:10:9b:a3:7e:75:c7:dc:36:34:00:f1:2e:15:19:03:
2a:ce:ec:c1:77:78:49:24:ee:87:04:af:aa:1f:cf:08:76:70:
f1:05:c2:d1:b9:15:91:9c:21:c9:15:e5:ea:07:97:65:a2:e2:
91:90:2d:89:8d:c7:6b:c3:29:c1:f9:e1:8a:bd:d2:e9:6b:b5:
69:d7:ed:24:a8:b6:c4:1d:89:8f:69:fb:a0:22:06:df:11:96:
97:51:82:ec:7a:c4:2e:ab:de:ca:00:bc:23:6c:39:1c:12:90:
c4:3a:8e:b5:49:46:61:f9:a6:de:86:69:45:33:59:52:db:48:
66:26:71:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:36 2023 by rpki-client on console-fra.rpki-client.org