Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/z-MQgGdjNiX3kJk9eHfIKbygC1U.roa
File: z-MQgGdjNiX3kJk9eHfIKbygC1U.roa (raw, json)
Hash identifier: Ujm0R1A1XqqVA3Y8fFucyln0z7+qDK7wKLk27IVqtdM=
Subject key identifier: CF:E3:10:80:67:63:36:25:F7:90:99:3D:78:77:C8:29:BC:A0:0B:55
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018697214736A619EE5C392BEE06B5D76AEA
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/z-MQgGdjNiX3kJk9eHfIKbygC1U.roa
Signing time: Tue 28 Feb 2023 08:26:25 +0000
ROA not before: Tue 28 Feb 2023 08:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 46.232.72.0/21 maxlen: 24
46.232.80.0/20 maxlen: 22
46.232.96.0/20 maxlen: 24
46.232.112.0/20 maxlen: 22
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.255.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.246.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
46.3.208.0/21 maxlen: 21
149.126.192.0/18 maxlen: 22
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:21:47:36:a6:19:ee:5c:39:2b:ee:06:b5:d7:6a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Feb 28 08:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfe3108067633625f790993d7877c829bca00b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:1b:2b:df:84:36:f0:dd:6f:ea:7f:80:69:
22:95:2c:9a:d3:b9:af:4f:52:2e:ec:bb:d9:b1:30:
01:60:5f:51:fb:23:00:36:2e:f9:52:48:d8:a5:6c:
d6:0b:8f:6a:10:31:c9:11:8e:a6:5b:e9:72:3b:96:
12:8c:32:c3:5e:98:e1:8f:ed:c8:e6:90:33:96:d6:
79:a4:3b:fb:59:1f:ff:84:e0:4b:09:0d:44:33:b9:
6c:11:a9:07:82:77:04:ee:99:e5:e2:3d:6a:05:b8:
5c:f1:bb:4a:ca:ff:d2:41:6c:e3:a2:a6:b7:25:d6:
98:9c:98:7e:38:41:90:d1:ce:64:2c:44:fe:49:17:
97:ba:71:af:1b:34:c5:1c:6a:49:30:67:68:bf:c0:
01:bb:09:02:04:f9:b4:0e:3c:a9:87:5a:31:c4:8d:
cd:d5:4c:7d:dc:39:18:1a:b5:6b:f5:0a:34:bc:10:
9d:80:3c:03:7a:df:e4:93:af:9b:68:90:2f:7f:bc:
34:b1:c8:10:ca:4b:46:e9:43:ca:49:76:bd:e4:07:
f6:50:0f:3b:5d:7e:5d:ea:51:3d:5a:37:d6:f6:b1:
bf:94:e9:13:b5:a7:a7:6c:b9:6a:6e:00:d6:3b:6f:
16:a9:01:63:c9:87:7d:97:e0:47:c5:5c:65:a7:2c:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E3:10:80:67:63:36:25:F7:90:99:3D:78:77:C8:29:BC:A0:0B:55
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/z-MQgGdjNiX3kJk9eHfIKbygC1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.116.0-46.3.127.255
46.3.208.0/21
46.3.220.0/23
46.3.230.0/23
46.3.251.0/24
46.3.253.0-46.3.255.255
46.232.72.0-46.232.127.255
149.126.192.0/18
Signature Algorithm: sha256WithRSAEncryption
08:65:28:b9:b6:30:f9:0a:41:ca:17:56:cb:9d:a5:73:65:3e:
22:4c:4d:f7:ea:32:d5:2b:00:40:e4:bb:0c:69:41:ff:93:3b:
32:4d:04:d9:95:be:8a:0c:97:08:f0:78:88:bd:34:dc:ad:e5:
13:80:32:ec:c8:be:2b:50:11:e4:6b:57:3b:33:f7:f6:ca:da:
01:bb:3d:15:0e:8b:3b:d2:94:ad:c2:bc:18:e8:5e:16:4b:f2:
2a:66:9c:03:44:45:c9:70:4a:9f:92:43:a1:48:30:5c:8a:2f:
24:fa:b4:bc:3c:23:52:44:85:0f:7f:eb:6a:0d:b5:07:7f:df:
c6:70:85:a0:2c:99:9f:72:80:49:f5:40:35:39:13:b1:b7:06:
86:07:f3:75:f6:34:b7:aa:14:eb:cc:fe:57:00:67:6c:7d:be:
bc:03:8a:51:19:d9:c6:73:5c:31:14:d5:31:d7:ec:17:8e:98:
c3:29:68:5d:59:a7:98:0b:67:b8:cd:2f:e4:1b:d1:88:fd:1c:
4c:f4:f2:42:e3:45:cf:b0:00:ad:ec:8a:a5:62:94:85:03:a5:
ba:7e:a7:21:8f:36:f2:a5:1b:9d:a6:ba:e0:fd:7e:68:98:e5:
0b:c7:32:ca:4d:c2:a9:60:57:59:2d:2f:06:ff:2f:8a:71:c7:
39:4e:f5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:29 2023 by rpki-client on console-ams.rpki-client.org