Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0-F8yRTONu-w1xPdThwp1tjohpI.roa
File: 0-F8yRTONu-w1xPdThwp1tjohpI.roa (raw, json)
Hash identifier: /N/PJ8/PxeNiiqc/xTqh3W3jmqkO090UZn4uMFhh+MY=
Subject key identifier: D3:E1:7C:C9:14:CE:36:EF:B0:D7:13:DD:4E:1C:29:D6:D8:E8:86:92
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E3BF21826E6D617967CA0D9B458A71AFC
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0-F8yRTONu-w1xPdThwp1tjohpI.roa
Signing time: Thu 14 Mar 2024 07:51:45 +0000
ROA not before: Thu 14 Mar 2024 07:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 46.3.8.0/22 maxlen: 24
46.3.28.0/23 maxlen: 24
46.3.80.0/22 maxlen: 22
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.120.0/21 maxlen: 24
46.3.134.0/24 maxlen: 24
46.3.135.0/24 maxlen: 24
46.3.156.0/24 maxlen: 24
46.3.157.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.184.0/22 maxlen: 24
46.3.188.0/22 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.206.0/23 maxlen: 24
46.3.208.0/21 maxlen: 21
46.3.208.0/22 maxlen: 24
46.3.212.0/22 maxlen: 24
46.3.228.0/23 maxlen: 24
46.3.236.0/23 maxlen: 24
46.3.243.0/24 maxlen: 24
46.3.244.0/24 maxlen: 24
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.247.0/24 maxlen: 24
46.232.0.0/22 maxlen: 24
46.232.16.0/23 maxlen: 24
46.232.18.0/23 maxlen: 24
46.232.64.0/21 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.116.0/23 maxlen: 24
46.232.118.0/23 maxlen: 24
46.232.124.0/23 maxlen: 24
46.232.126.0/23 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.203.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.251.0/24 maxlen: 24
149.126.253.0/24 maxlen: 24
149.126.254.0/24 maxlen: 24
149.126.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 08:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:f2:18:26:e6:d6:17:96:7c:a0:d9:b4:58:a7:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 14 07:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3e17cc914ce36efb0d713dd4e1c29d6d8e88692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:fb:2f:d5:97:f0:00:ea:65:81:fb:76:e4:
ac:dd:76:0b:2b:3f:8c:3f:a8:25:69:e3:23:68:e2:
fd:20:39:aa:0c:c3:de:ff:75:44:22:b5:cc:e9:7d:
67:ea:f1:48:81:eb:4f:02:c6:52:2b:36:01:41:8b:
a1:f9:01:54:00:04:e3:78:21:77:bf:8b:85:c8:e7:
d7:f0:cd:77:02:ce:45:8e:45:65:4b:cb:a1:25:5d:
21:fb:73:ff:f4:2e:a3:6b:98:83:58:5e:6b:ad:e0:
61:ed:2b:10:28:8e:5c:34:b8:fa:ef:d7:a0:2f:e0:
a1:6a:46:7f:b4:04:de:3a:c9:a5:62:be:7a:ea:97:
ef:bf:c6:1b:40:14:ab:8f:7e:fe:bf:5d:d5:8d:f7:
d5:1d:15:76:bf:43:54:af:ef:76:cf:cd:b0:ed:82:
cb:91:87:7d:32:f6:9c:ad:47:78:e7:dc:4f:6d:dc:
ff:d2:99:79:5b:3a:6d:4b:7f:70:bd:ee:fb:a9:6d:
5d:84:c7:9b:af:34:46:f7:4e:90:64:9d:18:1f:70:
55:74:d4:af:d4:d7:93:37:c3:ee:46:23:23:dd:c2:
49:1a:2a:88:a9:63:13:bf:7f:69:9a:84:78:26:e3:
47:b3:3a:ae:82:3f:b4:b3:ba:4d:40:2f:96:53:6b:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E1:7C:C9:14:CE:36:EF:B0:D7:13:DD:4E:1C:29:D6:D8:E8:86:92
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/0-F8yRTONu-w1xPdThwp1tjohpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.8.0/22
46.3.28.0/23
46.3.80.0/22
46.3.89.0-46.3.91.255
46.3.120.0/21
46.3.134.0/23
46.3.156.0/23
46.3.160.0/22
46.3.184.0/21
46.3.206.0-46.3.215.255
46.3.228.0/23
46.3.236.0/23
46.3.243.0-46.3.247.255
46.232.0.0/22
46.232.16.0/22
46.232.64.0/21
46.232.116.0/22
46.232.124.0/22
149.126.193.0/24
149.126.196.0/24
149.126.203.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.251.0/24
149.126.253.0-149.126.255.255
Signature Algorithm: sha256WithRSAEncryption
59:c3:65:0c:c5:9c:1b:49:2e:5d:12:3b:db:e1:69:60:98:20:
86:ef:da:32:b5:34:b4:66:cb:21:3a:a8:bf:51:1b:c9:d6:fb:
82:75:f4:de:0b:25:71:d2:b2:03:f1:99:32:43:3f:d5:fb:b0:
de:29:61:36:c3:7a:75:19:c0:e1:d0:09:22:a1:bb:40:56:d0:
4b:1e:b7:1c:5c:51:16:f2:bc:5a:50:13:fd:f5:df:5d:9b:d2:
a3:59:d5:2d:01:98:34:cc:d4:37:a3:dd:6c:0d:d6:83:70:1b:
08:b7:ad:de:2b:93:dd:9b:08:32:9b:f1:46:86:4f:9e:70:fb:
d6:90:d9:24:87:31:1b:75:92:59:02:2e:a7:3b:11:10:19:2a:
1d:8c:c0:f9:f9:5e:e5:88:9a:bd:0a:94:18:cb:d6:4d:f3:58:
cd:f0:8a:8a:78:cf:ff:6c:6b:58:93:58:54:e0:3f:ce:f4:3b:
d1:2c:6f:37:03:03:4f:0f:af:1c:0a:aa:4e:54:ac:18:08:e3:
1b:13:55:aa:72:95:bd:41:e1:3e:3e:77:3a:63:57:03:0c:50:
f8:7a:21:0a:89:f9:34:40:f9:46:3c:1c:b2:49:8d:e4:0b:e7:
e9:75:40:f9:32:66:58:f9:07:4f:d8:e1:bf:a6:be:72:d6:9c:
72:1b:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 15:01:13 2024 by rpki-client on console.sobornost.net