Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YPFY0NO8-F3A0TTDf7Js3TTGRBk.roa
File: YPFY0NO8-F3A0TTDf7Js3TTGRBk.roa (raw, json)
Hash identifier: 6j7d520TFP1x2dZM8PMnT1MYUYp/VF7pUopdWSQZg7c=
Subject key identifier: 60:F1:58:D0:D3:BC:F8:5D:C0:D1:34:C3:7F:B2:6C:DD:34:C6:44:19
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018E3BF2186AAE644E56E653E28E85828034
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YPFY0NO8-F3A0TTDf7Js3TTGRBk.roa
Signing time: Thu 14 Mar 2024 07:51:45 +0000
ROA not before: Thu 14 Mar 2024 07:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 46.3.88.0/24 maxlen: 24
46.3.89.0/24 maxlen: 24
46.3.90.0/24 maxlen: 24
46.3.91.0/24 maxlen: 24
46.3.116.0/22 maxlen: 24
46.3.120.0/21 maxlen: 21
46.3.134.0/24 maxlen: 24
46.3.160.0/24 maxlen: 24
46.3.161.0/24 maxlen: 24
46.3.162.0/24 maxlen: 24
46.3.163.0/24 maxlen: 24
46.3.188.0/24 maxlen: 24
46.3.190.0/24 maxlen: 24
46.3.191.0/24 maxlen: 24
46.3.200.0/24 maxlen: 24
46.3.201.0/24 maxlen: 24
46.3.220.0/23 maxlen: 23
46.3.230.0/23 maxlen: 23
46.3.245.0/24 maxlen: 24
46.3.246.0/24 maxlen: 24
46.3.248.0/24 maxlen: 24
46.3.250.0/24 maxlen: 24
46.3.251.0/24 maxlen: 24
46.3.252.0/24 maxlen: 24
46.3.253.0/24 maxlen: 24
46.3.254.0/24 maxlen: 24
46.3.255.0/24 maxlen: 24
46.232.64.0/24 maxlen: 24
46.232.65.0/24 maxlen: 24
46.232.66.0/24 maxlen: 24
46.232.67.0/24 maxlen: 24
46.232.68.0/24 maxlen: 24
46.232.69.0/24 maxlen: 24
46.232.70.0/24 maxlen: 24
46.232.71.0/24 maxlen: 24
46.232.72.0/21 maxlen: 24
46.232.72.0/24 maxlen: 24
149.126.226.0/24 maxlen: 24
149.126.228.0/24 maxlen: 24
149.126.231.0/24 maxlen: 24
149.126.242.0/24 maxlen: 24
149.126.244.0/24 maxlen: 24
149.126.245.0/24 maxlen: 24
149.126.247.0/24 maxlen: 24
149.126.248.0/24 maxlen: 24
149.126.249.0/24 maxlen: 24
149.126.250.0/24 maxlen: 24
149.126.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Mar 2024 08:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:f2:18:6a:ae:64:4e:56:e6:53:e2:8e:85:82:80:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Mar 14 07:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60f158d0d3bcf85dc0d134c37fb26cdd34c64419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:6d:41:03:03:b3:2f:af:6b:c7:1f:b5:80:
54:2e:d9:10:af:3c:38:1a:67:af:75:b5:db:d7:e2:
2e:4d:be:85:c3:5a:40:c4:9d:b4:92:7b:11:d5:6c:
d7:94:4f:e6:d6:e7:35:14:17:2a:3f:12:aa:02:08:
d3:d0:0f:37:98:26:07:4e:ba:99:a4:c5:12:8e:f8:
5b:26:34:12:73:7c:8f:a4:0b:c6:3e:06:93:41:f3:
f7:26:e2:8a:85:16:0b:a8:f2:83:d9:64:56:fc:6a:
0d:2b:5d:9a:6c:95:6e:97:b0:11:c5:85:14:00:95:
ba:e2:f8:a9:2e:e3:a8:58:e3:99:53:dc:f0:cf:82:
0c:34:ac:83:88:e9:7c:60:c5:fc:6c:4e:63:73:fb:
02:7b:cf:16:e4:df:b0:bb:0e:55:20:fe:de:f5:3e:
ce:88:3a:16:ba:34:00:ab:b2:f4:2e:71:24:7d:02:
f6:6b:be:0e:f2:e8:41:5a:ae:15:5c:8d:cd:92:fc:
c9:69:42:b3:34:24:e6:cb:64:6a:95:14:0c:58:ed:
94:db:0a:14:64:cf:53:92:c0:72:d6:a6:ec:3d:13:
81:45:75:a7:7c:0a:c6:21:5b:12:1c:50:32:50:2e:
7b:06:c4:31:22:ef:5d:05:77:24:d5:ad:bb:73:21:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F1:58:D0:D3:BC:F8:5D:C0:D1:34:C3:7F:B2:6C:DD:34:C6:44:19
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/YPFY0NO8-F3A0TTDf7Js3TTGRBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.88.0/22
46.3.116.0-46.3.127.255
46.3.134.0/24
46.3.160.0/22
46.3.188.0/24
46.3.190.0/23
46.3.200.0/23
46.3.220.0/23
46.3.230.0/23
46.3.245.0-46.3.246.255
46.3.248.0/24
46.3.250.0-46.3.255.255
46.232.64.0/20
149.126.226.0/24
149.126.228.0/24
149.126.231.0/24
149.126.242.0/24
149.126.244.0/23
149.126.247.0-149.126.250.255
149.126.252.0/24
Signature Algorithm: sha256WithRSAEncryption
43:99:a1:f9:d8:5d:fb:fd:69:0b:b8:a3:9b:a9:0f:43:f5:0e:
1c:66:fa:a4:10:42:e0:38:50:9f:11:a6:12:3b:4c:d5:96:68:
8b:10:eb:f3:5f:aa:5f:89:e1:9d:67:ca:75:7f:8b:6e:2e:7a:
6a:15:24:a1:c6:42:42:de:36:82:7e:89:8c:ea:76:4e:7a:31:
3f:92:4f:9b:14:94:ca:da:fd:6f:39:ac:74:4e:a5:cf:c1:20:
9b:4f:33:5e:62:0c:6e:52:86:87:0c:10:cd:b8:2c:61:b4:70:
b9:50:18:3d:18:d7:23:32:f1:97:52:ab:bd:77:54:32:eb:76:
3a:01:65:70:5f:55:ea:2c:7a:1c:fb:ea:3c:b2:a3:c2:e2:81:
98:90:8e:71:a5:8e:c4:61:a4:9d:eb:40:04:27:3c:a2:1a:f2:
16:88:71:99:a5:16:a2:b3:b1:5b:b9:a8:fb:2c:3c:95:2d:26:
53:10:07:14:cd:bb:f3:a9:c7:7b:32:41:94:55:89:53:cf:d2:
93:8e:3b:f8:99:ef:d0:d1:eb:41:48:65:97:46:0f:83:dc:79:
75:47:fd:a7:cd:8c:c2:2a:02:4c:50:e5:ba:24:3c:09:1d:8e:
40:60:9e:a5:75:99:27:1d:ea:d2:03:91:83:3b:7d:8d:27:d2:
57:20:c9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 14 15:01:13 2024 by rpki-client on console.sobornost.net