Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VBTqtQAGkYjt2zY4QHqXGe0LVgA.roa
File: VBTqtQAGkYjt2zY4QHqXGe0LVgA.roa (raw, json)
Hash identifier: tlBs1Rk9SrjtNktLmNdOfbscfC36IrEszgC6tVoPml4=
Subject key identifier: 54:14:EA:B5:00:06:91:88:ED:DB:36:38:40:7A:97:19:ED:0B:56:00
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 0188914FE54630C8AB27F498D968EC8782E3
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VBTqtQAGkYjt2zY4QHqXGe0LVgA.roa
Signing time: Tue 06 Jun 2023 15:25:12 +0000
ROA not before: Tue 06 Jun 2023 15:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 37.46.18.0/24 maxlen: 24
37.46.18.0/23 maxlen: 23
37.46.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:4f:e5:46:30:c8:ab:27:f4:98:d9:68:ec:87:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jun 6 15:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5414eab500069188eddb3638407a9719ed0b5600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f6:69:99:71:71:95:d9:43:d2:1b:74:11:4f:
40:ba:72:b6:64:70:bc:f0:86:b5:41:28:00:2b:2d:
04:91:1e:3e:38:52:1e:f1:40:60:d7:2e:93:27:90:
9c:c3:88:76:b5:83:d8:b8:1c:f5:9a:ae:70:fa:46:
ab:84:06:d2:f6:6e:ac:6e:63:30:24:79:cf:c9:aa:
72:b9:cc:f7:4b:a6:83:23:59:d6:06:72:bd:e9:46:
53:72:f9:93:fb:c5:03:bb:6c:20:06:0e:88:35:41:
67:48:ea:59:01:20:27:b3:08:60:bb:20:0f:a3:3b:
83:6c:21:be:b0:87:81:bf:48:37:dc:4b:6f:6e:db:
3b:51:79:f0:3a:90:1b:bb:aa:e9:cb:9a:4f:63:fe:
b5:79:9a:a0:28:56:60:fe:55:b4:84:05:39:77:bf:
b0:46:a2:d1:76:eb:96:9a:06:23:2c:4b:70:3e:b1:
60:65:56:ad:5d:34:ec:79:b0:71:97:ac:76:38:41:
40:dc:c2:28:af:cd:f7:89:1f:59:33:3f:ae:fd:4f:
a2:6e:17:76:a0:8b:3c:0c:1d:cf:f1:d9:f8:34:77:
b0:49:73:e6:55:af:a9:aa:15:4b:4a:a2:62:c1:7f:
fe:b4:b3:cf:12:39:84:ca:fb:ae:d1:7e:5b:b6:09:
82:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:EA:B5:00:06:91:88:ED:DB:36:38:40:7A:97:19:ED:0B:56:00
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/VBTqtQAGkYjt2zY4QHqXGe0LVgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.18.0/23
Signature Algorithm: sha256WithRSAEncryption
78:35:75:a9:7f:1d:6d:3f:a0:b7:29:27:e6:01:39:98:83:64:
2d:ad:10:ab:0d:90:a6:7d:bf:8b:22:89:ca:a1:f9:5a:02:cf:
4b:62:c5:e7:f8:33:df:21:67:d4:9d:09:f5:8b:07:be:a3:86:
a1:38:9f:2e:a1:2c:f9:de:6e:40:1f:7f:e2:5d:6f:ba:12:48:
fd:7f:d8:da:d2:2a:5e:c2:27:7f:53:b9:99:ce:22:78:b9:06:
01:cb:2a:3f:fb:5c:a2:d3:ee:c0:d4:97:0c:5f:5e:94:4f:cd:
35:2b:c1:a6:e1:d3:78:b9:d1:ee:81:6d:ab:4f:23:7b:73:ce:
0b:48:b4:d3:f6:65:76:c8:56:be:d2:39:b4:76:21:b0:29:86:
14:28:55:8a:84:db:58:d3:c4:e8:f6:6e:37:5c:0e:2b:0c:b8:
84:44:ba:95:70:e1:c2:da:f4:6f:4a:04:00:54:dc:64:65:86:
23:64:f4:6d:87:bb:92:45:66:6d:54:ec:9f:03:4d:6e:4c:4b:
2d:2a:6b:3b:dd:1f:7a:18:17:83:53:11:0f:92:34:5c:2b:df:
7f:8a:75:62:05:12:d5:1f:d4:d8:2e:28:4c:82:e0:d0:f7:8b:
4a:f2:09:61:d5:22:9c:41:63:99:d2:0c:b5:e0:dc:f8:70:79:
5b:e8:b4:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiRT+VGMMirJ/SY2Wjsh4LjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjMwNjA2MTUyNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE0ZWFiNTAwMDY5MTg4ZWRkYjM2Mzg0MDdhOTcxOWVkMGI1NjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/ZpmXFxldlD0ht0EU9AunK2ZHC8
8Ia1QSgAKy0EkR4+OFIe8UBg1y6TJ5Ccw4h2tYPYuBz1mq5w+karhAbS9m6sbmMw
JHnPyapyucz3S6aDI1nWBnK96UZTcvmT+8UDu2wgBg6INUFnSOpZASAnswhguyAP
ozuDbCG+sIeBv0g33Etvbts7UXnwOpAbu6rpy5pPY/61eZqgKFZg/lW0hAU5d7+w
RqLRduuWmgYjLEtwPrFgZVatXTTsebBxl6x2OEFA3MIor833iR9ZMz+u/U+ibhd2
oIs8DB3P8dn4NHewSXPmVa+pqhVLSqJiwX/+tLPPEjmEyvuu0X5btgmCqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQU6rUABpGI7ds2OEB6lxntC1YAMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvVkJUcXRRQUdrWWp0MnpZNFFIcVhHZTBMVmdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJS4SMA0G
CSqGSIb3DQEBCwUAA4IBAQB4NXWpfx1tP6C3KSfmATmYg2QtrRCrDZCmfb+LIonK
oflaAs9LYsXn+DPfIWfUnQn1iwe+o4ahOJ8uoSz53m5AH3/iXW+6Ekj9f9ja0ipe
wid/U7mZziJ4uQYByyo/+1yi0+7A1JcMX16UT801K8Gm4dN4udHugW2rTyN7c84L
SLTT9mV2yFa+0jm0diGwKYYUKFWKhNtY08To9m43XA4rDLiERLqVcOHC2vRvSgQA
VNxkZYYjZPRth7uSRWZtVOyfA01uTEstKms73R96GBeDUxEPkjRcK99/inViBRLV
H9TYLihMguDQ94tK8glh1SKcQWOZ0gy14Nz4cHlb6LR6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-fra.rpki-client.org