Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-EoecmGmC8CxqWTJnhj2XIQQ_4Q.roa
File: 1-EoecmGmC8CxqWTJnhj2XIQQ_4Q.roa (raw, json)
Hash identifier: xuKsh3TwsnBthtyGb4QbnInrkTBWr7YuE5LBHTpGhiw=
Subject key identifier: F8:4A:1E:72:61:A6:0B:C0:B1:A9:64:C9:9E:18:F6:5C:84:10:FF:84
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01879D5C8ED8A733FCD25A715ACD15C28618
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-EoecmGmC8CxqWTJnhj2XIQQ_4Q.roa
Signing time: Thu 20 Apr 2023 06:31:41 +0000
ROA not before: Thu 20 Apr 2023 06:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:5c:8e:d8:a7:33:fc:d2:5a:71:5a:cd:15:c2:86:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 20 06:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f84a1e7261a60bc0b1a964c99e18f65c8410ff84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:75:6c:14:5b:b1:b5:3e:e2:1d:e5:b5:be:
d8:9f:9a:18:f0:12:1c:18:64:6d:b2:17:62:b4:b8:
ae:fc:35:73:72:0e:7b:58:ca:dd:84:d2:44:60:fd:
03:fb:60:28:25:f8:26:fd:7b:43:d2:6f:b9:4b:7a:
c7:66:8c:a3:47:c9:71:ea:13:b2:22:f5:79:67:1c:
dd:8f:96:8a:ba:5d:b2:f4:ea:23:51:e5:2c:94:26:
da:0a:79:6a:6a:25:e6:d1:7b:df:de:65:2c:61:51:
24:3d:cc:61:1c:1b:5d:dc:af:80:f0:4a:c3:9d:a0:
c4:97:d9:61:ff:61:48:09:fd:87:c1:84:c5:7a:e5:
17:1b:23:b5:65:6d:26:ac:47:9c:3e:18:76:b0:f6:
40:01:ef:88:87:35:ad:48:a9:ba:58:da:7f:fc:fb:
88:a4:d6:fc:09:ed:6c:72:fb:67:c8:a3:21:c8:a7:
c8:47:8b:8a:89:51:ea:21:1d:35:2c:2a:e7:f6:0f:
eb:19:a4:cd:df:c1:b1:2d:d1:be:f2:aa:26:cb:3b:
bf:2b:ee:ca:a3:4d:0a:35:58:e5:0a:48:dd:4e:c4:
3a:c2:25:c3:eb:4a:b8:08:21:92:e1:a7:e4:e2:93:
34:aa:07:15:ba:b6:38:22:88:4e:a9:0f:fb:cf:12:
5c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4A:1E:72:61:A6:0B:C0:B1:A9:64:C9:9E:18:F6:5C:84:10:FF:84
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-EoecmGmC8CxqWTJnhj2XIQQ_4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0/24
46.37.102.0/24
46.37.104.0-46.37.106.255
46.37.109.0/24
46.37.118.0-46.37.121.255
46.37.126.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
29:e9:b0:81:e5:a9:ce:a0:f7:6c:0f:5a:40:0d:1b:d3:2d:42:
55:f8:8d:c2:08:28:5c:13:15:3b:2c:35:8f:63:b6:eb:15:8b:
d8:ff:9e:f4:da:13:53:92:74:8b:ff:17:a4:22:0d:ab:7b:f9:
37:34:60:4c:f6:e2:2b:9c:d8:b6:ff:b3:74:14:a0:21:f2:d7:
d2:a6:ee:cd:14:f6:c3:0c:01:78:62:58:9b:ce:e6:b7:ce:c4:
b6:db:b7:32:c6:b1:e7:77:bd:6a:a9:24:0c:58:a1:c2:01:0d:
5f:eb:5b:e2:6c:38:8e:d5:25:06:d4:14:d8:d6:71:a5:62:69:
fa:1f:4a:d8:d8:9e:91:b7:f3:0b:15:14:eb:f9:31:7d:9c:a2:
4c:c4:97:bc:ba:f7:f3:fc:86:9b:7e:59:d5:3d:6a:f4:82:d7:
6e:b5:42:d6:90:5c:37:86:91:4a:ab:01:17:b4:f1:c8:14:e0:
2e:87:2e:8c:aa:58:64:7e:f9:fa:91:e9:2e:c8:97:23:e0:10:
ad:24:d0:46:10:9f:e9:7b:f7:4d:56:9a:4d:9e:a5:46:58:84:
29:3a:f1:4e:b2:da:f5:4b:76:f9:7c:64:80:4b:95:b7:f3:d5:
d0:12:ef:ae:57:e2:19:1d:88:67:39:17:02:7b:09:bf:d7:76:
a1:f5:ca:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:44 2023 by rpki-client on console-fra.rpki-client.org