Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-VA1VH0SmNXHEkqBrBrBL6NiDy0.roa
File: 1-VA1VH0SmNXHEkqBrBrBL6NiDy0.roa (raw, json)
Hash identifier: FVDW9K/gZVFR7wb2s559HDhxZfPXEXd1MSvwyJCo9K8=
Subject key identifier: F9:50:35:54:7D:12:98:D5:C7:12:4A:81:AC:1A:C1:2F:A3:62:0F:2D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D163F277020C0554CE2B88ABEA391E082
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-VA1VH0SmNXHEkqBrBrBL6NiDy0.roa
Signing time: Wed 17 Jan 2024 07:07:34 +0000
ROA not before: Wed 17 Jan 2024 07:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 22:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:3f:27:70:20:c0:55:4c:e2:b8:8a:be:a3:91:e0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 17 07:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f95035547d1298d5c7124a81ac1ac12fa3620f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:fa:79:1a:e1:51:c5:e9:ff:e5:5f:83:73:
0d:b8:5a:65:39:6f:c3:05:48:69:d1:9d:17:6f:25:
2b:98:d5:a4:bf:ac:e6:2b:f8:eb:89:7d:6f:62:9c:
16:b2:6a:7e:87:0b:16:e7:16:5f:d6:da:d6:c8:fd:
da:0b:ff:f2:98:90:3f:3d:1e:d5:24:1e:f6:d7:2a:
50:e5:a7:a0:19:c7:31:a1:23:bc:7a:0a:40:e8:99:
22:2e:a6:96:ae:ff:7e:bc:aa:6b:4f:a3:ec:db:37:
8c:5c:32:88:38:79:52:99:3a:5e:2b:ee:4d:84:3d:
26:7d:0a:71:54:4e:5f:47:2e:bf:cc:82:4c:ce:fd:
50:aa:28:12:23:25:ce:9d:09:25:ae:11:1c:15:0a:
b9:aa:5d:e1:c7:a6:9e:ac:99:0e:fb:74:dd:73:12:
5a:4a:d2:46:ca:24:07:77:86:43:54:3e:3d:c5:ca:
16:b6:c1:f4:50:1e:1a:96:b6:f4:f6:8c:48:88:f3:
8f:48:b1:c9:8a:e1:83:b9:22:b8:2c:ec:7b:db:9c:
5a:c4:da:d2:7b:72:75:c6:f9:69:a6:d5:ab:f7:5d:
31:04:df:d5:e8:61:77:8e:50:75:8a:ba:ad:40:37:
46:b7:d9:8d:e2:5c:36:46:bb:c1:63:2f:86:b2:a7:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:35:54:7D:12:98:D5:C7:12:4A:81:AC:1A:C1:2F:A3:62:0F:2D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-VA1VH0SmNXHEkqBrBrBL6NiDy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a6:2c:f0:fa:6a:14:59:e2:42:99:f8:27:3a:72:c2:8b:9b:
de:4f:5d:b8:72:5e:cd:93:30:86:54:97:f6:a6:40:52:ce:31:
45:4d:26:9c:04:1e:02:f9:28:40:55:cd:15:e3:d3:55:42:e6:
44:1a:56:df:ea:93:cf:6c:44:77:ca:7e:6f:73:58:a6:ea:2d:
04:6e:75:68:8b:96:86:b5:9c:ad:87:4b:0a:cc:70:aa:97:13:
fa:86:4b:36:11:00:7f:53:a2:4e:2f:2a:27:8a:06:0c:d0:2f:
75:8a:bc:00:a3:37:d7:6c:b1:0c:1d:f5:1a:54:e7:53:0e:1c:
2c:e1:cf:bc:27:fe:70:d4:ba:d6:65:ec:9f:44:7f:51:39:54:
25:92:14:3c:9c:ee:73:65:b4:98:3f:87:a3:21:6b:b7:fe:76:
d7:df:18:d9:f7:c1:83:d2:76:97:e9:63:a2:41:fb:9e:d8:0a:
95:93:b3:ed:b0:47:90:a2:db:26:98:f2:31:f0:5c:27:6c:2e:
3e:08:31:10:ce:43:1f:83:d4:2a:43:85:79:2d:ac:3e:03:56:
a0:f7:37:83:48:b2:13:b6:00:2b:9e:c8:d5:44:e4:b9:66:55:
8b:bf:9f:ce:45:99:67:b2:f0:42:17:80:8f:02:27:44:bb:fe:
c3:d9:d5:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jan 18 01:03:58 2024 by rpki-client on console-ams.rpki-client.org