Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-m1dScjojb7cJbdO1X8xWLFybJk.roa
File: 1-m1dScjojb7cJbdO1X8xWLFybJk.roa (raw, json)
Hash identifier: gdlowemaXECgGAukn53bkqjJV337OMDQKibqPRF4IPA=
Subject key identifier: FA:6D:5D:49:C8:E8:8D:BE:DC:25:B7:4E:D5:7F:31:58:B1:72:6C:99
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0190FAC83C79ACADE6DEA2B26323F84C0A44
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-m1dScjojb7cJbdO1X8xWLFybJk.roa
Signing time: Sun 28 Jul 2024 19:19:04 +0000
ROA not before: Sun 28 Jul 2024 19:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Aug 2024 05:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fa:c8:3c:79:ac:ad:e6:de:a2:b2:63:23:f8:4c:0a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 28 19:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa6d5d49c8e88dbedc25b74ed57f3158b1726c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:e7:a2:0f:f3:ef:10:21:9c:1b:3e:46:eb:
b8:85:c2:22:29:4e:cb:65:1f:28:ba:91:7e:cd:a1:
83:98:51:55:de:1d:d8:8c:1b:cf:37:34:84:de:23:
62:0d:0c:39:64:f4:f2:28:18:c8:f6:16:63:8f:37:
d2:20:48:16:fe:17:ef:22:ee:b6:5b:11:bb:2e:c0:
99:a6:1e:7d:c4:5c:c9:f9:5a:28:58:0c:69:34:f9:
d0:e7:27:14:ae:7d:d7:c3:86:dc:6d:40:2b:ef:6e:
68:fd:92:2c:39:e4:42:3e:5f:86:76:f4:c2:3c:8b:
fc:da:1b:dd:b4:59:06:b7:8c:9a:ec:95:81:5c:9e:
d5:21:2a:bd:5c:4b:56:8a:e3:d5:72:83:b2:8f:ac:
51:9a:14:5c:62:86:f6:02:20:6b:c7:ca:89:df:fa:
ad:bd:02:1f:0a:b6:02:13:93:b1:31:4e:77:0d:b7:
23:e4:bc:d4:da:1b:11:a3:fe:02:51:b7:ba:b9:63:
3d:18:77:08:52:38:2b:54:b4:82:b0:c3:0e:40:7f:
03:bd:8b:44:91:b7:20:ad:6e:6e:1d:a5:dc:bf:b1:
55:4e:dd:03:96:fb:04:72:c3:ed:b4:84:76:bd:2a:
11:7e:2d:6b:7c:9d:b6:a3:dd:59:5a:24:78:9e:a6:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6D:5D:49:C8:E8:8D:BE:DC:25:B7:4E:D5:7F:31:58:B1:72:6C:99
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-m1dScjojb7cJbdO1X8xWLFybJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
70:1f:1f:06:c2:7c:6f:79:d3:dd:34:c1:19:2d:47:08:48:53:
a5:d5:b0:05:5c:70:3a:01:91:f9:2b:f8:c9:cf:18:07:80:08:
c8:fe:90:ed:24:ae:ad:c9:ac:53:82:9c:a7:36:0f:61:5b:1d:
2f:ed:b8:03:e2:71:03:4d:18:69:99:fb:25:98:2a:0b:68:ae:
76:a3:53:19:98:40:08:aa:70:cf:36:8f:12:86:41:6b:02:c0:
48:c7:c5:2d:ce:a9:a0:6a:75:50:1c:29:a4:ae:c4:43:9b:0b:
6c:90:b2:53:85:fb:9e:3a:6c:b6:ea:8f:44:7d:98:93:4d:83:
ab:72:9a:d4:7d:2d:ca:3b:c6:e4:84:8f:6f:79:c5:81:9a:8c:
d4:73:74:87:f2:4c:2a:99:6d:40:9d:9e:95:26:04:bc:1c:f4:
cc:12:ff:94:5e:04:1d:55:f1:df:81:a7:16:84:eb:26:01:02:
c3:e9:75:f5:54:43:ac:50:73:53:e1:2b:0f:08:cd:69:31:4d:
c7:39:b4:eb:73:e5:f8:35:41:47:b7:d2:40:3c:a2:d2:d9:9a:
f2:09:21:fa:f0:b0:4d:cb:80:05:eb:21:44:07:ab:54:08:86:
ff:8e:5a:de:2c:5e:db:25:91:f0:d4:ae:70:03:7b:94:f9:3d:
2e:46:cc:42
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZD6yDx5rK3m3qKyYyP4TApEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwNzI4MTkxOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTZkNWQ0OWM4ZTg4ZGJlZGMyNWI3NGVkNTdmMzE1OGIxNzI2Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvnnog/z7xAhnBs+Ruu4hcIiKU7L
ZR8oupF+zaGDmFFV3h3YjBvPNzSE3iNiDQw5ZPTyKBjI9hZjjzfSIEgW/hfvIu62
WxG7LsCZph59xFzJ+VooWAxpNPnQ5ycUrn3Xw4bcbUAr725o/ZIsOeRCPl+GdvTC
PIv82hvdtFkGt4ya7JWBXJ7VISq9XEtWiuPVcoOyj6xRmhRcYob2AiBrx8qJ3/qt
vQIfCrYCE5OxMU53Dbcj5LzU2hsRo/4CUbe6uWM9GHcIUjgrVLSCsMMOQH8DvYtE
kbcgrW5uHaXcv7FVTt0DlvsEcsPttIR2vSoRfi1rfJ22o91ZWiR4nqZFLwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPptXUnI6I2+3CW3TtV/MVixcmyZMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMS1tMWRTY2pvamI3Y0piZE8xWDh4V0xGeWJKay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcy
MC8xLzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4lYgME
AC4lcQMEAC4lejANBgkqhkiG9w0BAQsFAAOCAQEAcB8fBsJ8b3nT3TTBGS1HCEhT
pdWwBVxwOgGR+Sv4yc8YB4AIyP6Q7SSurcmsU4KcpzYPYVsdL+24A+JxA00YaZn7
JZgqC2iudqNTGZhACKpwzzaPEoZBawLASMfFLc6poGp1UBwppK7EQ5sLbJCyU4X7
njpstuqPRH2Yk02Dq3Ka1H0tyjvG5ISPb3nFgZqM1HN0h/JMKpltQJ2elSYEvBz0
zBL/lF4EHVXx34GnFoTrJgECw+l19VRDrFBzU+ErDwjNaTFNxzm063Pl+DVBR7fS
QDyi0tma8gkh+vCwTcuABeshRAerVAiG/45a3ixe2yWR8NSucAN7lPk9LkbMQg==
-----END CERTIFICATE-----
Generated at Wed Aug 28 07:05:42 2024 by rpki-client on console-ams.rpki-client.org