Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-n6XIL4ZL1x7YdrKuOwz9ss8gPw.roa
File: 1-n6XIL4ZL1x7YdrKuOwz9ss8gPw.roa (raw, json)
Hash identifier: 38ZHs6oLvWX+EGEK3MyGj9X1bbSkXRGEF+wXWlFSBzs=
Subject key identifier: FA:7E:97:20:BE:19:2F:5C:7B:61:DA:CA:B8:EC:33:F6:CB:3C:80:FC
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B38AB3748F8598858C66E8D566AAB4956
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-n6XIL4ZL1x7YdrKuOwz9ss8gPw.roa
Signing time: Mon 16 Oct 2023 13:27:06 +0000
ROA not before: Mon 16 Oct 2023 13:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:ab:37:48:f8:59:88:58:c6:6e:8d:56:6a:ab:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 16 13:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa7e9720be192f5c7b61dacab8ec33f6cb3c80fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:31:f2:ac:42:b7:6a:a0:2c:be:17:4f:4d:2b:
ee:a5:e0:e6:0a:ad:67:19:3f:b6:1f:b3:8f:e7:15:
c1:d1:89:08:79:f1:fc:62:22:e6:f6:00:6a:56:9f:
77:39:5c:23:5f:24:bd:74:79:58:d7:fb:8c:ea:99:
b0:29:f6:91:7e:f7:ac:f9:ab:ad:b3:77:da:b3:a0:
0e:f5:92:3a:05:4e:b5:0a:fc:1f:f4:51:be:e9:ad:
ce:0f:8f:e0:1e:dc:e5:7e:bc:97:48:18:b1:be:27:
01:14:c1:23:bd:30:d8:aa:84:fa:3e:11:89:b5:46:
e2:fb:3b:14:95:6c:61:b6:ad:bf:25:f2:c6:14:de:
e5:b2:c4:7c:01:ca:da:6f:9d:d0:bf:04:7f:c9:91:
5a:e2:d0:37:de:8c:b4:82:49:87:7b:bb:2c:dd:f8:
d8:4d:5f:8f:ce:c6:de:f1:78:e6:6d:b0:e6:24:ac:
a6:d3:4b:91:d1:4a:8e:fc:8f:03:89:f0:dd:c4:09:
5c:94:e4:0d:82:71:28:d3:7d:5d:a5:4a:69:77:cd:
5f:94:a3:b2:2f:87:03:07:b6:70:b5:4a:39:83:8d:
50:1c:6d:d8:13:d3:3d:8d:a7:9c:90:9a:db:5f:fc:
2e:a1:00:86:73:30:20:f9:0a:99:db:9d:53:14:8d:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7E:97:20:BE:19:2F:5C:7B:61:DA:CA:B8:EC:33:F6:CB:3C:80:FC
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-n6XIL4ZL1x7YdrKuOwz9ss8gPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
68:0d:96:51:02:64:4b:19:ff:8b:bb:3e:e2:02:d1:ab:c9:6c:
73:e8:73:6d:11:8d:78:9f:78:05:42:eb:78:d3:ad:87:0f:1d:
37:8f:2f:2a:46:7f:9d:5b:a7:1c:01:d5:43:3e:2c:f4:76:75:
95:82:a0:3c:a8:d6:81:84:e9:2a:48:db:4f:59:5f:6f:65:2c:
55:94:2b:3d:da:f2:2f:25:7c:97:bf:d9:7a:35:eb:b6:90:33:
d0:2f:55:c9:d6:fc:f7:39:65:24:09:b5:66:6f:34:c5:f6:68:
63:55:44:40:c8:f5:f7:8d:ed:e4:42:1d:5e:85:9b:03:b0:36:
f3:db:cd:9d:71:2a:32:d6:c8:17:8a:b9:2b:5e:17:4b:91:55:
6f:c4:1b:5d:16:85:e1:60:85:e0:50:a1:e8:17:3a:8d:50:89:
a8:3e:28:19:32:fc:22:dd:e6:4a:46:36:d6:3f:07:4a:7a:42:
f8:3e:2a:96:da:b9:c0:a2:eb:d1:32:03:49:48:9b:39:a9:68:
43:60:b1:a9:9f:02:78:e5:83:c1:9f:d5:c1:8c:26:08:35:6e:
40:d7:0d:6a:0c:41:f5:d6:b3:20:73:a0:94:7f:54:1c:de:9c:
85:80:2e:3d:7b:8f:21:be:7d:14:ab:a8:1b:50:70:ea:20:44:
3b:d9:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 16:27:40 2023 by rpki-client on console-ams.rpki-client.org