Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-tGn2b7whvsDkvOSSChhj29Df9I.roa
File: 1-tGn2b7whvsDkvOSSChhj29Df9I.roa (raw, json)
Hash identifier: Q4vE2dS14BrueXnKEy8DRkY9hwGe3AZUCLQc8KxDSOg=
Subject key identifier: FA:D1:A7:D9:BE:F0:86:FB:03:92:F3:92:48:28:61:8F:6F:43:7F:D2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018ECDA3672DC20FDE7DCB801EC45B575A51
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-tGn2b7whvsDkvOSSChhj29Df9I.roa
Signing time: Thu 11 Apr 2024 14:50:21 +0000
ROA not before: Thu 11 Apr 2024 14:50:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 14:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:a3:67:2d:c2:0f:de:7d:cb:80:1e:c4:5b:57:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 11 14:50:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fad1a7d9bef086fb0392f3924828618f6f437fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:ac:7f:22:b5:e2:89:68:d9:f3:fe:a5:2f:
38:57:c5:12:2e:36:e2:b0:35:65:ef:76:e0:81:81:
dc:f1:5d:be:d1:ba:20:78:5e:04:09:e0:35:42:c0:
3f:f4:b8:b9:29:5f:82:dd:e5:95:07:99:4e:18:78:
cc:99:6d:af:45:72:85:1f:93:e0:7c:82:84:23:cc:
f0:55:eb:ce:11:1a:5a:35:a3:e8:bb:5e:0f:1f:29:
40:74:c1:87:4a:14:2f:d1:69:32:d4:41:25:82:41:
a5:1e:78:2e:14:9a:a7:3a:af:54:91:df:fe:9c:e9:
a5:2c:12:47:ff:c7:7d:02:8f:b5:05:50:dc:bb:bb:
66:14:42:2a:20:d3:c9:bc:da:04:3d:d2:34:10:c8:
29:2c:96:4d:71:7e:13:71:75:d7:88:70:c2:bc:c0:
5f:04:79:b9:ff:2c:f3:63:96:0b:8b:dd:dc:4f:12:
ff:d0:20:ee:7c:89:18:11:d9:fe:36:2b:83:e6:0a:
b9:64:f8:25:25:92:6a:c8:b8:83:68:7e:84:07:b2:
e7:c9:18:2e:05:ca:23:7d:3a:ed:87:68:ab:d1:12:
42:a9:2d:c2:f6:ec:1a:ae:8c:69:13:b5:2f:37:55:
31:c1:d6:5c:eb:d6:ef:f2:20:82:05:49:74:ac:80:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D1:A7:D9:BE:F0:86:FB:03:92:F3:92:48:28:61:8F:6F:43:7F:D2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-tGn2b7whvsDkvOSSChhj29Df9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:e2:41:b5:af:96:9d:55:ef:b5:85:e6:20:86:14:14:67:
64:31:aa:1a:79:a6:e2:4b:40:48:e2:e1:c1:c5:bb:36:60:f4:
10:1a:c1:f2:6d:d2:ef:94:af:d1:39:52:b1:c4:91:30:4e:ed:
a2:53:68:cb:79:40:6f:64:35:15:ae:e6:e0:50:85:29:bc:a1:
d9:45:77:3a:29:e4:fd:3a:1c:70:0b:a7:30:66:82:79:d4:42:
4a:2e:90:7d:ab:ea:f0:e0:d2:a3:23:24:d5:f1:d3:c1:71:c1:
cd:58:0e:5d:b4:26:6e:8e:74:d4:8d:11:aa:f8:bf:c9:89:ea:
ae:08:25:0c:2b:c4:5e:37:25:5b:f0:86:74:26:fd:fc:4b:f3:
f8:81:90:4b:0d:69:14:0a:95:db:1f:ce:5f:e8:17:8f:8a:5d:
30:a8:c8:f4:77:ec:d3:1c:b8:a5:27:e6:40:2c:68:5f:38:ff:
76:86:1a:e6:79:6d:89:a0:e4:a4:e2:4f:47:94:da:7b:78:04:
96:64:c6:fd:a6:fd:49:c1:de:94:38:0c:ad:9e:ee:08:08:d9:
71:45:e5:ca:dd:6d:c5:de:a3:c5:6a:0b:40:cf:65:f3:11:4f:
29:91:2b:47:a2:c3:89:9c:49:08:de:80:1f:b1:14:bc:e4:27:
88:33:b2:d3
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAY7No2ctwg/efcuAHsRbV1pRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwNDExMTQ1MDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWQxYTdkOWJlZjA4NmZiMDM5MmYzOTI0ODI4NjE4ZjZmNDM3ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEusfyK14olo2fP+pS84V8USLjbi
sDVl73bggYHc8V2+0bogeF4ECeA1QsA/9Li5KV+C3eWVB5lOGHjMmW2vRXKFH5Pg
fIKEI8zwVevOERpaNaPou14PHylAdMGHShQv0Wky1EElgkGlHnguFJqnOq9Ukd/+
nOmlLBJH/8d9Ao+1BVDcu7tmFEIqINPJvNoEPdI0EMgpLJZNcX4TcXXXiHDCvMBf
BHm5/yzzY5YLi93cTxL/0CDufIkYEdn+NiuD5gq5ZPglJZJqyLiDaH6EB7LnyRgu
BcojfTrth2ir0RJCqS3C9uwaroxpE7UvN1UxwdZc69bv8iCCBUl0rIAexwIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPrRp9m+8Ib7A5LzkkgoYY9vQ3/SMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMS10R24yYjd3aHZzRGt2T1NTQ2hoajI5RGY5SS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcy
MC8xLzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC4lYgME
AC4lcQMEAC4lfTANBgkqhkiG9w0BAQsFAAOCAQEAnr/iQbWvlp1V77WF5iCGFBRn
ZDGqGnmm4ktASOLhwcW7NmD0EBrB8m3S75Sv0TlSscSRME7tolNoy3lAb2Q1Fa7m
4FCFKbyh2UV3Oink/ToccAunMGaCedRCSi6Qfavq8ODSoyMk1fHTwXHBzVgOXbQm
bo501I0Rqvi/yYnqrgglDCvEXjclW/CGdCb9/Evz+IGQSw1pFAqV2x/OX+gXj4pd
MKjI9Hfs0xy4pSfmQCxoXzj/doYa5nltiaDkpOJPR5Tae3gElmTG/ab9ScHelDgM
rZ7uCAjZcUXlyt1txd6jxWoLQM9l8xFPKZErR6LDiZxJCN6AH7EUvOQniDOy0w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:05 2024 by rpki-client on console-ams.rpki-client.org