Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-wSWrFDPX1f7y86rCBDtepM1UOM.roa
File: 1-wSWrFDPX1f7y86rCBDtepM1UOM.roa (raw, json)
Hash identifier: 5IjMPxRhGhwZo+jhCkJiRQ+wwlrbyHxdJg5HsHMn+2E=
Subject key identifier: FB:04:96:AC:50:CF:5F:57:FB:CB:CE:AB:08:10:ED:7A:93:35:50:E3
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0185EB38E8609ABE3C19872116882FD6CDD3
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-wSWrFDPX1f7y86rCBDtepM1UOM.roa
Signing time: Wed 25 Jan 2023 23:17:33 +0000
ROA not before: Wed 25 Jan 2023 23:17:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.104.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:eb:38:e8:60:9a:be:3c:19:87:21:16:88:2f:d6:cd:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 25 23:17:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0496ac50cf5f57fbcbceab0810ed7a933550e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:d9:9c:9b:42:47:8d:f5:2c:f7:82:1f:30:
3a:68:05:74:0e:95:c3:ef:b0:e0:0e:ed:c2:e0:3a:
2f:c7:ba:c6:5d:e4:d5:01:d3:19:0f:ff:37:dd:e4:
8c:b9:7a:65:0a:b8:92:74:e7:23:7a:c4:0d:2c:7a:
b0:6c:86:4b:ea:6d:15:f0:7e:b2:6e:e8:8b:71:15:
6a:22:6d:5f:7c:ef:1f:58:9d:b2:d7:0c:ef:d2:77:
a8:f0:a4:40:92:f5:a1:af:be:6a:0e:d2:96:33:eb:
85:99:da:b2:d4:70:7d:ce:a1:b6:9b:e8:d9:74:61:
12:f2:b4:f2:59:ff:57:71:a5:44:ff:f9:f1:1c:88:
98:91:50:c4:0e:1a:1e:93:ea:07:25:13:e1:94:4d:
19:d9:a8:7b:de:b0:de:5b:b7:11:7c:eb:70:d7:81:
f1:c3:24:5b:ee:02:e3:3d:3e:b0:10:65:a4:5e:71:
e3:dc:77:1c:08:7a:8a:4f:4d:43:08:a2:16:dc:30:
51:54:a2:0f:1c:56:9b:fd:ab:8d:8e:f4:e3:da:0d:
a8:03:6a:2f:d2:69:93:24:d0:76:a0:9b:39:10:d1:
55:9c:1b:08:81:e3:d5:c3:fd:10:d3:45:26:ef:8a:
d5:49:83:f6:c5:05:4d:eb:00:08:e5:cf:e8:82:2a:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:96:AC:50:CF:5F:57:FB:CB:CE:AB:08:10:ED:7A:93:35:50:E3
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-wSWrFDPX1f7y86rCBDtepM1UOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0/24
46.37.102.0/24
46.37.104.0-46.37.106.255
46.37.119.0/24
46.37.126.0/24
185.92.44.0/24
185.92.46.0/23
Signature Algorithm: sha256WithRSAEncryption
19:9f:7f:71:80:73:30:1a:be:28:ad:f5:6a:59:49:d0:81:57:
c6:77:7b:19:5e:fa:2d:47:1f:4d:ed:dc:77:55:d3:ca:89:da:
01:77:6d:dd:ed:a8:85:7a:bb:62:05:5c:cd:3c:49:ca:b2:ac:
db:e0:68:bc:a5:91:b6:0c:01:b2:99:15:06:9b:cc:ba:84:35:
70:3c:56:c7:d5:c7:b4:4e:eb:4c:e8:2c:99:c4:74:7c:8c:a5:
e1:ed:98:5c:6c:e2:a9:cb:39:cc:4e:7d:f9:63:17:35:56:89:
cc:01:eb:3b:62:43:c4:f2:88:e1:fc:90:34:a0:88:10:1b:c3:
2b:7f:7c:ea:c1:a0:92:6f:56:7c:a5:9f:82:86:2c:b2:7a:90:
ac:52:fa:84:2b:2b:90:df:31:d5:21:d8:a0:a6:0b:6a:e1:19:
2e:17:06:fe:58:71:00:59:05:98:ea:88:2b:23:fa:a2:b3:5d:
aa:5c:3a:fc:f8:24:04:57:0b:a9:0a:5d:a9:bb:45:b9:a7:a1:
9f:0e:d9:22:c6:7e:ca:43:4f:c0:5b:63:b3:4e:20:92:99:ab:
c5:fb:4a:71:61:d9:aa:1c:22:9b:9a:2a:b3:19:cf:45:4c:58:
a5:66:75:ce:01:ac:c6:eb:18:d9:38:fa:79:23:fa:04:71:84:
83:92:fc:42
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYXrOOhgmr48GYchFogv1s3TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwMTI1MjMxNzMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjA0OTZhYzUwY2Y1ZjU3ZmJjYmNlYWIwODEwZWQ3YTkzMzU1MGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE7ZnJtCR431LPeCHzA6aAV0DpXD
77DgDu3C4Dovx7rGXeTVAdMZD/833eSMuXplCriSdOcjesQNLHqwbIZL6m0V8H6y
buiLcRVqIm1ffO8fWJ2y1wzv0neo8KRAkvWhr75qDtKWM+uFmdqy1HB9zqG2m+jZ
dGES8rTyWf9XcaVE//nxHIiYkVDEDhoek+oHJRPhlE0Z2ah73rDeW7cRfOtw14Hx
wyRb7gLjPT6wEGWkXnHj3HccCHqKT01DCKIW3DBRVKIPHFab/auNjvTj2g2oA2ov
0mmTJNB2oJs5ENFVnBsIgePVw/0Q00Um74rVSYP2xQVN6wAI5c/ogirQsQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFPsElqxQz19X+8vOqwgQ7XqTNVDjMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvMS13U1dyRkRQWDFmN3k4NnJDQkR0ZXBNMVVPTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcy
MC8xLzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjBRBggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwOAMEAC4lYgME
AC4lZAMEAC4lZjAMAwQDLiVoAwQALiVqAwQALiV3AwQALiV+AwQAuVwsAwQBuVwu
MA0GCSqGSIb3DQEBCwUAA4IBAQAZn39xgHMwGr4orfVqWUnQgVfGd3sZXvotRx9N
7dx3VdPKidoBd23d7aiFertiBVzNPEnKsqzb4Gi8pZG2DAGymRUGm8y6hDVwPFbH
1ce0TutM6CyZxHR8jKXh7ZhcbOKpyznMTn35Yxc1VonMAes7YkPE8ojh/JA0oIgQ
G8Mrf3zqwaCSb1Z8pZ+ChiyyepCsUvqEKyuQ3zHVIdigpgtq4RkuFwb+WHEAWQWY
6ogrI/qis12qXDr8+CQEVwupCl2pu0W5p6GfDtkixn7KQ0/AW2OzTiCSmavF+0px
YdmqHCKbmiqzGc9FTFilZnXOAazG6xjZOPp5I/oEcYSDkvxC
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org