Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1QmJfMcVWOownScFTKY1uKlEPAs.roa
File: 1QmJfMcVWOownScFTKY1uKlEPAs.roa (raw, json)
Hash identifier: M823/XILWTFi4ZKbF8Zrzzc4abTBaeQGyStpVDNzW1Q=
Subject key identifier: D5:09:89:7C:C7:15:58:EA:30:9D:27:05:4C:A6:35:B8:A9:44:3C:0B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AA1E45425F1B1CD198186A84FADA6A367
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1QmJfMcVWOownScFTKY1uKlEPAs.roa
Signing time: Sun 17 Sep 2023 06:46:50 +0000
ROA not before: Sun 17 Sep 2023 06:46:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:e4:54:25:f1:b1:cd:19:81:86:a8:4f:ad:a6:a3:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 17 06:46:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d509897cc71558ea309d27054ca635b8a9443c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:5e:82:33:c8:a4:4d:b6:4a:01:2f:51:fd:
65:9c:a9:a0:47:aa:4b:d0:f0:e3:ca:15:ab:23:05:
98:62:88:9d:c4:b4:ea:4e:e0:a3:52:c2:69:87:3c:
64:bc:7b:1d:0c:e8:6b:34:40:d7:57:f8:7b:64:2a:
17:de:fc:9e:d7:e0:f9:82:90:45:50:de:58:5d:49:
e9:22:b5:57:dd:88:be:52:20:bf:5d:d9:f0:8e:86:
d3:39:08:a6:8b:e6:69:3b:f6:78:b8:84:4e:bb:97:
c3:2c:ed:7c:bd:52:24:64:63:ae:2a:b0:b5:ea:a0:
39:86:45:24:95:b7:86:cc:9d:e3:61:a0:5a:39:78:
0e:92:9b:23:97:68:3f:f1:bd:65:7d:2e:c1:a2:4f:
7d:f3:c3:2c:61:b5:ae:a7:a7:11:e1:2b:16:49:8c:
8c:2f:10:88:2a:c1:ba:3e:cb:81:e9:6a:bc:92:9f:
e0:28:79:23:43:7a:31:fb:88:ab:60:a9:95:ad:3b:
a3:b2:74:99:69:8c:03:fa:9a:8b:8c:59:04:fa:bb:
0b:59:91:0e:04:88:f4:e7:72:f0:6b:dd:12:6f:d4:
ee:e2:5a:79:91:9a:34:49:75:22:88:1f:81:a8:59:
7e:3a:c9:9a:8c:a9:15:15:c9:7f:77:7c:9a:c3:fe:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:09:89:7C:C7:15:58:EA:30:9D:27:05:4C:A6:35:B8:A9:44:3C:0B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1QmJfMcVWOownScFTKY1uKlEPAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.120.0/23
46.37.126.0/24
185.92.44.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7a:5b:44:89:1c:12:4a:c7:a4:7f:61:8e:00:db:83:23:6f:
c1:5b:68:3e:9f:71:cf:3d:7d:22:d2:27:f0:72:0d:2a:d5:02:
10:25:4c:c6:12:1e:28:39:6d:1a:bc:29:08:b6:3b:0b:0b:e4:
44:6b:91:d2:77:f5:f1:32:ed:50:ec:33:87:9a:13:94:5d:66:
bc:48:a3:61:63:d5:f2:17:ba:89:7b:b4:27:f8:3a:dc:c5:56:
21:7a:8b:a0:10:8d:cc:c2:34:01:43:dd:74:32:df:0e:a9:1e:
bb:db:f7:eb:20:18:87:5b:26:34:49:9a:f9:91:c7:ad:3f:a5:
a0:57:47:7f:f2:eb:2b:e5:70:4d:a2:21:a0:c5:93:5c:72:32:
8b:36:dd:48:c7:6e:47:b1:fe:82:ad:4f:20:28:23:3e:9a:c4:
13:ef:e1:50:55:94:a3:98:1c:19:9a:5d:78:d7:0b:f2:e5:68:
95:f0:29:55:fe:63:c8:b8:dd:fa:00:26:3f:be:36:cc:b0:51:
03:27:e0:ab:5a:b4:a2:b3:71:70:dc:f0:a5:24:9c:c5:c5:28:
8b:fa:ac:a4:94:1b:29:71:99:7c:e8:c5:5c:84:3f:d0:ef:95:
24:76:21:e2:98:c5:78:31:c5:34:e1:4e:3c:e8:1e:f8:35:f1:
0b:9e:30:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 08:27:41 2023 by rpki-client on console-ams.rpki-client.org