Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1W2noiTDD6x_l7aneH08KIlE2wU.roa
File: 1W2noiTDD6x_l7aneH08KIlE2wU.roa (raw, json)
Hash identifier: 8PSI5R2eDRNT6EA0uezpa4khInbW02x7FOye/FaowHw=
Subject key identifier: D5:6D:A7:A2:24:C3:0F:AC:7F:97:B6:A7:78:7D:3C:28:89:44:DB:05
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B3541A34D008DA58007EB48511D05EEEB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1W2noiTDD6x_l7aneH08KIlE2wU.roa
Signing time: Sun 15 Oct 2023 21:32:55 +0000
ROA not before: Sun 15 Oct 2023 21:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:35:41:a3:4d:00:8d:a5:80:07:eb:48:51:1d:05:ee:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 15 21:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d56da7a224c30fac7f97b6a7787d3c288944db05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:3c:de:a2:e6:67:e0:d1:65:1d:74:2b:a8:
55:9f:48:d6:d0:98:d1:c7:a0:6a:2f:5e:b9:04:86:
f0:01:fa:b0:94:e1:21:77:38:76:3a:d6:70:19:9e:
49:b5:40:e6:40:e3:9a:58:78:e7:7b:9b:a9:a5:7e:
f9:5d:cf:13:b7:a7:64:9e:8e:79:03:f3:93:f0:e8:
6f:0b:82:2c:09:38:d3:92:1b:1f:46:92:56:68:1b:
93:d7:63:53:c0:fe:72:7b:c3:aa:ff:f3:d4:70:cb:
65:bd:ed:42:9c:cb:f7:a4:a2:e9:82:21:1d:77:cd:
f0:ac:a7:42:ac:e3:2b:3a:1a:bf:53:7e:fd:95:6a:
a1:94:c9:6b:9e:e2:62:cf:a2:2f:3a:d2:24:6b:9d:
f4:ab:34:68:1c:f8:d4:3f:42:86:f3:ef:67:1c:45:
24:87:e2:31:fd:a5:20:ed:b4:30:7f:b6:b9:cf:92:
22:75:4d:5b:52:05:e1:38:08:a0:64:83:fd:94:00:
ab:5f:8a:f2:58:39:b7:0f:cf:a0:d3:2e:8e:f3:8d:
41:86:38:3b:ea:8a:50:60:64:04:01:7a:f0:56:6c:
26:17:ec:26:86:03:29:72:27:1f:9e:d8:86:09:f0:
4a:54:7d:ef:fe:33:92:68:d8:bf:9b:39:28:0b:68:
fa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6D:A7:A2:24:C3:0F:AC:7F:97:B6:A7:78:7D:3C:28:89:44:DB:05
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1W2noiTDD6x_l7aneH08KIlE2wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
57:52:e5:89:70:b7:bf:2a:a3:f0:3d:03:2f:6a:3f:6a:06:c8:
e0:7c:87:fd:ec:5d:7c:db:04:69:d2:cc:22:f9:4a:61:65:46:
73:a5:8d:92:9e:16:72:17:24:d7:65:2b:c0:b3:1f:ca:c3:b1:
12:78:9f:bb:d9:2f:ce:2a:3f:e6:3e:64:5c:32:57:16:5d:60:
6c:b6:c7:d9:8d:65:f2:af:0a:ec:56:1f:59:95:34:4b:1c:30:
c4:b3:64:f2:e9:79:33:af:3b:d1:7b:d4:6b:56:0b:bd:e7:05:
60:71:df:ef:f9:04:ed:27:ff:5f:89:a7:44:f3:46:eb:31:14:
42:19:3d:0b:81:4c:1e:a1:c4:8a:d7:a7:80:78:e9:81:7b:0d:
43:69:b3:13:f6:b7:69:94:33:1a:6a:15:af:3a:c0:92:e0:2b:
57:69:aa:04:a3:85:8b:42:b8:fb:41:28:bd:97:76:33:b6:d9:
80:37:18:b6:ec:c5:b8:5f:72:09:69:d8:2a:12:d5:93:26:1d:
86:15:b8:24:05:b4:9d:97:6b:bb:fd:56:fb:db:2c:4d:76:75:
89:5e:8b:73:33:8d:8f:e1:67:dd:f5:11:04:85:3d:c1:f6:d9:
f0:33:cd:51:14:37:e0:fb:8a:ba:9d:2b:ce:d6:79:e9:a0:2c:
54:3b:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 09:13:54 2023 by rpki-client on console-fra.rpki-client.org