Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2QmDGtczh3BpBJ1-_mMKhGgb1fI.roa
File: 2QmDGtczh3BpBJ1-_mMKhGgb1fI.roa (raw, json)
Hash identifier: J4zBgMnqpcvkn6uYZgOI76wKgdhtR41UDSMdkDqVjY0=
Subject key identifier: D9:09:83:1A:D7:33:87:70:69:04:9D:7E:FE:63:0A:84:68:1B:D5:F2
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AB661102997FBBB2C0BEE7701C997E329
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2QmDGtczh3BpBJ1-_mMKhGgb1fI.roa
Signing time: Thu 21 Sep 2023 06:15:29 +0000
ROA not before: Thu 21 Sep 2023 06:15:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:61:10:29:97:fb:bb:2c:0b:ee:77:01:c9:97:e3:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 21 06:15:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d909831ad733877069049d7efe630a84681bd5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:f3:e3:c2:81:99:25:4e:9d:20:91:05:41:
29:e7:c3:fe:35:07:6c:b8:d6:ec:f1:f2:9a:b7:52:
35:47:27:6b:17:72:80:e8:15:32:48:16:f5:9f:02:
47:97:ae:ba:44:85:10:90:88:56:d5:cf:47:92:71:
d8:83:48:1e:3d:70:2a:35:c8:69:40:70:e2:f8:90:
ad:62:74:54:24:90:45:64:66:b5:6f:8a:59:0c:bb:
0d:94:28:84:91:d6:95:a7:0c:54:e4:9a:3f:4d:fa:
91:d0:a6:ac:c1:62:eb:fd:3c:81:15:e6:f6:d5:99:
64:2a:dd:71:9d:dd:0f:dc:7a:b9:f1:ae:dd:46:e3:
50:d5:b5:d1:ab:87:2d:52:64:64:c6:a5:3d:45:7c:
ed:4c:9f:5a:39:fd:03:b2:04:94:99:b6:26:91:7d:
cd:3c:df:5e:47:0d:0b:f8:b1:15:60:cc:13:de:4c:
e4:ee:64:d4:f2:cb:fa:04:d0:8a:e9:c9:31:69:26:
cb:8b:38:ea:c7:5a:09:8a:3f:1b:47:83:0a:74:f6:
94:b9:4a:ab:00:49:e9:a1:90:2a:8b:9b:42:12:80:
18:2c:5c:bf:75:47:5d:58:b5:7a:e8:c0:1d:a1:e4:
95:3b:6f:7f:50:8a:f3:04:ce:01:05:18:c1:b2:bc:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:83:1A:D7:33:87:70:69:04:9D:7E:FE:63:0A:84:68:1B:D5:F2
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2QmDGtczh3BpBJ1-_mMKhGgb1fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.117.0/24
46.37.120.0/23
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ac:60:bc:d5:9a:84:71:29:24:30:6c:04:a1:f6:3d:6a:d0:
50:26:6c:3d:c8:f6:c6:64:e6:25:e3:af:ea:53:64:69:0d:1e:
18:f1:17:54:87:d3:4e:48:8c:4d:24:cc:94:b7:39:9f:10:a0:
02:59:8f:7a:b0:a5:cb:08:9e:64:83:00:12:8c:24:51:7c:1e:
68:dd:32:55:4c:99:ca:bc:04:99:a2:f0:2f:33:cb:ee:37:3b:
7a:5c:3f:55:81:55:99:c7:8c:b1:02:8b:65:21:87:fc:db:43:
7a:8a:3d:ab:f2:68:f1:ec:c7:35:36:fc:3b:79:33:71:cd:b7:
31:b4:32:76:99:c3:6f:13:87:9e:ff:b5:91:6d:0e:37:38:47:
00:be:c6:81:f8:ee:c0:7e:1c:9d:a1:ef:26:17:d9:96:ad:af:
72:27:f7:43:ef:12:62:be:e6:21:cb:5b:4d:63:3c:d9:2e:42:
e3:c0:c8:da:b5:e8:81:8a:2d:fe:34:6e:2f:b5:7e:bd:a1:a0:
2c:ae:34:fb:ed:0f:13:78:c4:01:f7:11:3e:d9:f0:7a:e3:bf:
0f:17:79:97:09:50:f7:d7:f5:1a:82:fd:dc:c7:ac:0e:82:b6:
bd:fb:d3:bc:16:1d:0b:30:23:2d:76:68:aa:94:59:99:a9:c3:
98:90:e3:16
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 29 21:14:32 2023 by rpki-client on console-ams.rpki-client.org