Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2cs-FQmCBRHq6kAcU2nfYGe1rPU.roa
File: 2cs-FQmCBRHq6kAcU2nfYGe1rPU.roa (raw, json)
Hash identifier: jWM76yJ17H29fazSo1PoG+yLxkhrhuQwVJNuVBd87WM=
Subject key identifier: D9:CB:3E:15:09:82:05:11:EA:EA:40:1C:53:69:DF:60:67:B5:AC:F5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01861C749B94CA197955EB5F7503BBAF2AAD
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2cs-FQmCBRHq6kAcU2nfYGe1rPU.roa
Signing time: Sat 04 Feb 2023 12:44:09 +0000
ROA not before: Sat 04 Feb 2023 12:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 46.37.101.0/24 maxlen: 24
46.37.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:74:9b:94:ca:19:79:55:eb:5f:75:03:bb:af:2a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 4 12:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9cb3e1509820511eaea401c5369df6067b5acf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9e:41:02:1c:8e:42:df:22:b6:e8:f0:20:83:
84:bd:a5:ed:77:01:ca:9e:54:c1:45:36:82:09:25:
e8:b1:fe:c1:1d:8f:6e:ea:27:cc:9f:fa:52:ff:03:
c3:13:17:f7:99:61:a9:cb:7d:62:ff:95:7c:2d:03:
ce:a4:aa:76:be:0d:7e:b9:2b:9e:78:69:79:d0:58:
49:2f:a2:fb:b8:a3:02:ae:4f:50:63:aa:48:d9:c1:
55:76:f7:6e:b0:10:c2:32:4f:69:70:c0:48:f8:d0:
ef:b6:2c:48:a0:14:5d:36:11:67:ac:dd:82:fd:ba:
7c:8c:72:d3:fc:48:bd:8a:c1:4e:94:f2:a7:ed:15:
1f:51:5a:23:9f:9b:2a:65:50:83:c3:3f:00:1f:42:
88:41:6d:7f:64:34:36:69:19:e1:76:4f:ca:43:f8:
11:c6:e2:e5:31:e0:ca:48:a9:bf:8e:96:81:96:01:
bd:22:87:f1:ba:c9:14:f0:0a:fa:c4:f1:f1:cc:bd:
c9:3c:15:a8:aa:6e:fe:5a:dd:d2:1e:d9:50:07:fb:
49:c0:b3:24:58:6c:b2:6c:13:12:df:0f:19:41:38:
77:59:63:5d:59:0a:81:66:03:51:c9:0e:ca:2d:96:
45:98:71:13:6e:a4:47:80:83:08:b6:04:f5:2e:84:
c5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:3E:15:09:82:05:11:EA:EA:40:1C:53:69:DF:60:67:B5:AC:F5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2cs-FQmCBRHq6kAcU2nfYGe1rPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.101.0/24
46.37.108.0/24
Signature Algorithm: sha256WithRSAEncryption
76:50:9e:62:9d:3e:04:cb:5c:10:1e:96:77:9d:5a:58:6c:06:
9c:c6:02:ae:ff:ea:9b:4c:fd:e6:58:61:b7:3d:b8:8a:a9:55:
95:a2:6e:c7:9e:67:5b:62:27:dd:11:2e:f5:c9:15:33:5b:bd:
9a:0c:d4:e8:52:c3:ce:1b:ed:cf:bc:e7:da:9a:53:86:8b:d3:
05:50:e7:45:2c:74:de:cb:dc:65:79:13:f8:b9:8a:9d:0e:c2:
09:7e:ce:49:92:9e:54:51:84:18:75:7d:4e:a1:b4:42:6b:0b:
14:19:68:54:5b:92:5e:56:9b:64:6a:31:db:fe:c6:f4:56:5d:
9e:70:6f:02:9f:20:60:9d:9b:32:43:c5:c9:2c:fc:c3:ce:66:
d4:65:3c:62:dd:58:55:8d:64:d8:4c:2b:36:58:4c:4d:f3:32:
71:02:ed:2f:6a:ae:18:97:7d:87:a6:38:4c:7a:28:e3:e6:f2:
85:8e:03:3f:19:86:6c:54:df:33:f6:32:1f:18:2a:ee:56:e9:
e7:e0:62:7b:e4:62:81:37:c7:5e:75:b4:2d:4f:11:fc:73:1d:
12:03:a7:01:59:a3:27:8a:07:23:62:b0:b2:10:f9:28:65:5b:
cd:23:06:9c:96:0a:8d:b6:fb:d2:4c:b8:08:12:c5:70:0c:de:
54:11:cb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org