Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2pLhlrUSGWZxhA39lOZq24IF_Uc.roa
File: 2pLhlrUSGWZxhA39lOZq24IF_Uc.roa (raw, json)
Hash identifier: 77n3ZnjsQvjiE8tEmVizds6jtTnJDIv+xVg32FZK76s=
Subject key identifier: DA:92:E1:96:B5:12:19:66:71:84:0D:FD:94:E6:6A:DB:82:05:FD:47
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01877F044FB2DD14E89D030CF79171E96D03
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2pLhlrUSGWZxhA39lOZq24IF_Uc.roa
Signing time: Fri 14 Apr 2023 09:06:41 +0000
ROA not before: Fri 14 Apr 2023 09:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 46.37.112.0/24 maxlen: 24
91.205.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:04:4f:b2:dd:14:e8:9d:03:0c:f7:91:71:e9:6d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Apr 14 09:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da92e196b512196671840dfd94e66adb8205fd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:69:56:8a:d9:20:d9:58:d9:cd:94:85:5e:
5d:9f:cd:eb:d6:22:56:00:fe:e1:18:38:5a:c0:2c:
65:21:bd:d4:14:b3:26:0f:42:f5:b4:44:7d:25:66:
d7:e8:a0:27:89:fa:86:f5:4a:b9:e3:1a:62:f3:89:
d5:72:06:70:fc:27:42:29:65:c0:17:fa:fb:0d:2c:
50:ae:8d:32:9c:7e:ab:89:27:ef:fb:01:a2:0e:f8:
d7:6b:66:51:4f:56:27:ed:e6:6e:90:e9:1b:17:1d:
2b:2a:47:d9:1d:bf:84:d7:15:e0:6f:6c:fa:71:15:
cb:3d:64:30:79:22:dd:bf:a0:96:50:16:ac:53:0d:
69:fc:da:c0:c3:83:af:bf:cf:77:4a:be:03:1b:4f:
69:dc:ec:d0:9a:80:68:1a:47:13:8f:ae:3f:9b:16:
21:a0:1e:ba:44:7e:cf:41:21:44:3b:ff:af:14:b7:
c7:60:55:98:ee:90:28:23:57:31:83:b6:e3:fc:ff:
68:27:04:93:0a:59:f9:6d:df:bd:b9:a2:db:03:52:
49:4f:71:45:46:70:41:56:f1:9d:eb:1b:8c:67:53:
aa:48:cc:71:16:2b:2b:de:f4:19:6e:c7:8c:03:06:
fd:9e:0c:04:09:6d:e2:13:80:56:fe:0b:3c:e0:0b:
27:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:E1:96:B5:12:19:66:71:84:0D:FD:94:E6:6A:DB:82:05:FD:47
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/2pLhlrUSGWZxhA39lOZq24IF_Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
91.205.228.0/24
Signature Algorithm: sha256WithRSAEncryption
97:be:86:36:2f:c2:17:53:48:86:c4:fd:be:11:c9:35:5e:d1:
5c:bb:c3:a5:df:0c:b2:57:13:7a:79:56:16:65:88:e3:0c:f5:
78:d5:f3:6e:e1:ea:73:41:5c:55:1d:28:0a:30:12:10:5b:92:
1b:3f:59:67:7f:98:f2:59:61:ea:e6:f4:bd:ff:86:8b:09:df:
be:54:19:02:98:04:1a:81:ba:d4:5c:cc:ec:81:60:7f:5d:d5:
7c:92:6c:63:01:32:09:5d:71:6d:dd:bf:f9:cf:fd:db:b4:fa:
13:57:d7:9c:2d:68:95:5c:8a:66:d3:97:e0:cf:7d:bd:37:86:
7d:54:f0:dd:49:d2:b7:2c:98:e3:99:ff:5e:f9:52:81:58:47:
0a:aa:00:20:67:4a:d9:50:33:ab:59:51:53:6d:e8:a9:e1:ce:
b8:49:1e:a6:20:6f:0c:04:90:8b:a2:c9:44:63:60:e2:4c:b4:
fb:7e:3c:f2:25:ff:7b:cb:8b:96:09:fe:a3:c2:c6:c9:49:03:
7a:8d:8d:b8:8c:61:d3:a3:34:66:a8:8f:09:98:44:43:30:1a:
08:50:52:ae:55:d5:fb:65:ac:87:ab:7e:69:56:e9:70:ba:9c:
79:bc:09:b2:5d:a3:fb:b3:45:ee:ec:a6:9b:d8:b1:b6:10:ea:
fa:c8:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org