Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3sJ43URkrcxrANM0FKngyhpfPlk.roa
File: 3sJ43URkrcxrANM0FKngyhpfPlk.roa (raw, json)
Hash identifier: +0IrHR1qFxmeIkULNXXqRWWlWokh1+GDWLXKwqCz70w=
Subject key identifier: DE:C2:78:DD:44:64:AD:CC:6B:00:D3:34:14:A9:E0:CA:1A:5F:3E:59
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D1981C5C2E8A078C52067391A3CD03F3E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3sJ43URkrcxrANM0FKngyhpfPlk.roa
Signing time: Wed 17 Jan 2024 22:19:11 +0000
ROA not before: Wed 17 Jan 2024 22:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 01:22:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:19:81:c5:c2:e8:a0:78:c5:20:67:39:1a:3c:d0:3f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 17 22:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dec278dd4464adcc6b00d33414a9e0ca1a5f3e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ac:bf:66:9e:a4:27:14:b7:82:1e:df:e2:de:
7c:b8:78:43:7b:01:82:f8:70:e4:ad:4f:9e:9e:e0:
c5:5b:44:6c:26:88:f5:2c:a4:4a:b7:0c:e0:71:45:
d9:b9:3a:6d:16:31:15:ce:f3:f8:4f:19:d0:dd:f1:
21:d2:ab:4f:62:eb:f0:60:be:d0:34:68:ca:35:78:
ab:16:1f:45:a3:da:7e:3b:82:99:1d:67:84:67:c4:
8c:40:ae:37:e1:c0:76:4f:1b:59:40:b9:5e:6b:55:
56:d1:12:9a:51:fc:28:7b:69:c1:a7:61:6d:f4:03:
90:ea:9a:41:3a:17:f8:f3:b5:1b:e1:14:a6:0a:09:
7e:08:a2:c5:fd:47:1d:ca:5a:87:e2:c0:dc:9d:08:
29:18:e7:92:31:08:e9:d2:25:01:a6:cf:fc:f6:2a:
73:f0:8d:61:a6:d3:78:61:bd:44:b0:56:d2:92:cc:
a5:1a:44:61:40:7b:25:b8:f0:d4:58:93:a2:74:e4:
f8:4d:56:61:56:70:ce:af:8b:6a:72:ea:a0:58:8e:
b5:b4:54:2e:aa:9d:4e:c7:b9:8a:d8:25:f1:15:5a:
ca:9a:c2:b7:fb:e2:22:b1:19:eb:20:19:f3:b8:38:
7a:96:43:9c:a3:f8:b4:36:92:7f:28:12:1c:a2:c1:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C2:78:DD:44:64:AD:CC:6B:00:D3:34:14:A9:E0:CA:1A:5F:3E:59
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/3sJ43URkrcxrANM0FKngyhpfPlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bd:2d:28:91:91:ca:7b:7c:43:f7:6c:ba:7e:54:04:68:33:
71:a9:d9:44:10:6d:9f:30:cb:b1:ce:28:8e:a4:7e:b5:c7:8d:
37:16:ca:10:12:f6:74:74:73:c6:fa:97:f6:19:f7:fa:4e:57:
eb:fd:f3:fc:f7:4e:94:d2:57:a8:c4:37:29:6b:41:4d:86:a6:
f3:c0:03:1b:c8:00:cf:1e:03:00:0d:fa:0b:a8:a2:bc:7c:a8:
5f:0d:da:6b:83:1f:0a:4f:ec:69:a1:d9:d3:eb:21:26:22:db:
73:5c:58:c1:73:ce:75:65:6e:4c:42:44:32:2f:24:ab:b2:b9:
ec:14:a2:9f:6c:54:0d:69:cc:98:01:62:76:64:77:79:a8:fb:
9d:23:f4:55:5b:94:79:23:4e:ac:bf:ba:23:04:c0:2e:44:48:
d0:8c:e7:b4:1a:fb:0e:36:80:00:48:3a:74:5a:b3:c9:a3:27:
4e:cb:9b:24:03:14:b2:28:2b:2b:be:0a:42:32:90:19:71:b9:
9c:68:34:e7:5d:71:ad:14:6e:71:74:d2:2b:1c:bf:19:ad:27:
77:94:4c:cd:83:56:fa:13:94:27:27:fd:99:ee:77:15:a3:fa:
c4:f4:c4:55:63:10:b3:36:19:4f:e7:ec:27:4c:36:0a:62:27:
9b:46:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 05:34:07 2024 by rpki-client on console-ams.rpki-client.org