Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4x1LtP3rAcLdOlBgnhUCZnC1d0o.roa
File: 4x1LtP3rAcLdOlBgnhUCZnC1d0o.roa (raw, json)
Hash identifier: DLwnOCQ7whApKSr866SAuem6Pq93mF4XtpTKsmQt23k=
Subject key identifier: E3:1D:4B:B4:FD:EB:01:C2:DD:3A:50:60:9E:15:02:66:70:B5:77:4A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188A45853707960FA4DE5ED47E1DD0ACA0A
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4x1LtP3rAcLdOlBgnhUCZnC1d0o.roa
Signing time: Sat 10 Jun 2023 08:07:11 +0000
ROA not before: Sat 10 Jun 2023 08:07:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.97.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:58:53:70:79:60:fa:4d:e5:ed:47:e1:dd:0a:ca:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 10 08:07:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e31d4bb4fdeb01c2dd3a50609e15026670b5774a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:82:47:13:81:bc:47:43:71:5f:7e:17:7e:
09:71:89:b8:85:60:17:13:3b:ae:7b:27:b0:0a:b8:
21:06:82:5b:71:c5:b8:8c:6a:4b:4d:cb:64:77:2b:
c0:0d:57:00:5b:fa:83:81:57:e5:ff:cf:8b:5d:3a:
44:c9:38:d0:b4:84:93:19:da:cc:41:be:00:fd:62:
d6:83:c7:d2:30:51:a8:7d:e3:0d:ae:1d:61:43:ea:
4f:68:56:ae:44:37:7d:a8:da:26:b4:a6:77:67:99:
85:48:3e:e3:fd:18:d4:43:8b:57:56:25:1a:e9:3c:
93:14:64:f0:c5:53:90:de:6e:81:c8:b1:3f:7c:6e:
85:9a:86:0c:97:6d:b4:cd:9c:ab:26:45:0a:9f:4d:
f0:c6:f3:29:92:99:be:0f:9b:53:8a:6e:29:5d:4d:
a5:cd:68:c4:b9:f4:61:0f:b5:20:02:b2:dc:f8:09:
d0:84:ce:04:29:ef:22:26:df:b7:fa:2a:d0:51:e6:
56:a0:b3:92:ba:86:6b:23:1a:db:c0:f0:78:34:4b:
a0:72:0b:4f:c0:f1:25:c4:ec:72:38:6c:d3:79:20:
c2:d7:e3:d7:60:05:16:f7:a2:08:2c:66:d4:77:92:
41:6b:71:0c:d2:f6:62:c8:98:ba:c6:c1:c8:27:25:
db:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1D:4B:B4:FD:EB:01:C2:DD:3A:50:60:9E:15:02:66:70:B5:77:4A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4x1LtP3rAcLdOlBgnhUCZnC1d0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.97.0-46.37.98.255
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
af:15:1b:50:74:fb:01:aa:fe:19:d8:8b:d5:46:5c:e4:2b:a2:
5a:5a:1d:3d:cb:b7:d5:f9:61:ea:34:04:da:55:75:2a:19:6a:
1b:47:17:b9:d5:01:69:c5:c1:84:b1:3a:db:74:ed:df:9a:1c:
81:c2:d3:e8:cd:38:9e:9d:e5:77:a6:4d:77:eb:29:52:06:3e:
9f:12:3e:c4:07:f2:22:2b:94:3b:cd:b7:36:f8:6b:bb:d9:d5:
24:2a:43:78:df:6b:60:db:b3:a5:64:cc:37:48:f4:be:e2:71:
e6:e7:b9:ac:29:14:0a:b5:67:01:05:a4:d7:35:cd:72:84:f5:
18:69:1f:86:ea:92:7a:72:81:27:b1:c4:73:a0:ce:d4:36:ce:
1f:68:10:6e:00:c0:20:c7:b5:d7:da:63:a2:ac:31:56:ad:8c:
4d:f1:d2:8b:fc:b0:3b:6d:26:d1:9f:2f:25:7d:21:22:c9:e4:
c4:04:db:f8:bf:79:41:5d:c4:51:d8:51:ad:11:f4:4a:78:86:
dd:df:e9:52:fb:d2:1e:a5:e5:f6:e3:d8:ab:c2:42:9f:fd:3d:
7e:2d:a9:f2:26:6c:79:33:73:02:d1:f1:36:e8:84:49:35:0e:
29:2b:19:41:50:45:dd:52:c3:69:59:76:a6:f3:07:59:b7:08:
73:57:4e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org