Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4xMSsrEkeeLZv-tpiLOWIwlqfTc.roa
File: 4xMSsrEkeeLZv-tpiLOWIwlqfTc.roa (raw, json)
Hash identifier: WnZfLw7IGf2su4mKXVC1Ki+iXj11aBxTCyaE1KPXMPE=
Subject key identifier: E3:13:12:B2:B1:24:79:E2:D9:BF:EB:69:88:B3:96:23:09:6A:7D:37
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018C324FD431295141A8E2DA72429624EBF1
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4xMSsrEkeeLZv-tpiLOWIwlqfTc.roa
Signing time: Mon 04 Dec 2023 00:52:21 +0000
ROA not before: Mon 04 Dec 2023 00:52:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:32:4f:d4:31:29:51:41:a8:e2:da:72:42:96:24:eb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 4 00:52:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e31312b2b12479e2d9bfeb6988b39623096a7d37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:91:ed:cf:9a:9c:93:25:e8:7e:39:ee:15:
e0:6c:2c:05:38:7f:00:c0:19:9f:2a:95:68:c8:54:
7b:8d:67:55:d0:68:cb:e5:b5:ac:4a:da:b2:68:71:
30:aa:18:ef:71:d8:69:e9:20:dd:fb:6a:af:26:ae:
09:00:e0:d0:eb:db:7c:72:63:23:3f:27:11:6e:93:
35:5b:ee:84:ea:86:28:2e:9b:a6:92:83:00:20:14:
08:1f:39:63:d5:10:4c:a8:ae:8a:65:b3:f9:19:b9:
bb:68:d0:8f:bd:5a:b8:a6:5e:14:3a:49:c0:ff:b6:
25:98:6e:35:5f:1a:5b:d8:5b:4c:b2:07:93:ae:f7:
13:f2:51:01:41:26:03:ca:1f:50:f1:f4:bc:b4:52:
dd:16:33:a3:50:e8:da:d0:d4:6a:2e:c6:2b:af:46:
12:39:57:7a:9a:d8:10:c5:8d:f3:98:de:01:d6:86:
ef:ad:33:4f:06:01:16:a7:97:b9:68:a1:23:2e:a4:
f4:b5:57:32:e2:14:ef:14:a0:07:20:93:08:6e:08:
6e:5d:28:d5:02:6b:f3:bf:bd:df:a5:de:c1:27:16:
00:7d:ea:ed:5b:8a:d5:c2:5a:9d:eb:3f:cc:1a:fa:
26:7a:f6:1c:22:4b:9e:d6:4c:e8:02:2c:a2:18:24:
84:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:13:12:B2:B1:24:79:E2:D9:BF:EB:69:88:B3:96:23:09:6A:7D:37
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/4xMSsrEkeeLZv-tpiLOWIwlqfTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
15:53:9f:8e:92:ca:25:54:f1:4f:16:d6:35:77:98:86:f3:38:
67:d9:e4:8a:85:f9:28:19:56:17:f6:5f:69:8a:0e:ea:6d:f6:
22:c2:4b:93:07:c5:8d:35:4d:b0:72:8e:55:be:50:3b:bf:96:
bb:dd:02:91:d7:84:34:4b:0e:30:26:87:35:61:26:be:7b:1b:
9e:9c:6e:33:25:2f:b6:41:14:78:be:49:b3:f5:55:51:7c:06:
34:66:04:d1:33:a7:ae:ce:2b:fb:f9:58:59:73:b7:d6:c9:16:
6f:af:d5:50:17:20:11:e2:65:5d:81:9a:a8:24:a8:d6:dd:d9:
25:cb:36:f3:7d:35:6b:cf:ea:c8:26:e7:be:4d:8a:c8:4d:5e:
65:bf:bf:5b:69:86:e1:2d:f1:9d:ce:82:4b:e8:a9:7c:1d:4b:
53:ac:64:75:10:da:b0:87:24:f9:e6:25:ea:c1:3c:e2:e2:94:
04:61:24:fe:0a:b4:99:dc:0e:16:fe:98:55:7f:d7:a4:36:c2:
99:1a:bb:10:a4:80:4c:4a:ef:1b:3c:c8:f0:87:c8:1a:80:af:
d8:99:be:43:7d:67:30:f6:ff:ed:29:7b:0c:29:71:c0:2f:2e:
b1:3d:9f:b1:8d:e5:a7:59:22:62:91:fe:60:2a:c8:85:f0:d0:
e4:fc:d4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 25 07:11:07 2023 by rpki-client on console-ams.rpki-client.org