Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5DTWVJFdYnM7l7wXo7wzQVx4PSo.roa
File: 5DTWVJFdYnM7l7wXo7wzQVx4PSo.roa (raw, json)
Hash identifier: FbiTZEg1cTGNk68wSWOxg24X4woUqCx/0rPGqgG/2VA=
Subject key identifier: E4:34:D6:54:91:5D:62:73:3B:97:BC:17:A3:BC:33:41:5C:78:3D:2A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AF65F6E442D52DB2A268255EF2D93ACC4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5DTWVJFdYnM7l7wXo7wzQVx4PSo.roa
Signing time: Tue 03 Oct 2023 16:29:23 +0000
ROA not before: Tue 03 Oct 2023 16:29:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:5f:6e:44:2d:52:db:2a:26:82:55:ef:2d:93:ac:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 3 16:29:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e434d654915d62733b97bc17a3bc33415c783d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:59:c0:d1:6b:cc:f2:15:dc:e7:71:e3:2c:53:
5a:82:b1:0c:af:f3:2c:0e:48:e5:82:db:70:05:27:
4b:a2:44:f3:34:d8:2d:13:02:e4:b8:1b:58:1d:03:
0f:1c:44:14:49:ca:57:a0:16:b5:8f:bc:0f:9e:77:
4e:7b:40:5b:32:d5:cf:25:d0:7f:83:63:f6:76:c4:
e6:cf:2a:20:32:f4:54:a6:e6:b7:cf:7d:c8:de:1b:
2d:a7:ff:2f:58:f9:64:45:83:39:fb:50:b2:c2:68:
35:5e:0f:eb:01:34:29:9c:e8:cf:84:09:26:c1:fd:
cf:9d:ba:c8:28:c1:24:62:0f:f9:10:0e:f1:e5:9e:
b2:cb:45:77:9c:76:63:c8:04:66:f5:0a:23:96:2e:
ec:82:b3:55:92:9f:e9:cd:96:4e:8a:3a:74:65:2d:
83:dc:16:2f:f3:bf:93:ce:31:36:7c:aa:45:9d:85:
6f:1e:c2:09:fd:23:12:7e:82:ea:be:6f:94:7f:5f:
e3:f4:9d:cb:1a:0a:e7:11:bd:95:46:37:81:bd:da:
16:52:86:25:21:76:ab:0e:f3:c5:41:aa:7b:c5:e9:
db:69:3e:de:9f:96:67:92:cb:dd:da:e5:8e:10:67:
e3:62:f4:f5:73:92:9f:a7:97:05:1b:10:cd:42:bb:
ae:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:34:D6:54:91:5D:62:73:3B:97:BC:17:A3:BC:33:41:5C:78:3D:2A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/5DTWVJFdYnM7l7wXo7wzQVx4PSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4d:93:ae:da:c0:83:29:d3:0d:1e:31:ca:a0:b8:5e:84:a7:
77:7a:59:1a:ed:c1:21:92:c1:2b:2b:35:76:b4:f2:fa:c5:82:
c4:d1:bf:1f:7d:b5:5f:da:9c:eb:a8:2d:7a:af:fc:e4:e2:cb:
98:ea:bf:dc:98:d8:73:82:34:c5:da:f9:40:7a:19:cb:62:2b:
95:bd:48:6e:be:8c:47:0a:d7:80:32:45:5f:19:6e:2f:df:06:
c8:6c:07:11:14:73:46:84:1c:3e:51:5e:89:f8:50:76:4b:9a:
75:4c:59:06:a2:b6:58:d3:71:2e:1e:13:b3:3b:89:ce:d9:ee:
87:e1:c7:f4:d3:0c:1a:67:16:eb:c7:a7:29:02:d7:47:09:a2:
0a:84:3d:28:65:55:36:8b:9e:ad:f5:b5:9f:e1:7a:ff:22:e4:
73:f3:1b:a2:80:56:4a:de:c7:8b:a5:93:64:e4:c0:72:e8:3d:
9d:1b:b3:a7:03:8e:af:51:61:bf:ea:28:55:0c:01:74:4f:88:
5a:09:31:92:a4:97:e0:0d:ff:b7:c2:57:dc:63:88:fb:55:61:
c1:4f:3f:64:9b:06:6d:10:17:c6:b8:2a:65:0a:18:a0:b3:3e:
45:b4:5f:bf:3e:55:82:9c:cd:13:b0:ff:6d:e9:6a:d3:77:37:
86:69:31:e5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYr2X25ELVLbKiaCVe8tk6zEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMxMDAzMTYyOTIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDM0ZDY1NDkxNWQ2MjczM2I5N2JjMTdhM2JjMzM0MTVjNzgzZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VnA0WvM8hXc53HjLFNagrEMr/Ms
DkjlgttwBSdLokTzNNgtEwLkuBtYHQMPHEQUScpXoBa1j7wPnndOe0BbMtXPJdB/
g2P2dsTmzyogMvRUpua3z33I3hstp/8vWPlkRYM5+1Cywmg1Xg/rATQpnOjPhAkm
wf3PnbrIKMEkYg/5EA7x5Z6yy0V3nHZjyARm9Qojli7sgrNVkp/pzZZOijp0ZS2D
3BYv87+TzjE2fKpFnYVvHsIJ/SMSfoLqvm+Uf1/j9J3LGgrnEb2VRjeBvdoWUoYl
IXarDvPFQap7xenbaT7en5Znksvd2uWOEGfjYvT1c5Kfp5cFGxDNQruuQwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOQ01lSRXWJzO5e8F6O8M0FceD0qMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvNURUV1ZKRmRZbk03bDd3WG83d3pRVng0UFNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiViMAwD
BAAuJXEDBAAuJXIDBAAuJXkwDQYJKoZIhvcNAQELBQADggEBAENNk67awIMp0w0e
McqguF6Ep3d6WRrtwSGSwSsrNXa08vrFgsTRvx99tV/anOuoLXqv/OTiy5jqv9yY
2HOCNMXa+UB6GctiK5W9SG6+jEcK14AyRV8Zbi/fBshsBxEUc0aEHD5RXon4UHZL
mnVMWQaitljTcS4eE7M7ic7Z7ofhx/TTDBpnFuvHpykC10cJogqEPShlVTaLnq31
tZ/hev8i5HPzG6KAVkrex4ulk2TkwHLoPZ0bs6cDjq9RYb/qKFUMAXRPiFoJMZKk
l+AN/7fCV9xjiPtVYcFPP2SbBm0QF8a4KmUKGKCzPkW0X78+VYKczROw/23patN3
N4ZpMeU=
-----END CERTIFICATE-----
Generated at Wed Oct 4 12:35:12 2023 by rpki-client on console-ams.rpki-client.org