Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6KJX4hZErzPz-IWek9LJpQrFqiQ.roa
File: 6KJX4hZErzPz-IWek9LJpQrFqiQ.roa (raw, json)
Hash identifier: kvZv57hKrg8n5p6zeV4dru1RAAxv1AJKdjo01EOIj2M=
Subject key identifier: E8:A2:57:E2:16:44:AF:33:F3:F8:85:9E:93:D2:C9:A5:0A:C5:AA:24
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018C2706F7FEEC71E51B75F4DED430D2942D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6KJX4hZErzPz-IWek9LJpQrFqiQ.roa
Signing time: Fri 01 Dec 2023 20:16:57 +0000
ROA not before: Fri 01 Dec 2023 20:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47436
IP address blocks: 46.37.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:27:06:f7:fe:ec:71:e5:1b:75:f4:de:d4:30:d2:94:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 1 20:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8a257e21644af33f3f8859e93d2c9a50ac5aa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:41:a5:73:95:31:52:82:0d:0e:75:b2:4c:3c:
1b:98:65:a2:8c:27:a0:7c:b5:f1:de:b0:c4:6b:07:
54:4c:75:f9:da:44:42:2a:c6:5b:cc:7a:ec:6d:32:
be:c3:b4:ae:0b:67:05:40:ca:16:e0:69:3f:8c:be:
89:f3:d2:cf:30:65:06:88:cf:dc:98:76:4a:cb:46:
aa:e2:27:03:73:98:66:d6:be:9d:ff:4c:ae:3b:13:
06:9d:e1:e6:a4:1c:c5:4a:5e:c5:f2:8b:73:59:a0:
99:b7:84:7e:cb:2e:9e:e7:08:df:89:9f:8b:1b:8a:
07:b1:b4:53:b9:33:81:eb:61:09:88:1d:cb:1c:96:
81:12:8e:47:a4:20:1c:ea:3b:f9:32:06:f4:33:fb:
68:de:cf:b8:8d:19:5c:c4:b7:cd:9b:bf:f3:29:bb:
e9:15:06:63:35:17:1b:bd:20:c7:01:f5:46:dc:fa:
29:e9:f5:38:74:01:c3:cb:5c:66:83:9c:12:14:72:
b9:3a:a0:be:75:ee:85:51:a2:83:1e:7a:db:14:79:
a6:82:27:85:c8:8f:b2:13:20:35:8e:be:b7:97:ff:
91:86:f6:fd:8b:17:19:6c:4e:c2:38:89:17:79:06:
cb:57:90:c6:01:8c:b0:2b:b1:92:44:fa:b5:78:8c:
ee:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A2:57:E2:16:44:AF:33:F3:F8:85:9E:93:D2:C9:A5:0A:C5:AA:24
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6KJX4hZErzPz-IWek9LJpQrFqiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.117.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a9:6c:29:51:2a:ba:0f:21:80:3e:e9:fd:32:fe:5d:46:e8:
1c:a7:27:84:1d:7b:05:c2:4f:da:26:2c:d0:dd:d4:4e:10:cb:
12:63:5b:c0:9e:90:83:b5:10:e2:66:f7:63:b7:cf:52:0c:be:
04:18:52:5a:7c:a5:7b:22:a7:20:1e:49:cc:ad:59:b0:fd:fd:
35:c1:1b:71:79:d0:d1:ed:24:c4:10:fe:94:20:85:a5:4f:d1:
52:4a:c4:90:05:fe:d3:02:4c:c8:1a:5a:d4:11:27:13:79:f2:
25:41:5b:d5:a0:28:a0:77:11:e5:49:20:3a:a7:bc:6d:5e:2d:
fe:b0:65:60:0d:48:ff:e3:1c:b3:c9:d3:7f:5d:83:4c:9d:aa:
df:00:c7:a8:37:28:61:22:a2:57:33:08:3b:5b:11:ed:07:86:
5b:ce:61:83:49:01:c1:cf:f6:c6:23:23:82:74:4b:52:d3:cc:
68:16:0e:16:52:a1:14:3a:cb:8e:2f:8e:64:b6:5a:39:e0:11:
45:cd:32:33:6b:d6:68:a0:40:44:47:f1:f2:8b:43:5e:a5:82:
cf:33:a4:e8:bc:c9:63:ed:1f:23:97:0f:3b:9d:91:28:46:c1:
b6:45:a8:2b:54:fc:54:32:81:36:48:4a:c7:3a:f6:9c:75:82:
02:13:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org