Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6d1VaLyZT5_OvMFnnMK3aXG2niU.roa
File: 6d1VaLyZT5_OvMFnnMK3aXG2niU.roa (raw, json)
Hash identifier: HbLuYkXeu91/ROIr1z3P1SRL+FRVhvLwJrAewdCojiQ=
Subject key identifier: E9:DD:55:68:BC:99:4F:9F:CE:BC:C1:67:9C:C2:B7:69:71:B6:9E:25
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01894BC386340F251A964559071640D54DFC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6d1VaLyZT5_OvMFnnMK3aXG2niU.roa
Signing time: Wed 12 Jul 2023 20:20:52 +0000
ROA not before: Wed 12 Jul 2023 20:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59432
IP address blocks: 46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4b:c3:86:34:0f:25:1a:96:45:59:07:16:40:d5:4d:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 12 20:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9dd5568bc994f9fcebcc1679cc2b76971b69e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:ed:a2:18:18:45:ac:1a:e5:bd:9d:19:9c:
90:3f:9f:fc:bd:12:ad:40:45:24:c8:b3:2e:1b:78:
3f:34:31:47:89:aa:1c:87:a7:f6:57:5a:45:f5:5c:
92:2f:19:ad:39:1e:41:97:36:9d:93:2e:78:e5:9d:
93:05:e6:81:13:a1:2e:c4:e7:72:81:50:eb:f2:d1:
f6:62:a8:c5:4b:41:a7:cd:45:3a:23:c5:95:90:5c:
68:d0:a0:a6:94:2b:0e:d9:d3:af:0e:3b:0d:e6:76:
f5:37:91:10:31:f4:17:46:1e:dc:e5:0c:f9:72:86:
3d:c4:c5:49:7f:2d:1d:4a:3c:c6:31:91:59:d3:f9:
68:ff:9a:46:ee:b6:15:a6:fd:af:e1:1f:16:a8:8c:
fe:18:3f:ac:6a:18:05:63:75:1c:af:0a:e0:8d:30:
93:0f:75:d1:5a:d1:5f:85:e4:32:4b:cc:9b:a5:4b:
91:bf:f8:52:89:7f:7e:7b:c0:b8:0d:02:e8:4a:7d:
4c:5c:dc:ab:15:e6:71:70:d8:43:9e:0c:6b:7e:d7:
b6:e5:3c:08:f0:0c:c7:37:f5:74:e5:03:6a:50:8f:
6d:78:98:69:d8:05:03:50:07:09:43:cd:54:95:6e:
20:68:6e:95:84:ff:6c:c3:96:2e:ae:97:15:da:c2:
2a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:DD:55:68:BC:99:4F:9F:CE:BC:C1:67:9C:C2:B7:69:71:B6:9E:25
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6d1VaLyZT5_OvMFnnMK3aXG2niU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
38:95:44:75:a5:77:2c:37:6d:64:6f:09:c0:c0:d9:02:08:34:
8b:2f:33:e6:33:ab:ae:68:3e:56:c1:93:26:05:c0:9d:08:c3:
44:cb:83:2b:5e:e7:2f:a1:e0:84:37:4d:bd:f0:01:e4:00:ab:
10:e1:50:41:b7:41:02:7a:d5:94:8e:fd:c5:4f:41:36:89:f2:
df:53:3f:f5:7d:15:30:83:8d:6a:9b:bf:a9:62:b6:32:22:bb:
2c:0e:a6:08:47:3f:fb:5b:2b:a9:bc:d9:d8:6b:55:5b:06:04:
90:55:99:da:7b:cd:fb:e6:b4:b2:37:62:3f:b9:70:b4:fd:cb:
03:2d:94:8e:b1:ef:6c:d9:d7:9d:09:da:69:53:bb:29:6d:c8:
ed:dd:61:44:52:88:ae:a4:51:49:9f:36:bb:1e:36:24:c9:f9:
df:c9:e8:a2:cf:47:9b:88:01:72:dc:3e:16:dc:9b:f2:9a:f7:
5f:40:c5:0b:20:40:bc:a9:40:c8:07:8c:05:d0:01:0c:28:a6:
9f:4c:6c:c1:5b:35:c7:51:51:ee:dc:a7:e2:28:c2:73:12:4a:
1d:c5:b6:b8:40:66:45:14:c0:07:fb:a0:5c:8c:58:d6:73:cb:
76:a3:c0:1e:8d:4d:1f:c5:29:02:4f:a2:8a:cd:0d:62:58:dc:
8b:ae:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org