Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6kWxb3FtZj_rM6K3tU6fOVmfa2Y.roa
File: 6kWxb3FtZj_rM6K3tU6fOVmfa2Y.roa (raw, json)
Hash identifier: sxCcG9Bj141BFCwWQodqptzwqCOqaYvNyZ2EwDRLzYI=
Subject key identifier: EA:45:B1:6F:71:6D:66:3F:EB:33:A2:B7:B5:4E:9F:39:59:9F:6B:66
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A8924E1294DA946EC290B55C6F7383FDB
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6kWxb3FtZj_rM6K3tU6fOVmfa2Y.roa
Signing time: Tue 12 Sep 2023 11:26:50 +0000
ROA not before: Tue 12 Sep 2023 11:26:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:24:e1:29:4d:a9:46:ec:29:0b:55:c6:f7:38:3f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 12 11:26:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea45b16f716d663feb33a2b7b54e9f39599f6b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3b:2b:ab:5a:d1:8b:75:dc:3c:e4:eb:cb:bb:
23:6a:f1:6c:ee:46:1d:64:8d:e4:8d:5a:49:e8:5f:
47:c1:ea:08:88:e3:05:7d:d3:e1:18:38:53:4d:65:
25:8a:e5:d8:04:f3:54:09:1d:e8:1e:13:36:fa:b7:
76:2b:ae:d3:cc:96:a6:38:86:a8:b6:b0:80:6f:1b:
f1:f6:29:d3:bf:be:af:58:a9:e3:79:c5:e9:ed:7c:
f1:ef:18:43:c6:98:0a:2a:84:f6:5e:dd:34:8b:d7:
4b:15:3c:30:3e:74:17:57:90:a2:6a:ac:d3:88:eb:
08:91:9b:02:ea:e7:bb:25:ad:c3:0d:86:d9:5c:dc:
2c:3d:46:c2:68:66:5f:e6:53:7b:62:1c:d0:a3:26:
e1:36:11:e9:c4:7a:94:96:a7:44:a8:fc:a5:6d:fb:
d1:01:fc:21:30:35:71:4b:09:ec:6b:ea:97:c6:fd:
c9:e9:db:1d:d6:49:d9:63:d3:85:d7:79:d0:d7:a2:
9d:b9:6b:d6:8a:61:dc:d3:75:29:bd:f0:24:69:0c:
a5:8f:1b:46:26:26:51:4f:ba:b7:23:be:35:4c:41:
c3:2b:89:d3:48:f9:8a:1a:7e:6f:b7:3d:b2:b0:e3:
ac:d9:39:69:7f:22:4e:79:7c:56:74:9c:86:f7:a7:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:45:B1:6F:71:6D:66:3F:EB:33:A2:B7:B5:4E:9F:39:59:9F:6B:66
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6kWxb3FtZj_rM6K3tU6fOVmfa2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.117.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:90:f0:9d:47:b5:46:39:1b:bd:15:06:57:db:59:9d:07:cd:
72:13:9b:d2:1c:70:f5:b0:8f:db:91:db:14:21:26:96:e1:c5:
3d:b7:76:c9:3e:7a:92:b6:17:05:4d:df:25:a3:4b:ef:0f:6e:
d6:b6:78:6e:aa:6d:43:8f:f1:8d:ec:ee:4b:85:64:b2:16:e2:
95:0d:58:8e:f2:20:73:e9:8d:71:80:01:4c:ae:31:2f:dd:03:
4c:26:c6:62:63:c0:8a:54:b1:f0:7e:f4:1b:87:37:db:25:c3:
d0:0c:94:f8:28:54:44:81:43:97:12:51:de:c4:39:bc:3a:92:
15:ed:dc:89:f8:e7:f3:01:4f:9f:b0:48:d3:23:f0:cc:71:77:
ae:2b:d6:c8:c3:c7:5f:86:2e:51:d9:6d:2c:42:1b:1a:9a:81:
31:4b:ef:f9:4d:58:09:fb:81:b4:c3:3b:65:c7:27:26:57:03:
a0:14:0e:26:53:66:a7:aa:51:35:fe:02:5d:2f:0b:c8:52:68:
57:40:fc:8d:0a:bc:7d:c4:63:56:52:4c:30:ba:f1:34:f3:41:
fc:7d:e5:db:1e:a6:b3:e4:09:24:c6:f1:02:00:f7:d8:a2:22:
7f:4f:0b:d3:b0:a8:9a:c6:fc:3b:c0:8b:a9:bb:ba:49:fa:57:
9c:53:b8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 17 07:26:22 2023 by rpki-client on console-ams.rpki-client.org