Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6oQaEpWSIVbn177xo1wNMgSeTCs.roa
File: 6oQaEpWSIVbn177xo1wNMgSeTCs.roa (raw, json)
Hash identifier: 1cCyrFacNrw7bkbXBPfy5g+J7zwwaJgImlKGUzQo6yY=
Subject key identifier: EA:84:1A:12:95:92:21:56:E7:D7:BE:F1:A3:5C:0D:32:04:9E:4C:2B
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01861C72C727A16CB417D760C41F7306B672
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6oQaEpWSIVbn177xo1wNMgSeTCs.roa
Signing time: Sat 04 Feb 2023 12:42:09 +0000
ROA not before: Sat 04 Feb 2023 12:42:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
46.37.120.0/23 maxlen: 23
46.37.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:1c:72:c7:27:a1:6c:b4:17:d7:60:c4:1f:73:06:b6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 4 12:42:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea841a1295922156e7d7bef1a35c0d32049e4c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:ab:07:e1:87:eb:89:96:42:a3:b6:9e:d0:
03:59:05:37:04:17:51:80:cb:bb:29:14:86:ba:66:
22:4f:e9:ea:36:b8:40:46:5e:74:a1:f1:ac:75:34:
7f:e3:e2:5e:74:d6:58:d6:b7:4a:56:b4:66:82:77:
b7:d9:e1:fe:0d:8e:fc:8b:28:b4:f7:c0:63:3c:f3:
c9:f6:4f:b9:f7:ff:0d:12:09:97:3a:06:9a:41:2d:
7d:8d:fd:1a:ba:60:e5:85:b8:74:15:2d:4b:85:dd:
ab:29:84:73:c7:fe:5b:f7:db:db:7d:1c:5a:fe:ff:
13:b2:96:03:e8:0a:38:4e:87:72:cc:9b:50:50:52:
71:02:2c:64:97:3b:77:e6:bf:6a:9c:c0:4f:a8:2e:
19:9a:a9:9c:7a:e3:69:5f:6a:20:72:a7:9c:bc:96:
a2:4f:bd:69:e9:73:68:69:2d:4f:9e:c4:93:a7:7a:
77:c0:44:9a:55:90:ee:b3:18:1c:e0:55:0a:0c:95:
12:2e:74:a9:ba:7f:19:8c:68:b2:98:5e:26:9c:eb:
c9:f3:d2:59:26:6f:9f:9b:77:53:8b:f7:c1:2b:be:
50:31:c4:1c:f2:89:1e:2e:b6:95:8e:4b:b3:f9:e9:
63:ad:ac:83:21:5c:99:97:b9:e7:11:89:3e:e5:b7:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:84:1A:12:95:92:21:56:E7:D7:BE:F1:A3:5C:0D:32:04:9E:4C:2B
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6oQaEpWSIVbn177xo1wNMgSeTCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0/24
46.37.118.0/24
46.37.120.0/23
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
35:dc:5b:64:12:63:8a:ca:cb:45:b5:ee:08:64:36:e9:48:25:
d1:5f:10:c3:ec:84:0f:4a:a4:36:2b:4a:9e:f6:12:d4:0b:9b:
d2:12:6c:92:d6:65:a2:20:c2:e6:4f:24:25:05:8d:a2:34:f6:
b6:de:e2:3d:df:20:d0:26:e8:27:86:b4:53:51:52:34:a0:de:
d3:a6:98:54:c1:be:22:df:c2:78:8b:b8:6b:fc:5b:30:37:9e:
1e:43:d6:25:47:0d:23:8a:e9:62:c3:b8:03:14:13:e1:c6:ed:
80:80:0e:ab:4e:a0:00:cd:d3:32:97:f4:91:95:2e:3c:65:8d:
d0:25:b9:d7:f4:42:30:65:45:57:fc:70:88:8a:c2:ef:5d:24:
04:2f:84:9e:fc:da:95:03:57:9e:68:39:b5:1f:c0:79:36:f2:
bb:6f:e5:be:76:7f:c6:74:7b:e9:fc:c8:bd:46:21:3e:3c:14:
9c:fe:79:5c:12:c6:17:b1:3b:01:9e:53:44:82:93:fd:53:c1:
85:3d:7f:28:18:70:f1:29:08:55:c0:56:ba:dd:05:13:47:8a:
cf:fb:a8:a5:80:e4:bb:ef:43:85:a6:b0:3d:af:4f:a3:24:c5:
63:1a:7d:41:77:44:83:e6:67:ce:96:cc:ce:d9:3c:a4:a3:7c:
77:38:0f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org