Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6w4jvt6QacrU6-S7C3iIFJ_RWpI.roa
File: 6w4jvt6QacrU6-S7C3iIFJ_RWpI.roa (raw, json)
Hash identifier: kxw4ETCmfIM7hy1xS7l6Ggokj+LeBQOCB7DfgDNeen4=
Subject key identifier: EB:0E:23:BE:DE:90:69:CA:D4:EB:E4:BB:0B:78:88:14:9F:D1:5A:92
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018DD12FD14D15A0F7269F95060BEAACFCBC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6w4jvt6QacrU6-S7C3iIFJ_RWpI.roa
Signing time: Thu 22 Feb 2024 14:19:48 +0000
ROA not before: Thu 22 Feb 2024 14:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.110.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 17:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:2f:d1:4d:15:a0:f7:26:9f:95:06:0b:ea:ac:fc:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 22 14:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb0e23bede9069cad4ebe4bb0b7888149fd15a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:62:7b:be:b2:02:8f:ba:28:0f:a9:d5:fb:2c:
be:f4:3e:8b:13:48:c1:9c:e2:b2:d5:c8:f6:47:35:
ca:fd:c4:a8:61:b9:52:26:f3:4c:67:11:f1:4c:91:
1c:49:84:c2:d7:71:87:92:55:f0:bb:c8:50:61:89:
f0:46:63:41:61:af:6f:83:fe:0d:b4:b3:35:f6:16:
27:a7:b8:10:35:9c:a5:45:c5:fe:80:03:96:3c:3a:
35:52:15:63:d1:fa:9e:12:5d:e7:02:33:21:f4:7a:
6a:de:9f:1f:3c:39:81:41:f8:2d:ed:2f:a8:13:ca:
11:c1:e2:cf:60:ed:b9:3d:7e:bd:70:d4:7a:e0:05:
ae:23:fb:4e:94:26:22:d1:db:33:67:af:8e:16:38:
d7:f5:76:b6:f5:b0:73:56:74:97:d3:23:51:8c:41:
33:5e:7b:56:48:16:20:74:6b:42:f0:04:32:90:7c:
8d:42:71:17:a3:e6:cb:ca:47:33:9a:86:43:04:d4:
2b:5e:e9:e3:7e:f4:aa:ae:eb:18:d6:c8:4e:c1:22:
e5:98:b1:ee:0c:73:f4:67:c1:d8:ef:77:d3:bf:1e:
bb:60:43:fa:03:95:29:62:07:e2:42:6e:52:c0:a6:
c1:a5:8f:2b:36:22:53:b3:ba:5a:13:bc:46:fa:0b:
27:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:23:BE:DE:90:69:CA:D4:EB:E4:BB:0B:78:88:14:9F:D1:5A:92
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/6w4jvt6QacrU6-S7C3iIFJ_RWpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.110.0/24
46.37.113.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:00:95:cc:62:a8:b6:08:cb:a9:85:3f:53:55:9a:7e:ea:bb:
a0:38:ab:7d:37:0e:fa:78:da:6f:e1:a6:53:d9:58:f0:8e:89:
12:04:2f:3b:67:2d:b9:29:6b:07:df:9b:47:92:9c:b8:52:07:
3e:07:b0:6e:9d:af:21:e4:e4:2d:9c:f7:19:dd:d4:56:ef:34:
f9:9f:a5:91:82:30:e8:22:56:2a:65:70:ee:c8:cb:4b:88:b6:
eb:27:08:e9:3a:b6:9d:89:4d:13:8e:63:31:45:d4:5b:20:ce:
06:75:53:15:2d:8e:1d:35:8c:79:91:bb:31:cc:16:ae:12:56:
fa:4a:e3:23:96:86:99:11:7e:71:d4:8e:6e:d6:76:01:21:d5:
5e:b5:b9:80:b5:60:c5:57:df:93:07:42:61:b6:cf:61:e7:84:
c9:dd:a2:42:65:46:6e:e1:13:62:08:bb:c8:01:08:72:f5:9a:
e4:0c:de:7b:63:97:4e:c6:b7:6d:d8:24:6f:37:1c:2f:d6:ee:
89:d1:92:1f:c3:01:27:44:b9:fa:d4:c5:66:66:e4:97:fc:9d:
98:be:2e:bb:a6:fd:7b:8b:64:f5:29:63:fa:90:cf:06:42:07:
96:bd:86:06:40:ad:79:75:1c:25:3c:7b:14:68:3d:d7:be:3a:
60:62:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 21:44:02 2024 by rpki-client on console-ams.rpki-client.org