Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/76S6AyFZMbAa973HosqPhbooG3k.roa
File: 76S6AyFZMbAa973HosqPhbooG3k.roa (raw, json)
Hash identifier: 0qMfVbJVn9yUIhrYbDHA3sGlJ02zQBxQHPqDbiT+bOw=
Subject key identifier: EF:A4:BA:03:21:59:31:B0:1A:F7:BD:C7:A2:CA:8F:85:BA:28:1B:79
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019252276F0B9734C19BC9ACDB7FE9C0B0DF
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/76S6AyFZMbAa973HosqPhbooG3k.roa
Signing time: Thu 03 Oct 2024 11:32:48 +0000
ROA not before: Thu 03 Oct 2024 11:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 46.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 10 Nov 2024 23:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:27:6f:0b:97:34:c1:9b:c9:ac:db:7f:e9:c0:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 3 11:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efa4ba03215931b01af7bdc7a2ca8f85ba281b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:be:74:88:b2:bd:76:b0:7c:09:0b:45:c8:
b9:51:8f:4e:e2:98:26:6f:c4:4c:4b:1d:bc:87:b1:
54:08:c2:7a:cf:0c:bb:e9:56:1c:bb:3b:90:f5:86:
ca:8e:85:e4:08:97:c0:66:dc:37:fd:4f:0d:93:70:
6d:21:88:ba:ef:1f:5f:9a:81:af:d3:fe:08:ca:42:
5d:2e:86:0b:53:61:3e:8b:8a:b9:f4:1f:8d:80:d0:
c4:2f:93:22:22:07:03:fe:5d:12:be:74:58:90:8b:
27:b5:31:50:3e:13:9f:20:c3:7f:fe:22:e3:a3:7b:
16:00:fc:7d:f5:ab:55:d1:8b:d0:93:84:b6:99:2b:
2e:70:d9:a5:b6:80:f0:75:88:3c:2c:84:81:9e:89:
8b:ab:4f:ce:b0:25:e8:82:d2:69:a4:92:8c:5f:4f:
db:74:12:c3:06:8a:a9:16:02:25:18:16:bd:f7:75:
30:a3:1f:8b:34:35:fb:c7:e7:40:0e:31:c8:c2:d8:
58:44:5b:49:46:8f:29:3a:ad:d0:e1:0b:fd:dc:a4:
5b:ff:cc:d0:b7:28:87:03:f7:5b:ab:f0:01:aa:be:
e9:98:ba:5d:52:1b:26:2d:7d:5e:db:1d:84:1e:a9:
b5:0c:4f:b3:eb:d1:a0:a6:f3:f4:84:a1:d7:29:e2:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A4:BA:03:21:59:31:B0:1A:F7:BD:C7:A2:CA:8F:85:BA:28:1B:79
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/76S6AyFZMbAa973HosqPhbooG3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:31:b1:ee:6a:e4:88:bb:2f:8b:fc:d1:e2:b0:95:28:d0:38:
f6:c1:bc:95:f0:a7:f3:c6:28:57:16:26:48:19:89:c8:bb:46:
08:c6:46:b1:25:b3:2b:f9:14:78:7d:91:eb:2b:6c:77:59:9a:
fc:33:64:98:b5:90:12:a5:35:ad:9a:67:02:91:61:27:2b:74:
13:68:b5:f0:ee:58:3c:91:f3:ed:bb:82:33:2c:7c:fb:70:06:
6f:9b:9d:25:30:55:a6:a6:de:5e:17:d9:dd:03:fc:fe:0d:fb:
39:c0:cf:74:bc:13:7a:6e:1d:c1:e8:59:75:b0:0a:7f:39:26:
96:04:d5:92:a2:26:45:12:07:06:e4:ae:6e:68:81:45:6c:2d:
f1:85:c0:ea:fa:1d:85:30:ff:e9:52:c0:4f:10:db:9c:bb:17:
78:00:99:cb:ba:ae:e2:ea:2e:37:2f:b2:e1:db:8e:8b:d1:60:
e8:32:fb:0f:c7:a8:74:82:09:03:0f:d1:ed:40:d2:ae:6e:08:
e4:de:08:6d:87:de:6a:c8:ba:b7:88:e9:8c:4c:1b:b5:72:97:
13:d9:c4:1d:32:7f:ba:59:17:b6:f1:6a:ff:b8:0e:02:75:de:
1d:52:94:fe:e3:d3:5b:62:c6:95:77:3b:ee:25:bd:cb:a3:f6:
a0:75:dc:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJSJ28LlzTBm8ms23/pwLDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQxMDAzMTEzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmE0YmEwMzIxNTkzMWIwMWFmN2JkYzdhMmNhOGY4NWJhMjgxYjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq52+dIiyvXawfAkLRci5UY9O4pgm
b8RMSx28h7FUCMJ6zwy76VYcuzuQ9YbKjoXkCJfAZtw3/U8Nk3BtIYi67x9fmoGv
0/4IykJdLoYLU2E+i4q59B+NgNDEL5MiIgcD/l0SvnRYkIsntTFQPhOfIMN//iLj
o3sWAPx99atV0YvQk4S2mSsucNmltoDwdYg8LISBnomLq0/OsCXogtJppJKMX0/b
dBLDBoqpFgIlGBa993Uwox+LNDX7x+dADjHIwthYRFtJRo8pOq3Q4Qv93KRb/8zQ
tyiHA/dbq/ABqr7pmLpdUhsmLX1e2x2EHqm1DE+z69GgpvP0hKHXKeJnvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+kugMhWTGwGve9x6LKj4W6KBt5MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvNzZTNkF5RlpNYkFhOTczSG9zcVBoYm9vRzNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVjMA0G
CSqGSIb3DQEBCwUAA4IBAQBfMbHuauSIuy+L/NHisJUo0Dj2wbyV8KfzxihXFiZI
GYnIu0YIxkaxJbMr+RR4fZHrK2x3WZr8M2SYtZASpTWtmmcCkWEnK3QTaLXw7lg8
kfPtu4IzLHz7cAZvm50lMFWmpt5eF9ndA/z+Dfs5wM90vBN6bh3B6Fl1sAp/OSaW
BNWSoiZFEgcG5K5uaIFFbC3xhcDq+h2FMP/pUsBPENucuxd4AJnLuq7i6i43L7Lh
246L0WDoMvsPx6h0ggkDD9HtQNKubgjk3ghth95qyLq3iOmMTBu1cpcT2cQdMn+6
WRe28Wr/uA4Cdd4dUpT+49NbYsaVdzvuJb3Lo/agddzc
-----END CERTIFICATE-----
Generated at Mon Nov 11 01:07:39 2024 by rpki-client on console-fra.rpki-client.org