Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7CBa6anFpTJQ4LnQEhywpwnQAEE.roa
File: 7CBa6anFpTJQ4LnQEhywpwnQAEE.roa (raw, json)
Hash identifier: jvxkyfO7A5KZeH5RLy5KpSIXvZmCbquFSUEKV4v7gyg=
Subject key identifier: EC:20:5A:E9:A9:C5:A5:32:50:E0:B9:D0:12:1C:B0:A7:09:D0:00:41
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AA1E53EC36A2A684144F65878F388147C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7CBa6anFpTJQ4LnQEhywpwnQAEE.roa
Signing time: Sun 17 Sep 2023 06:47:50 +0000
ROA not before: Sun 17 Sep 2023 06:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.96.0/24 maxlen: 24
46.37.98.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:e5:3e:c3:6a:2a:68:41:44:f6:58:78:f3:88:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 17 06:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec205ae9a9c5a53250e0b9d0121cb0a709d00041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:53:e3:19:98:80:12:e2:9d:e7:d6:ad:f7:34:
cd:69:dc:b3:dc:0d:54:81:a7:78:8a:26:51:58:44:
f3:ab:99:54:2d:05:14:73:d2:e2:f1:fc:a0:77:31:
cb:c0:41:60:2d:46:55:b8:67:32:eb:1e:33:57:3c:
53:06:76:8d:4a:27:1b:ea:1c:d1:e0:52:47:51:13:
cf:a1:9e:1b:78:0f:9d:12:51:ff:4e:a3:48:bb:86:
57:ff:48:29:88:2c:d7:91:4d:ab:5e:91:7f:fb:c5:
41:a2:ee:03:5f:48:35:0a:eb:5d:53:b5:8f:34:7b:
8f:03:f8:5f:f2:35:c3:38:de:a5:7d:8c:90:b1:e2:
41:37:05:4b:21:be:08:a2:75:4c:84:40:f8:4a:bf:
42:5b:c8:1f:b5:36:8a:10:42:fc:9c:bb:ed:11:06:
63:4e:74:27:3e:f6:cb:f0:53:c9:ea:37:c0:93:37:
5d:5b:94:bc:da:29:ea:d1:49:20:f4:b5:67:ea:48:
54:eb:87:e5:99:14:a3:77:66:6d:79:51:e7:90:52:
f3:a3:45:8b:13:5d:6f:39:91:3e:81:28:31:ad:0c:
45:c5:0c:db:ce:8f:a1:61:11:26:b1:ad:43:e1:30:
fa:ba:b6:3a:e3:bb:e5:46:14:7a:98:8c:82:b5:25:
5c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:5A:E9:A9:C5:A5:32:50:E0:B9:D0:12:1C:B0:A7:09:D0:00:41
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/7CBa6anFpTJQ4LnQEhywpwnQAEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.117.0-46.37.118.255
Signature Algorithm: sha256WithRSAEncryption
48:e6:bd:8d:68:8b:54:c6:60:fb:19:88:d5:6b:16:6b:ac:f8:
02:05:fa:78:8e:48:1e:53:a9:cf:4c:73:ec:62:66:c6:8d:94:
62:de:39:a5:10:cf:11:ca:fa:b8:7a:86:00:87:cc:85:ed:81:
aa:27:e7:a9:75:3f:bb:3f:c8:a3:d5:87:25:ab:96:f4:d9:a8:
54:67:01:c6:d7:38:51:b1:92:62:3f:3a:e1:88:90:50:ba:b5:
89:22:12:49:9a:8c:2a:a9:a4:b6:81:24:e8:7f:64:14:e7:33:
af:80:b0:73:5f:ae:89:1d:38:60:85:fb:52:72:96:ef:92:23:
16:8d:70:78:7b:86:c1:1a:d2:7d:2f:f2:da:65:d6:a7:9a:69:
b9:96:2a:7d:f7:f4:c3:d3:47:8d:a0:16:9b:06:31:58:c0:0a:
d6:71:a8:dd:13:b4:41:10:52:37:e5:e8:ae:8f:dc:c0:1b:a4:
f5:59:8b:f1:75:15:53:d3:fe:1d:96:f7:5f:dc:6d:2b:ad:2e:
32:f9:d1:95:f7:7b:78:62:4f:38:b2:31:73:0f:95:56:cc:24:
5e:d6:96:1a:39:3e:c8:a4:3d:5c:0b:a9:e0:54:2c:a3:61:3b:
42:9a:6e:cd:81:d6:f3:bd:43:f3:7e:12:54:4d:7f:8e:3f:55:
ee:c8:0b:38
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYqh5T7DaipoQUT2WHjziBR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwOTE3MDY0NzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzIwNWFlOWE5YzVhNTMyNTBlMGI5ZDAxMjFjYjBhNzA5ZDAwMDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklPjGZiAEuKd59at9zTNadyz3A1U
gad4iiZRWETzq5lULQUUc9Li8fygdzHLwEFgLUZVuGcy6x4zVzxTBnaNSicb6hzR
4FJHURPPoZ4beA+dElH/TqNIu4ZX/0gpiCzXkU2rXpF/+8VBou4DX0g1CutdU7WP
NHuPA/hf8jXDON6lfYyQseJBNwVLIb4IonVMhED4Sr9CW8gftTaKEEL8nLvtEQZj
TnQnPvbL8FPJ6jfAkzddW5S82inq0Ukg9LVn6khU64flmRSjd2ZteVHnkFLzo0WL
E11vOZE+gSgxrQxFxQzbzo+hYREmsa1D4TD6urY647vlRhR6mIyCtSVckQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFOwgWumpxaUyUOC50BIcsKcJ0ABBMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvN0NCYTZhbkZwVEpRNExuUUVoeXdwd25RQUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQALiVgAwQA
LiViMAwDBAAuJXEDBAAuJXIwDAMEAC4ldQMEAC4ldjANBgkqhkiG9w0BAQsFAAOC
AQEASOa9jWiLVMZg+xmI1WsWa6z4AgX6eI5IHlOpz0xz7GJmxo2UYt45pRDPEcr6
uHqGAIfMhe2BqifnqXU/uz/Io9WHJauW9NmoVGcBxtc4UbGSYj864YiQULq1iSIS
SZqMKqmktoEk6H9kFOczr4Cwc1+uiR04YIX7UnKW75IjFo1weHuGwRrSfS/y2mXW
p5ppuZYqfff0w9NHjaAWmwYxWMAK1nGo3RO0QRBSN+Xoro/cwBuk9VmL8XUVU9P+
HZb3X9xtK60uMvnRlfd7eGJPOLIxcw+VVswkXtaWGjk+yKQ9XAup4FQso2E7Qppu
zYHW871D834SVE1/jj9V7sgLOA==
Generated at Mon Sep 18 08:27:41 2023 by rpki-client on console-ams.rpki-client.org