Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8sYFf3FDMEQVd5WrTYCryEokqgw.roa
File: 8sYFf3FDMEQVd5WrTYCryEokqgw.roa (raw, json)
Hash identifier: YelFvK1M1ODOLVfyy3xQeuI8O2VZRD+mMstBNZW0/X8=
Subject key identifier: F2:C6:05:7F:71:43:30:44:15:77:95:AB:4D:80:AB:C8:4A:24:AA:0C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A0AB89A6F0ED520804B886995A8D7C96C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8sYFf3FDMEQVd5WrTYCryEokqgw.roa
Signing time: Fri 18 Aug 2023 22:16:24 +0000
ROA not before: Fri 18 Aug 2023 22:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147291
IP address blocks: 46.37.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:b8:9a:6f:0e:d5:20:80:4b:88:69:95:a8:d7:c9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 18 22:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c6057f71433044157795ab4d80abc84a24aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:54:30:86:0e:c2:f5:05:e0:45:d9:fd:0e:10:
20:a5:b3:99:2f:54:a0:35:55:bb:1b:1f:66:e4:a7:
d9:a5:c1:1d:5d:45:df:40:5d:6d:54:2c:90:d8:a5:
58:fc:12:9f:33:de:b2:20:21:c2:1d:d4:07:b4:de:
2b:ed:51:64:97:6c:8f:4c:61:7e:41:dd:95:23:1a:
84:bf:e0:13:50:0a:33:da:b1:50:9a:c9:25:2d:6a:
e7:4b:df:38:4a:08:e2:18:39:00:6b:4b:79:ef:82:
19:1a:21:16:be:5e:8f:7d:cd:b4:3b:7a:6d:37:17:
84:d0:7c:b0:01:51:0e:2a:d7:7d:f1:d0:b8:a2:1b:
06:7e:76:3f:9f:4f:68:e6:b4:2f:5f:81:c9:0a:7c:
10:ec:29:19:97:66:26:41:72:f0:37:7b:02:ef:70:
ab:22:5c:87:ae:cd:da:70:06:1f:ae:71:dd:9b:dc:
00:9e:48:ee:d2:d8:ba:a9:55:6e:f5:8a:56:1a:c8:
93:6d:62:0e:00:5e:f8:ad:58:75:26:d0:8f:85:e5:
58:13:9f:27:f7:1c:2b:9e:55:a1:f7:8b:7f:e0:89:
4d:a4:e1:2d:76:c2:76:0c:1a:9c:2d:9b:65:d9:f0:
76:74:f0:8d:d1:fc:9c:07:79:a8:21:9d:16:24:76:
b2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C6:05:7F:71:43:30:44:15:77:95:AB:4D:80:AB:C8:4A:24:AA:0C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/8sYFf3FDMEQVd5WrTYCryEokqgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.96.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9f:8d:91:59:1f:49:32:a6:19:91:05:f5:91:70:f0:3d:fd:
0b:7d:5c:62:38:c3:c9:02:78:0e:da:02:8b:7d:98:1d:64:f2:
98:1b:3b:3a:43:79:e3:d6:a7:67:2b:40:c1:4c:73:f8:a3:b0:
c2:e6:47:db:7d:a2:38:fb:b9:94:79:83:96:20:4b:1e:ee:d6:
67:29:e9:14:25:e1:b3:6f:71:4c:1a:2e:9a:a6:d3:1c:60:9f:
41:04:b5:20:be:b2:d0:42:68:82:77:8b:b6:19:7f:f7:b4:3d:
3e:98:f3:41:4e:e7:c3:dc:a3:c3:b1:cd:33:af:f8:25:f2:ba:
33:60:6c:70:40:cf:54:3f:48:1a:43:fa:55:44:19:e2:fe:73:
cb:3b:1e:d9:cb:5b:e5:a3:1d:4a:bf:9b:0a:b5:ad:a5:f4:d8:
8a:b9:0f:f9:9a:dc:58:92:1a:f6:06:67:27:51:46:73:74:1b:
dd:65:31:5c:91:e5:82:d8:62:a2:d3:26:f2:25:a0:77:35:c9:
2d:eb:0c:eb:9c:e9:69:09:d2:f0:a6:df:79:fc:dc:f8:9a:57:
68:08:29:72:4a:bc:bf:4a:4f:94:78:b9:df:a7:82:19:19:7f:
90:9b:18:5c:c8:df:88:82:74:5f:28:40:01:f7:ed:c8:01:e6:
f9:43:3e:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoKuJpvDtUggEuIaZWo18lsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwODE4MjIxNjI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmM2MDU3ZjcxNDMzMDQ0MTU3Nzk1YWI0ZDgwYWJjODRhMjRhYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFQwhg7C9QXgRdn9DhAgpbOZL1Sg
NVW7Gx9m5KfZpcEdXUXfQF1tVCyQ2KVY/BKfM96yICHCHdQHtN4r7VFkl2yPTGF+
Qd2VIxqEv+ATUAoz2rFQmsklLWrnS984SgjiGDkAa0t574IZGiEWvl6Pfc20O3pt
NxeE0HywAVEOKtd98dC4ohsGfnY/n09o5rQvX4HJCnwQ7CkZl2YmQXLwN3sC73Cr
IlyHrs3acAYfrnHdm9wAnkju0ti6qVVu9YpWGsiTbWIOAF74rVh1JtCPheVYE58n
9xwrnlWh94t/4IlNpOEtdsJ2DBqcLZtl2fB2dPCN0fycB3moIZ0WJHayNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLGBX9xQzBEFXeVq02Aq8hKJKoMMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvOHNZRmYzRkRNRVFWZDVXclRZQ3J5RW9rcWd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVgMA0G
CSqGSIb3DQEBCwUAA4IBAQAGn42RWR9JMqYZkQX1kXDwPf0LfVxiOMPJAngO2gKL
fZgdZPKYGzs6Q3nj1qdnK0DBTHP4o7DC5kfbfaI4+7mUeYOWIEse7tZnKekUJeGz
b3FMGi6aptMcYJ9BBLUgvrLQQmiCd4u2GX/3tD0+mPNBTufD3KPDsc0zr/gl8roz
YGxwQM9UP0gaQ/pVRBni/nPLOx7Zy1vlox1Kv5sKta2l9NiKuQ/5mtxYkhr2Bmcn
UUZzdBvdZTFckeWC2GKi0ybyJaB3Nckt6wzrnOlpCdLwpt95/Nz4mldoCClySry/
Sk+UeLnfp4IZGX+QmxhcyN+IgnRfKEAB9+3IAeb5Qz7A
-----END CERTIFICATE-----
Generated at Thu Sep 7 06:41:12 2023 by rpki-client on console-ams.rpki-client.org