Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9JQRZMBszdtcXE7aBV1BJK-dZSI.roa
File: 9JQRZMBszdtcXE7aBV1BJK-dZSI.roa (raw, json)
Hash identifier: BIjL9cD6OWXUFIx4VssGw9DlEaP07/SIJq45goEN60s=
Subject key identifier: F4:94:11:64:C0:6C:CD:DB:5C:5C:4E:DA:05:5D:41:24:AF:9D:65:22
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B671A913598751F1229A878643F53405C
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9JQRZMBszdtcXE7aBV1BJK-dZSI.roa
Signing time: Wed 25 Oct 2023 13:51:16 +0000
ROA not before: Wed 25 Oct 2023 13:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:67:1a:91:35:98:75:1f:12:29:a8:78:64:3f:53:40:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 25 13:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4941164c06ccddb5c5c4eda055d4124af9d6522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:10:dc:4b:08:37:39:b0:b6:56:f0:f0:b9:68:
78:b4:af:8e:2a:cb:3d:b5:8b:67:01:39:d5:70:47:
d4:f3:79:d2:bd:4b:48:fc:56:c8:65:31:88:72:6c:
38:bd:18:bb:0d:b3:6b:a4:65:8c:b4:24:9a:a8:e7:
1c:50:3b:26:02:cf:25:b6:7e:0e:aa:7b:73:33:60:
fa:15:fc:92:75:f4:64:86:b1:fc:c3:87:bc:2c:03:
80:b0:74:17:9a:9d:d4:79:72:73:ff:ce:89:63:e8:
3b:9d:5c:e5:3b:5d:8b:6f:a1:e6:cf:f5:af:53:62:
42:e4:f2:3c:7f:10:8a:3c:d2:24:b2:cf:30:74:a0:
26:e2:e1:62:37:87:a7:1d:3b:64:f7:b3:fa:eb:e2:
31:38:a0:8c:64:98:c4:94:a1:fe:bb:d7:4e:c3:ea:
a7:1a:9a:a5:0f:94:a5:02:e6:eb:72:cf:5f:02:cf:
c8:2e:51:61:78:c9:6a:09:d0:3c:ab:f1:6e:4f:2f:
1e:b2:65:97:f7:3a:30:f9:d0:03:94:37:7d:8b:bd:
19:4d:ea:ee:4f:4c:44:99:35:1b:31:b2:d2:41:17:
ff:2f:f0:cb:78:72:77:ef:ec:c6:64:f2:27:53:a9:
c7:73:88:c7:74:4f:84:86:d5:9d:f8:b3:1b:fd:18:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:11:64:C0:6C:CD:DB:5C:5C:4E:DA:05:5D:41:24:AF:9D:65:22
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9JQRZMBszdtcXE7aBV1BJK-dZSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:13:e1:04:38:97:03:0c:c5:1e:bb:c0:72:33:b9:1b:74:2a:
ec:10:5b:7a:ab:89:8e:9d:d6:1b:7d:8a:b4:35:fc:9e:17:d4:
6f:c6:f2:d8:9c:ca:69:cd:51:c3:53:4f:f4:ad:99:f8:d5:09:
e2:d0:af:91:f6:e8:a3:6f:a0:de:36:d2:dc:a9:62:02:cd:5b:
9d:14:45:c0:e0:b5:8c:8a:68:65:bf:43:9a:04:c9:9c:3f:a5:
11:31:09:5d:d8:83:ba:73:64:bd:84:05:44:60:32:36:4d:d0:
eb:17:01:e1:f8:85:de:b1:0a:5d:5f:77:0d:ae:57:95:a5:a6:
ad:09:17:86:7e:23:6e:42:2b:ff:c9:44:e4:ec:a2:ec:f1:ef:
9c:e2:7c:d9:47:fa:6b:d5:b7:5e:f5:bf:16:f5:ea:bd:2c:e6:
2e:25:9f:36:0d:75:54:c2:4b:6c:af:65:4d:10:73:a5:3d:46:
42:3e:29:bf:cd:ce:f3:fc:55:94:54:14:19:2e:f7:86:e4:f6:
a0:ae:2f:d1:1b:20:45:2a:3d:3c:7e:d3:37:b5:f6:ff:01:66:
69:97:43:4e:47:c4:b2:81:5f:75:59:06:7c:78:76:4b:70:07:
42:29:9a:6c:81:48:57:a0:02:85:2d:95:45:9e:2d:94:bc:75:
74:9f:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org