Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9mjEXPncXqHahHr4kIbTjRW4_6c.roa
File: 9mjEXPncXqHahHr4kIbTjRW4_6c.roa (raw, json)
Hash identifier: XcF7Pm5qCbegEChMN+8ugz5PwqNsA5WSuScQ5/hJHtk=
Subject key identifier: F6:68:C4:5C:F9:DC:5E:A1:DA:84:7A:F8:90:86:D3:8D:15:B8:FF:A7
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018C6570E379EE891127090F90D1D223E6AE
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9mjEXPncXqHahHr4kIbTjRW4_6c.roa
Signing time: Wed 13 Dec 2023 23:09:06 +0000
ROA not before: Wed 13 Dec 2023 23:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397423
IP address blocks: 46.37.100.0/24 maxlen: 24
46.37.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:65:70:e3:79:ee:89:11:27:09:0f:90:d1:d2:23:e6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Dec 13 23:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f668c45cf9dc5ea1da847af89086d38d15b8ffa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:5a:88:57:f3:40:e3:7d:0e:1c:88:63:85:
49:5f:27:4a:03:cf:5a:21:7c:20:9d:3b:0f:1f:e6:
86:b6:d5:03:c7:ea:13:ae:02:d6:db:9a:6f:c4:f3:
ca:62:d0:2c:90:be:2e:00:ed:4d:9d:cb:b5:aa:dc:
53:44:64:34:ef:48:23:36:44:bb:36:c9:30:ca:ba:
3b:e5:f2:60:c6:d0:83:58:2a:52:cc:b3:ea:79:c1:
ce:8f:a3:e7:e5:b9:37:46:73:16:45:0a:1a:66:0e:
77:7c:3e:e6:a3:ba:05:43:cf:49:89:80:8d:5f:81:
47:e8:7c:3f:90:62:af:7f:15:ab:25:cd:90:8a:98:
08:51:69:0b:38:b0:d8:f2:ff:9f:af:15:17:10:95:
8a:ab:0b:5a:a5:62:ec:41:aa:a5:80:b5:71:13:62:
b2:30:df:41:80:25:8b:1e:48:87:43:1d:e7:50:f4:
85:c0:66:19:c4:62:db:25:69:aa:ba:90:1b:a8:d3:
c0:2b:90:90:ac:b7:24:21:13:17:5f:49:db:6c:a5:
ad:f9:d2:7b:ac:79:f0:e9:4a:73:e5:a3:af:a8:b6:
73:f4:a5:b4:09:a9:a5:71:61:51:6b:98:0f:41:d0:
ee:ba:01:be:32:ba:b4:0a:1a:96:66:68:01:56:61:
c8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:68:C4:5C:F9:DC:5E:A1:DA:84:7A:F8:90:86:D3:8D:15:B8:FF:A7
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9mjEXPncXqHahHr4kIbTjRW4_6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.100.0/24
46.37.119.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d9:a5:9f:a2:d1:19:d2:83:32:12:57:8c:f7:98:18:11:f8:
5a:48:1f:ee:eb:33:6d:07:3f:1d:23:26:33:d5:30:ca:a2:e1:
56:bf:02:c9:a9:33:44:f4:e9:21:67:6f:80:0a:65:4e:67:00:
81:54:3d:2a:5c:4b:e0:88:c6:7b:60:1a:0e:df:ab:8d:03:05:
6d:8d:0e:c6:dd:4e:0b:ab:20:59:8b:2b:1b:28:30:19:8f:83:
9b:b1:a5:13:b2:db:93:a7:a0:b5:17:a2:c7:f4:fc:19:83:ae:
58:75:83:89:b9:03:55:fd:87:ea:dd:e9:30:4b:24:85:34:29:
cf:8c:71:fb:6e:c2:6d:2c:de:66:bb:45:fd:32:c8:a1:e4:d2:
cf:77:f9:af:29:76:97:6d:85:68:8c:3e:71:39:58:21:22:67:
32:88:5c:0e:2f:be:b9:8b:22:db:74:fe:0a:1e:85:e7:ff:10:
94:cc:2b:96:ec:0d:2e:60:68:75:22:b7:9b:b9:90:8e:8c:2d:
a6:09:b5:e6:3e:c4:ce:e3:aa:9e:02:94:9d:79:03:ed:71:26:
69:1f:71:5f:f4:36:23:ee:60:01:ae:8d:2f:67:2c:c7:db:60:
13:48:ca:c6:b9:c7:2e:8f:d0:4d:80:1d:1e:57:b1:8d:95:2d:
bc:05:2d:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxlcON57okRJwkPkNHSI+auMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMxMjEzMjMwOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY4YzQ1Y2Y5ZGM1ZWExZGE4NDdhZjg5MDg2ZDM4ZDE1YjhmZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0xaiFfzQON9DhyIY4VJXydKA89a
IXwgnTsPH+aGttUDx+oTrgLW25pvxPPKYtAskL4uAO1Nncu1qtxTRGQ070gjNkS7
Nskwyro75fJgxtCDWCpSzLPqecHOj6Pn5bk3RnMWRQoaZg53fD7mo7oFQ89JiYCN
X4FH6Hw/kGKvfxWrJc2QipgIUWkLOLDY8v+frxUXEJWKqwtapWLsQaqlgLVxE2Ky
MN9BgCWLHkiHQx3nUPSFwGYZxGLbJWmqupAbqNPAK5CQrLckIRMXX0nbbKWt+dJ7
rHnw6Upz5aOvqLZz9KW0CamlcWFRa5gPQdDuugG+Mrq0ChqWZmgBVmHIYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPZoxFz53F6h2oR6+JCG040VuP+nMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvOW1qRVhQbmNYcUhhaEhyNGtJYlRqUlc0XzZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiVkAwQA
LiV3MA0GCSqGSIb3DQEBCwUAA4IBAQBn2aWfotEZ0oMyEleM95gYEfhaSB/u6zNt
Bz8dIyYz1TDKouFWvwLJqTNE9OkhZ2+ACmVOZwCBVD0qXEvgiMZ7YBoO36uNAwVt
jQ7G3U4LqyBZiysbKDAZj4ObsaUTstuTp6C1F6LH9PwZg65YdYOJuQNV/Yfq3ekw
SySFNCnPjHH7bsJtLN5mu0X9Msih5NLPd/mvKXaXbYVojD5xOVghImcyiFwOL765
iyLbdP4KHoXn/xCUzCuW7A0uYGh1IrebuZCOjC2mCbXmPsTO46qeApSdeQPtcSZp
H3Ff9DYj7mABro0vZyzH22ATSMrGuccuj9BNgB0eV7GNlS28BS19
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:05 2024 by rpki-client on console-ams.rpki-client.org