Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ARTff-1IVAOFnXKJQSKrIHupFZA.roa
File: ARTff-1IVAOFnXKJQSKrIHupFZA.roa (raw, json)
Hash identifier: 0efrh31IX1ZHFmL3Us2yXRlTk2LHt1ezjX/JW3uA2P0=
Subject key identifier: 01:14:DF:7F:ED:48:54:03:85:9D:72:89:41:22:AB:20:7B:A9:15:90
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018D78F0AFA0DC676CD8C18D92D9D7F2ED45
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ARTff-1IVAOFnXKJQSKrIHupFZA.roa
Signing time: Mon 05 Feb 2024 11:04:15 +0000
ROA not before: Mon 05 Feb 2024 11:04:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 46.37.120.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 06:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:f0:af:a0:dc:67:6c:d8:c1:8d:92:d9:d7:f2:ed:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 5 11:04:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0114df7fed485403859d72894122ab207ba91590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:98:15:2a:ad:da:37:74:b5:89:5c:81:5a:90:
80:53:87:ba:a2:1b:1b:da:51:0d:07:36:c1:d2:11:
bd:27:90:84:d1:00:2b:36:e6:64:7b:df:f2:61:d3:
c6:c3:6b:43:37:46:7d:7c:6c:29:98:3b:e4:ee:6d:
ef:b0:13:9d:08:a9:f3:67:6c:ca:1e:49:6c:83:f2:
83:90:45:eb:37:2b:be:d6:6f:c2:7c:04:b5:37:0a:
03:64:3f:ba:bf:26:65:f6:5e:5b:dc:d0:bf:16:e4:
98:56:d2:12:5a:33:0e:ab:15:07:23:23:e9:e2:ed:
af:e8:fe:41:a3:37:c8:2a:d4:a3:f5:0d:1e:b2:fa:
e0:df:bf:fd:dd:7f:aa:40:42:84:93:72:28:d7:a2:
2d:e4:95:9d:aa:f4:2f:4a:b0:24:9a:c2:7d:3e:f5:
a1:83:f0:09:db:e2:86:81:d8:c3:b4:15:c4:de:08:
a0:05:07:ff:db:5b:46:88:69:b4:1d:ee:1a:14:11:
79:d9:30:1c:f1:1d:2b:ac:ee:9e:27:bf:83:36:dd:
82:69:c2:f9:38:86:2f:9e:fd:08:99:fe:3b:0e:1b:
e9:37:10:e1:49:74:b8:0a:0e:22:c1:bc:b0:aa:97:
84:b1:03:21:f4:52:99:41:27:e5:e8:9c:db:d5:1f:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:14:DF:7F:ED:48:54:03:85:9D:72:89:41:22:AB:20:7B:A9:15:90
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ARTff-1IVAOFnXKJQSKrIHupFZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.120.0/24
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
48:83:33:2f:22:a7:c3:9f:15:e8:f2:ae:9d:a6:43:d6:33:a9:
44:34:49:1b:fc:db:9b:76:61:ff:ad:3c:07:0c:38:e0:a4:71:
16:57:35:49:86:12:6c:32:c6:26:54:0a:15:54:cf:0a:b9:44:
54:6f:8f:59:21:a1:6a:85:0f:50:c5:a4:65:eb:7f:82:95:a5:
fd:da:4e:82:f5:8d:c9:b6:74:f8:aa:0f:80:89:f8:f5:6f:06:
55:78:72:31:df:27:df:56:d6:7c:4d:a4:dc:8f:ef:54:04:4b:
7d:a7:53:d5:7f:a0:15:31:24:53:47:f5:76:ac:a2:f0:93:bc:
44:9e:ed:38:74:ff:0e:93:9d:7e:32:e5:83:a5:ef:16:42:54:
2a:e4:c5:79:e8:38:8b:2c:25:83:0f:86:b1:fe:db:2f:c9:67:
cc:c0:9a:b9:46:c5:26:41:96:fc:51:a3:67:8c:ea:b3:0c:b2:
3a:24:07:eb:ed:87:f7:16:8c:f9:a0:d3:92:86:68:50:7b:fd:
c8:6d:9a:10:05:30:ae:d1:85:a0:c0:ff:9f:9c:e1:43:a5:14:
48:97:08:05:2c:0d:2f:a9:38:9d:1d:b8:b6:98:ea:6d:e2:4a:
ed:c8:00:a6:73:ff:8d:fc:f3:a2:b6:51:32:0f:c0:15:a6:36:
3b:1b:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 3 07:00:58 2024 by rpki-client on console-ams.rpki-client.org