Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AZX7CKOJfSlfS5xsrjjOnEocoSw.roa
File: AZX7CKOJfSlfS5xsrjjOnEocoSw.roa (raw, json)
Hash identifier: 3SbQQnG6ADJtDGvdwEKChYfvnGjqjIt86NEcABFEpWs=
Subject key identifier: 01:95:FB:08:A3:89:7D:29:5F:4B:9C:6C:AE:38:CE:9C:4A:1C:A1:2C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0190073BF562662ECAEA2E123210F00049EC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AZX7CKOJfSlfS5xsrjjOnEocoSw.roa
Signing time: Tue 11 Jun 2024 12:18:08 +0000
ROA not before: Tue 11 Jun 2024 12:18:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jul 2024 07:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:3b:f5:62:66:2e:ca:ea:2e:12:32:10:f0:00:49:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 11 12:18:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0195fb08a3897d295f4b9c6cae38ce9c4a1ca12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:93:a0:1f:60:cf:0f:64:da:c6:71:38:4a:0c:
a2:ef:04:57:cd:ed:2f:cb:81:4e:db:86:b1:06:19:
de:24:84:c0:83:a6:98:0d:61:ce:19:9f:af:12:15:
17:76:91:65:ee:f9:ea:28:47:4e:40:51:0d:79:20:
53:62:1e:e1:90:a9:3d:46:07:34:80:a6:b8:61:10:
62:8f:d9:45:76:0a:3f:ca:ff:27:91:b6:22:40:7a:
53:15:71:ea:15:75:be:97:7b:eb:1a:ab:f6:99:8b:
05:dd:e0:5d:67:6b:6a:36:1e:59:69:19:df:3f:23:
30:b7:f9:da:98:cc:92:fd:a2:75:43:d7:6d:e3:e6:
f9:f2:fd:6d:43:ed:3f:d0:f3:a7:de:2c:ed:1b:17:
9b:a8:8a:35:fc:86:86:45:08:8f:03:c8:41:ea:11:
34:7b:87:ae:6c:58:6c:b7:94:d3:bc:f3:37:ac:65:
bd:cc:5d:3f:06:98:6d:ab:68:d4:b2:46:37:e5:d9:
f1:d2:a7:6e:dd:05:10:4c:22:fd:e7:2e:09:a8:2f:
f5:4a:73:bc:b1:ac:bb:f7:ee:41:2e:56:9d:5c:15:
d0:1b:9f:b4:54:f1:d9:0d:36:f9:24:e1:32:60:86:
22:03:1b:62:2e:57:02:f2:f6:82:e1:9b:64:14:e8:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:FB:08:A3:89:7D:29:5F:4B:9C:6C:AE:38:CE:9C:4A:1C:A1:2C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AZX7CKOJfSlfS5xsrjjOnEocoSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
29:04:38:1c:b5:0a:8d:d4:9b:c0:52:81:15:5c:4e:e7:ad:3a:
26:76:a9:66:51:a3:a0:0f:86:3c:c1:46:80:e4:d8:51:1c:c0:
15:2e:54:dc:1a:40:63:5c:70:6a:44:65:2c:d0:88:c6:c0:25:
cc:e1:e0:b1:a0:81:ef:c9:21:91:e1:8d:61:45:da:10:c3:15:
a8:4c:0a:18:72:d4:33:e5:e8:be:58:52:8c:d8:8f:c2:df:2b:
9d:97:6f:fb:fb:49:6d:c1:36:6f:52:6f:21:91:6f:41:41:8b:
69:e7:2e:8e:51:4f:33:49:3d:97:1a:0c:c6:46:ca:b9:27:68:
73:b9:57:2f:cc:eb:36:a6:05:e9:4c:cb:b1:8a:1b:cc:40:33:
e4:76:92:0e:90:b5:ff:38:e5:58:b3:c0:5d:80:91:a1:f0:82:
7d:71:3c:ba:3c:e1:49:c6:59:0a:eb:43:bf:7c:ec:a4:39:6d:
52:20:11:f1:c4:86:44:a8:ff:cb:d6:d2:11:4c:e3:73:c8:10:
a8:df:ff:d5:d6:44:e4:b3:15:c4:a6:65:c8:ca:64:0f:cb:99:
2b:f2:cd:2f:51:94:ae:ce:d0:73:8c:5b:de:01:45:89:37:9b:
1b:7d:80:e2:cc:bf:6f:42:de:e8:3c:e1:8a:b4:c6:d2:e0:68:
32:f3:1d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 08:53:56 2024 by rpki-client on console-ams.rpki-client.org