Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AcVXx2HSOBqnCIUWdTRUMJsq6x4.roa
File: AcVXx2HSOBqnCIUWdTRUMJsq6x4.roa (raw, json)
Hash identifier: cLVJFRxEUgWen/7MWPHUwr+k54fgyPstrxjCciC4ss0=
Subject key identifier: 01:C5:57:C7:61:D2:38:1A:A7:08:85:16:75:34:54:30:9B:2A:EB:1E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0188DD14223EE49AB899F6759A845A1819DD
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AcVXx2HSOBqnCIUWdTRUMJsq6x4.roa
Signing time: Wed 21 Jun 2023 08:31:04 +0000
ROA not before: Wed 21 Jun 2023 08:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 46.37.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:14:22:3e:e4:9a:b8:99:f6:75:9a:84:5a:18:19:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 21 08:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01c557c761d2381aa7088516753454309b2aeb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:e7:c8:34:01:b9:fc:86:2d:17:b1:f3:5e:
32:c7:7a:80:0b:65:32:60:c0:ea:5d:64:60:eb:fb:
4f:61:ab:1d:f4:54:20:82:ca:2f:7a:67:5c:e7:ca:
3d:4b:f8:58:ee:a9:9a:6a:69:f8:00:fc:62:8a:cd:
73:0d:81:3e:0b:a7:64:6e:71:63:83:8e:e0:a6:04:
3f:03:8b:67:2f:dd:c5:de:79:39:88:50:11:e3:e6:
49:98:35:0e:e3:e8:2a:74:4c:7f:a3:ef:e9:db:1d:
14:97:1b:09:f3:99:12:5d:26:19:99:21:9b:bd:ba:
db:ec:89:9a:34:d8:c9:a5:ed:a2:4f:ba:bf:8a:53:
e4:49:44:87:01:21:e6:a4:0e:da:3b:55:40:9a:47:
1a:f4:9f:32:60:03:d4:c7:2e:d0:e8:38:3e:cc:e2:
13:28:7b:e8:88:d5:f4:94:25:55:33:99:f5:e3:a3:
1a:f0:4c:f9:03:fb:2a:44:93:f2:85:99:3f:b4:2e:
fa:39:f5:6f:5a:92:50:ef:e7:fa:d9:4a:bf:fd:c4:
70:9b:ba:70:17:f3:18:64:71:0a:40:40:f1:c5:a8:
35:ee:5d:59:b4:a9:12:41:f9:19:95:e1:a2:f4:37:
fc:7e:1d:eb:66:7a:47:f0:7f:1e:a7:e6:12:d2:fa:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:57:C7:61:D2:38:1A:A7:08:85:16:75:34:54:30:9B:2A:EB:1E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AcVXx2HSOBqnCIUWdTRUMJsq6x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.123.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:c8:98:11:ab:f9:b0:79:ac:08:d3:55:bb:c1:4f:02:42:ff:
d0:18:20:b5:8c:4f:7d:b6:42:dd:7c:01:ad:c3:59:2f:b3:e5:
8c:56:a2:03:66:f9:8d:95:82:68:86:23:a5:42:6d:7b:24:ae:
d3:5c:93:da:e5:14:07:0d:11:41:2d:ce:48:99:9f:fe:98:25:
59:b6:76:79:5d:fb:13:3f:92:70:33:ae:c7:72:6d:b4:c5:38:
fa:84:cd:91:63:be:93:d8:2a:83:40:62:72:56:bc:d0:7b:00:
93:db:06:bb:65:3e:00:84:a1:b5:6a:de:b4:2f:04:44:d8:75:
e1:fd:24:f1:7f:2c:32:7a:4f:07:4e:39:98:65:e1:35:a1:48:
93:5e:a1:db:b4:78:89:f1:8c:3b:ab:8d:69:f0:98:70:9c:12:
a2:2c:02:85:fd:a7:ce:b6:fb:e8:4a:8b:6c:5f:cd:24:e9:b4:
a0:14:e5:82:e5:9f:ed:7d:4e:1d:a0:5d:a6:79:ae:0e:f8:dd:
8e:8c:02:0b:83:b1:aa:5a:82:ed:9e:6d:02:e4:c6:8c:1a:3e:
99:3c:36:bf:ea:7b:72:eb:9a:99:02:38:43:1c:b4:66:de:44:
47:b5:d0:7e:68:8f:a1:4b:dd:66:c3:31:62:92:5b:f1:27:02:
41:83:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org