Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AxldAr6fwR4OFxeqyh4csbJ_MiI.roa
File: AxldAr6fwR4OFxeqyh4csbJ_MiI.roa (raw, json)
Hash identifier: MscUpStZ4OzlgVYG83JDM3vuUvr+H/CS5a4r+Sf/Nok=
Subject key identifier: 03:19:5D:02:BE:9F:C1:1E:0E:17:17:AA:CA:1E:1C:B1:B2:7F:32:22
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AEAFA1C6ACDE873F923540A565090
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AxldAr6fwR4OFxeqyh4csbJ_MiI.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400039
IP address blocks: 46.37.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:ea:fa:1c:6a:cd:e8:73:f9:23:54:0a:56:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03195d02be9fc11e0e1717aaca1e1cb1b27f3222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:c5:ed:7e:80:2a:53:4c:8b:82:0e:d4:0c:
33:ed:9d:f6:f8:a3:96:28:e0:a8:54:71:66:94:4c:
6f:72:34:aa:92:01:30:2b:f2:28:50:c8:b8:78:bd:
f6:ca:dc:00:41:42:48:e3:37:f6:3f:a9:12:a3:53:
a9:9f:c2:5c:2a:ab:f6:12:b4:b1:c6:03:84:e5:f0:
01:d5:96:f3:78:ae:8f:9d:6b:44:af:a1:d1:cb:3d:
70:a0:97:b8:6a:af:bf:e1:84:5d:6a:fc:4b:8e:32:
5a:83:a3:8c:fc:e5:da:b1:e2:7a:9c:4e:f2:53:3c:
8f:68:f9:2e:40:ea:b3:a9:c7:50:9c:d1:38:14:32:
b7:f6:e3:dd:d6:ab:c2:b2:fa:85:91:8d:96:f9:bc:
60:8d:7e:39:8e:b3:06:b2:70:2a:56:5d:7a:52:38:
53:0b:fa:82:fe:7d:79:28:39:df:df:87:67:ee:20:
67:25:37:37:c3:7d:09:a1:cf:3c:b7:71:9a:a7:ae:
4e:0d:f6:b5:53:16:10:f6:51:bb:3a:ac:45:e7:e1:
5c:18:fd:19:83:bd:9e:46:f2:fd:97:75:c1:02:d1:
b1:05:e1:11:f6:cd:cd:a9:a3:dc:c9:7e:1b:1e:89:
73:14:12:ec:cd:d9:10:ff:31:05:3c:6d:81:92:b7:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:19:5D:02:BE:9F:C1:1E:0E:17:17:AA:CA:1E:1C:B1:B2:7F:32:22
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/AxldAr6fwR4OFxeqyh4csbJ_MiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.106.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9d:fc:a6:39:d6:e2:a5:52:bf:a1:cf:e4:7d:36:11:29:a7:
5c:cd:45:64:96:8d:61:33:0b:0e:ae:2b:bb:60:23:24:08:5e:
83:c0:99:1f:fd:45:87:e4:79:99:d1:90:c2:7b:1a:d8:77:09:
2e:35:8c:8d:5c:e8:11:2b:0c:93:d8:70:ba:5a:26:86:5a:8b:
b8:51:5b:bc:c3:e6:3f:32:d0:6d:57:ef:fc:3b:96:34:9b:54:
62:d5:ce:34:d1:bc:d9:02:a2:a4:a3:8d:24:ef:08:20:c1:be:
7d:dc:28:be:c5:14:43:79:98:73:c2:68:80:f1:b4:e9:20:2b:
36:87:f2:a9:07:93:41:61:ae:e8:84:94:66:82:ed:df:59:47:
df:5f:53:d9:c3:47:67:57:91:c3:2f:87:2b:fa:9b:96:04:9b:
20:6d:98:a5:75:fd:5f:aa:57:90:70:f6:bf:be:35:09:f8:8f:
0c:8e:c1:39:05:0c:61:40:c0:e4:82:7b:c2:ba:b5:61:96:b3:
8e:c0:67:21:7a:1a:7b:89:7e:59:52:50:79:10:d2:03:9f:9f:
de:b4:94:25:cf:17:46:17:ba:f8:f7:c1:7a:b1:00:d3:78:f3:
d0:bc:5c:33:69:fb:ed:dd:c8:a9:42:da:7a:27:d0:d2:7e:24:
45:5b:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:05 2024 by rpki-client on console-ams.rpki-client.org