Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BOxBrNBjDyLt71tWt_zblHSMkaU.roa
File: BOxBrNBjDyLt71tWt_zblHSMkaU.roa (raw, json)
Hash identifier: /uMEL7z8IrHU3FIbz9bsi6qKWyooQAmT+Vf7msGDlYU=
Subject key identifier: 04:EC:41:AC:D0:63:0F:22:ED:EF:5B:56:B7:FC:DB:94:74:8C:91:A5
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01899EACBDB36AA08ECBE069B5170518D55E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BOxBrNBjDyLt71tWt_zblHSMkaU.roa
Signing time: Fri 28 Jul 2023 22:44:28 +0000
ROA not before: Fri 28 Jul 2023 22:44:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
185.92.47.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9e:ac:bd:b3:6a:a0:8e:cb:e0:69:b5:17:05:18:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 28 22:44:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04ec41acd0630f22edef5b56b7fcdb94748c91a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:89:6f:f0:f6:02:e2:7b:32:61:a8:f8:6b:
cf:a6:46:1c:45:7c:41:55:a8:9d:58:11:f5:05:01:
09:ad:8e:9d:a8:2d:6c:bb:a2:78:b7:7c:01:bb:8d:
2e:65:5f:75:76:d8:48:b0:1d:28:ee:0a:fe:90:85:
d9:77:79:b9:e6:de:82:11:02:3a:6f:36:34:83:ed:
c1:5a:20:67:56:d9:2e:6c:cc:03:56:cc:1e:25:23:
94:55:77:6b:cd:cf:9e:d3:be:eb:05:51:92:6d:17:
9f:18:a5:bc:c6:30:19:22:6a:43:4c:ed:ee:19:df:
8c:84:67:23:6b:a0:1c:22:85:86:25:2d:04:02:66:
4f:b4:23:6a:79:75:75:7a:fa:af:91:24:a3:ff:16:
e7:62:17:05:68:93:a3:f6:27:78:2f:79:e6:3a:23:
c5:aa:ca:69:7f:f7:28:4c:d6:97:92:e5:89:96:20:
ee:dc:55:e6:24:d9:15:a5:22:0d:0b:48:c3:95:24:
65:27:70:9c:35:67:e3:a7:e8:9a:9b:8f:52:67:3f:
21:38:47:8a:21:27:d3:8c:8a:b5:47:a2:cc:20:f3:
85:25:b5:9e:a9:0e:3a:62:00:4e:2a:8d:4c:47:14:
c7:11:bf:d4:0f:e4:fa:bd:35:56:c6:76:12:18:d4:
9e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:41:AC:D0:63:0F:22:ED:EF:5B:56:B7:FC:DB:94:74:8C:91:A5
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/BOxBrNBjDyLt71tWt_zblHSMkaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
185.92.47.0/24
Signature Algorithm: sha256WithRSAEncryption
42:91:f2:8a:48:ef:cc:11:a1:f9:6a:ba:47:0c:bb:4c:0f:f3:
72:c0:8c:3e:53:bb:3b:1d:a4:1a:68:29:3e:af:67:74:8f:9f:
25:e8:6b:96:14:fb:b9:dc:af:a8:ac:c5:f1:de:30:a5:61:4b:
5c:4f:33:60:45:0e:c7:09:e2:85:9d:2b:6b:af:e5:41:24:57:
8d:5b:0d:33:41:8e:83:f8:cc:49:ed:77:01:ba:74:9b:84:9a:
01:89:7d:ed:01:e7:21:b2:b4:b0:77:6c:7f:aa:ec:f2:64:0b:
32:58:3f:9f:ff:fb:4c:f1:22:1a:1c:7b:85:8b:e3:7e:71:b4:
88:fe:cf:71:36:94:69:09:9f:07:55:1e:04:b9:91:d0:92:d5:
52:bb:eb:0f:4d:ad:cc:ca:fe:1d:16:5f:62:42:08:5c:b7:28:
f5:7a:e9:af:b2:d6:b2:98:bf:ec:3b:b1:fa:07:28:10:70:3d:
41:da:b4:bf:b5:8b:78:30:e2:d4:8e:88:8e:c6:be:13:6f:68:
8c:1d:9f:a1:45:f8:a2:45:d3:ff:99:5a:9e:21:f0:0c:49:88:
d7:ec:6d:91:d0:b7:06:58:00:c9:68:ba:7d:09:c9:28:be:30:
d9:16:6d:8f:87:ae:5a:12:97:47:75:3d:10:e4:21:26:27:92:
e7:01:ee:48
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYmerL2zaqCOy+BptRcFGNVeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwNzI4MjI0NDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGVjNDFhY2QwNjMwZjIyZWRlZjViNTZiN2ZjZGI5NDc0OGM5MWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbOJb/D2AuJ7MmGo+GvPpkYcRXxB
VaidWBH1BQEJrY6dqC1su6J4t3wBu40uZV91dthIsB0o7gr+kIXZd3m55t6CEQI6
bzY0g+3BWiBnVtkubMwDVsweJSOUVXdrzc+e077rBVGSbRefGKW8xjAZImpDTO3u
Gd+MhGcja6AcIoWGJS0EAmZPtCNqeXV1evqvkSSj/xbnYhcFaJOj9id4L3nmOiPF
qsppf/coTNaXkuWJliDu3FXmJNkVpSINC0jDlSRlJ3CcNWfjp+iam49SZz8hOEeK
ISfTjIq1R6LMIPOFJbWeqQ46YgBOKo1MRxTHEb/UD+T6vTVWxnYSGNSeHwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFATsQazQYw8i7e9bVrf825R0jJGlMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvQk94QnJOQmpEeUx0NzF0V3RfemJsSFNNa2FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiViMAwD
BAAuJXEDBAAuJXIDBAC5XC8wDQYJKoZIhvcNAQELBQADggEBAEKR8opI78wRoflq
ukcMu0wP83LAjD5TuzsdpBpoKT6vZ3SPnyXoa5YU+7ncr6isxfHeMKVhS1xPM2BF
DscJ4oWdK2uv5UEkV41bDTNBjoP4zEntdwG6dJuEmgGJfe0B5yGytLB3bH+q7PJk
CzJYP5//+0zxIhoce4WL435xtIj+z3E2lGkJnwdVHgS5kdCS1VK76w9NrczK/h0W
X2JCCFy3KPV66a+y1rKYv+w7sfoHKBBwPUHatL+1i3gw4tSOiI7GvhNvaIwdn6FF
+KJF0/+ZWp4h8AxJiNfsbZHQtwZYAMloun0JySi+MNkWbY+HrloSl0d1PRDkISYn
kucB7kg=
-----END CERTIFICATE-----
Generated at Sun Aug 6 15:11:59 2023 by rpki-client on console-fra.rpki-client.org