Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bs7ntijIGJ938BYVsLwHqwNfwCE.roa
File: Bs7ntijIGJ938BYVsLwHqwNfwCE.roa (raw, json)
Hash identifier: 7qtpc7kcJI2Oa8dxJTwfwW2nC5rMHvubzuTGVexCCD8=
Subject key identifier: 06:CE:E7:B6:28:C8:18:9F:77:F0:16:15:B0:BC:07:AB:03:5F:C0:21
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018929E5C35A5162E4B9B0E6D6C62C82178B
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bs7ntijIGJ938BYVsLwHqwNfwCE.roa
Signing time: Thu 06 Jul 2023 06:31:10 +0000
ROA not before: Thu 06 Jul 2023 06:31:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:29:e5:c3:5a:51:62:e4:b9:b0:e6:d6:c6:2c:82:17:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 6 06:31:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06cee7b628c8189f77f01615b0bc07ab035fc021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:08:26:1e:9d:3a:e2:4b:95:c8:d5:8d:7f:1f:
60:66:60:0b:ee:4c:a9:9b:fe:da:36:aa:9e:d7:d4:
0d:75:c6:5f:ee:c0:87:7d:80:1c:fc:06:9a:57:e5:
72:9a:97:8e:12:e2:5a:b2:ed:d7:0e:b7:3b:7b:b9:
ca:7e:d5:3c:03:e3:86:dd:8a:10:b7:f2:55:ce:55:
b1:53:4f:ef:c1:e0:f0:c8:03:ff:79:43:44:9a:0a:
36:7c:86:b2:5e:53:88:09:ff:79:59:f1:45:8e:70:
3c:bb:fe:e0:51:f9:59:0c:80:38:35:c4:29:33:5a:
9b:1e:f9:21:93:79:e0:13:93:a9:95:b5:c7:45:9f:
32:6d:52:e0:23:4a:33:1e:04:79:a4:31:9a:61:be:
88:87:20:fe:86:44:94:0b:e6:af:34:b4:11:5d:9e:
72:62:df:07:c6:f6:f4:e0:40:44:fd:6b:a2:80:dc:
7d:05:91:f4:77:3a:cf:b5:ff:b7:6f:c9:32:a7:d0:
d3:5b:de:6f:83:0b:ba:a8:1d:f2:a0:e6:03:1a:76:
b8:03:26:18:08:ce:58:72:43:e6:f9:9e:1d:e1:60:
ac:08:2c:a5:29:6a:37:40:da:30:91:27:03:0f:e9:
07:64:68:b7:8e:cf:fb:83:85:73:5e:2f:0f:69:31:
b2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:E7:B6:28:C8:18:9F:77:F0:16:15:B0:BC:07:AB:03:5F:C0:21
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Bs7ntijIGJ938BYVsLwHqwNfwCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.125.0/24
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b5:77:ba:ef:b6:0a:ac:ee:36:78:37:65:eb:5b:e8:bd:c5:
93:78:48:12:71:bb:14:5c:76:72:1a:eb:00:1f:13:a7:3e:4f:
bc:ca:c2:19:c7:92:c0:91:0c:16:1c:ed:d5:34:e2:3b:5b:0f:
e2:91:70:32:70:31:f7:0f:c9:da:83:0a:5a:9f:5c:20:f5:4d:
98:13:70:70:14:c2:82:93:e5:94:3d:e7:32:6f:26:af:4d:c4:
c6:76:b4:b4:5c:1e:0a:ac:52:3c:e7:b5:b6:be:98:9f:45:6d:
c8:3c:60:72:4d:33:96:20:be:39:ba:83:90:51:9f:ef:56:27:
8e:70:4c:05:4d:1c:d0:1a:ee:fd:75:78:a3:12:df:c7:e6:5e:
68:a2:d8:42:ad:65:99:ed:d2:82:2f:c8:a7:09:6e:a7:e3:48:
19:9a:fe:3d:ba:ce:2e:38:90:9d:03:37:fd:b4:dc:5d:61:a6:
f0:68:b3:0d:71:7d:ee:76:35:e5:1a:ce:44:7e:7d:fa:cd:ec:
bd:23:80:e7:34:3e:cf:fa:f8:29:58:50:f2:ce:9f:34:14:2b:
c7:d1:37:77:2a:23:5d:a6:a5:f4:b4:03:69:88:b9:2b:28:ec:
26:e8:79:66:b9:5c:04:45:ad:cd:55:65:62:8a:20:9c:e3:e2:
19:30:c3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org