Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CC_bYmKlRKMUWCDhf-uD_e1Ssv0.roa
File: CC_bYmKlRKMUWCDhf-uD_e1Ssv0.roa (raw, json)
Hash identifier: Y6mlXbhrSO0+5jPOzaBs2z09OiYL4ehyWCDQPZZS1ok=
Subject key identifier: 08:2F:DB:62:62:A5:44:A3:14:58:20:E1:7F:EB:83:FD:ED:52:B2:FD
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018829634F381D2DA2ACE1D8B9037E6FF2D7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CC_bYmKlRKMUWCDhf-uD_e1Ssv0.roa
Signing time: Wed 17 May 2023 11:05:54 +0000
ROA not before: Wed 17 May 2023 11:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:63:4f:38:1d:2d:a2:ac:e1:d8:b9:03:7e:6f:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: May 17 11:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=082fdb6262a544a3145820e17feb83fded52b2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:8b:64:42:ae:62:46:38:73:64:96:67:b1:
20:86:5d:1c:bb:f7:e2:a5:15:24:66:27:6c:c1:b5:
6f:44:f3:0e:86:54:13:e4:97:28:13:a3:ff:34:31:
cb:8c:9c:f4:b5:9b:42:4f:6a:e8:8f:42:7e:83:48:
7e:1f:56:93:6a:03:cf:1b:e9:a4:3e:9f:58:0a:b4:
5e:4d:ed:2c:42:68:db:9a:0e:f3:9c:b9:c9:69:e3:
45:84:82:07:99:6f:72:36:38:7f:d7:15:de:33:50:
4e:74:6a:61:f1:82:25:85:85:5f:eb:63:2c:36:c0:
13:7d:68:ff:80:8a:73:48:ba:86:30:44:48:c6:1b:
f7:88:7a:a0:ce:67:7d:f1:e9:d8:a8:6d:58:41:82:
d1:80:cd:a0:e2:85:ee:b6:25:3d:b3:00:b7:97:6e:
d4:e5:7f:bb:51:66:a0:5c:3e:fd:1e:20:e8:7e:a9:
f0:f2:53:e3:84:65:3e:01:ac:4f:a7:49:f8:5b:39:
42:33:ea:64:8a:de:a6:69:0d:c2:94:d1:74:10:b3:
97:4a:fe:0c:e8:86:0f:9f:59:06:d2:fc:e4:a1:aa:
1d:70:fb:fc:54:b6:af:46:c3:71:a6:38:01:7b:26:
f4:ce:51:85:b0:23:1e:ab:ee:c3:1a:82:7f:29:b5:
30:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:2F:DB:62:62:A5:44:A3:14:58:20:E1:7F:EB:83:FD:ED:52:B2:FD
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/CC_bYmKlRKMUWCDhf-uD_e1Ssv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.101.0/24
46.37.113.0-46.37.114.255
Signature Algorithm: sha256WithRSAEncryption
5c:82:e0:c7:50:ed:dc:28:f5:bd:6f:c9:ff:41:9d:4a:94:34:
6b:f3:1a:bd:8d:45:fd:72:c6:20:37:de:f9:27:72:3a:52:a0:
b9:9a:56:25:75:09:9a:8f:84:8c:8a:fb:61:b0:1f:c6:75:76:
cf:7a:b9:d5:ed:a3:f3:01:8e:85:10:68:14:65:37:ca:4e:a7:
db:a7:ec:67:fc:60:47:01:63:f5:21:3d:0d:57:68:e5:03:ec:
96:b8:41:51:6a:c5:a4:1f:50:d3:7a:f4:e5:98:e2:80:6c:15:
f4:eb:89:f3:8b:af:be:32:f8:5f:ce:fa:39:13:85:e2:36:4f:
0c:f3:19:20:0e:74:2b:dc:e5:2f:3e:d0:a9:1c:57:58:40:8c:
b7:31:a9:9a:7a:30:86:dd:6e:08:ea:ae:34:e0:86:f6:be:9f:
cb:bf:10:05:ba:42:86:c0:ff:a2:1b:9f:fd:80:71:5a:cc:b8:
bc:ee:c0:d6:20:4e:90:ad:ae:3d:97:3f:c9:ec:05:15:04:71:
5a:e9:b1:05:a0:89:1f:6c:62:93:f7:5c:5e:61:9b:35:85:26:
b6:60:d1:05:db:5e:ae:47:6d:a4:21:ae:2a:c3:1d:00:b5:88:
a4:04:6e:33:30:bd:b7:6c:34:70:c0:df:02:7e:1c:1e:98:0b:
63:1e:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org