Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DOmg56_zb1owcNySD-1_f8WSt2k.roa
File: DOmg56_zb1owcNySD-1_f8WSt2k.roa (raw, json)
Hash identifier: Rj83XWvKJEL9ujoX6NgUM+osIBnVs98J+G6cuz9dVDo=
Subject key identifier: 0C:E9:A0:E7:AF:F3:6F:5A:30:70:DC:92:0F:ED:7F:7F:C5:92:B7:69
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01868991E627FCA808B92AC1968BD7D9BE52
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DOmg56_zb1owcNySD-1_f8WSt2k.roa
Signing time: Sat 25 Feb 2023 17:14:45 +0000
ROA not before: Sat 25 Feb 2023 17:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 46.37.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:91:e6:27:fc:a8:08:b9:2a:c1:96:8b:d7:d9:be:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Feb 25 17:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ce9a0e7aff36f5a3070dc920fed7f7fc592b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:8b:c5:88:a3:cd:66:6f:3a:93:14:a8:b8:
99:c9:05:a8:2f:dd:73:61:c2:9f:f8:76:72:0e:9d:
52:4e:e8:a8:67:b2:2a:ef:44:77:85:7c:ef:dd:b9:
7f:9e:85:df:87:da:33:7f:f6:74:93:f2:1c:57:c7:
f9:45:eb:ca:97:1d:30:a0:fe:1c:62:1e:d5:74:f0:
2e:6e:79:78:8f:36:b0:42:4e:e9:f3:d0:a1:54:c3:
b7:0e:c2:7d:1c:26:34:47:e8:80:f7:1e:66:5d:21:
ef:c5:82:b5:db:2a:12:17:16:10:b6:f1:f5:db:be:
52:b4:39:4d:e5:12:92:de:ff:b1:6b:40:b0:68:f3:
e0:ca:18:3f:74:10:ed:42:7a:a1:63:a8:f8:03:2d:
b4:11:9e:83:8e:41:95:a0:00:c2:6a:f7:a6:af:a0:
6b:7d:8c:5a:2a:24:13:6a:25:9b:ae:00:09:c5:69:
8e:44:62:87:ee:09:6a:55:eb:93:d0:47:d2:bb:30:
9e:5e:28:23:55:28:36:cf:ba:a4:60:80:79:9e:07:
af:a2:f7:05:e7:19:1a:cf:15:69:c5:c1:70:5b:6c:
fb:4f:df:be:1f:69:be:70:c4:12:cb:1a:53:f7:c0:
75:44:b7:07:f3:8f:51:9b:28:69:eb:c5:56:48:23:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E9:A0:E7:AF:F3:6F:5A:30:70:DC:92:0F:ED:7F:7F:C5:92:B7:69
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DOmg56_zb1owcNySD-1_f8WSt2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:83:65:cb:af:a7:b3:0f:f1:0d:05:50:40:bd:e7:18:da:45:
61:4a:f0:89:76:05:fd:5a:9b:11:7e:6f:ba:7d:ed:1a:41:d5:
ab:f1:f9:02:f0:c7:88:8f:c7:e8:c6:51:3b:c8:72:65:9b:11:
2d:06:79:e1:5a:98:52:ab:de:c3:f9:3d:fe:73:e5:43:62:77:
43:42:4d:ec:62:78:e4:07:7c:d7:85:2c:93:c1:51:1d:05:dc:
c8:e1:04:91:07:55:58:87:74:c1:c5:52:10:92:54:df:57:d8:
ff:98:10:a1:93:d6:4c:fc:29:5e:db:60:87:23:aa:a1:22:16:
75:d3:4a:66:f0:90:dd:95:71:93:8f:9f:cc:d0:0f:e1:8c:77:
eb:ca:98:b3:36:f4:70:ef:4d:35:5b:ce:7b:f9:d1:c6:98:d3:
17:a0:0b:5c:80:82:99:b3:29:12:bc:e0:0e:a0:ac:d6:1b:98:
20:ce:c7:89:af:09:b0:ab:ae:07:bf:29:1e:07:cc:05:c6:a2:
6b:60:72:90:8e:34:86:45:3c:b9:76:21:9d:1d:c1:b4:98:e4:
c3:dd:8b:70:03:1a:b0:35:e1:21:f0:99:4c:53:6c:47:98:66:
b5:e7:32:21:4e:f6:d2:ab:a0:1e:4e:d7:28:b2:b3:44:df:71:
98:72:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org