Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DRJop_Ft-QeHTy-ADE9oBdMvfAQ.roa
File: DRJop_Ft-QeHTy-ADE9oBdMvfAQ.roa (raw, json)
Hash identifier: PeYvmYeybkLdo9IxpEgWaCICyr5AYCRlyY8wgXu/hOE=
Subject key identifier: 0D:12:68:A7:F1:6D:F9:07:87:4F:2F:80:0C:4F:68:05:D3:2F:7C:04
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AB42A79D889E27591562974146C07E179
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DRJop_Ft-QeHTy-ADE9oBdMvfAQ.roa
Signing time: Wed 20 Sep 2023 19:56:37 +0000
ROA not before: Wed 20 Sep 2023 19:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.117.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.120.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b4:2a:79:d8:89:e2:75:91:56:29:74:14:6c:07:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 20 19:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d1268a7f16df907874f2f800c4f6805d32f7c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2d:a3:15:99:2f:b5:16:54:2e:78:e5:14:87:
0d:aa:15:97:d9:de:91:8f:c1:6c:72:4c:c7:4a:32:
f7:b8:af:1c:10:af:a6:dd:d7:53:9e:55:ed:55:77:
a7:de:6f:6d:05:4c:38:68:45:63:42:93:73:f8:71:
b4:23:c6:6b:a9:f7:9d:5b:7a:51:3e:b9:c4:ed:3b:
3f:30:da:4a:64:f1:7b:cf:be:f9:67:9c:1f:39:b5:
46:d0:9f:8f:e8:e9:36:8a:6e:c1:3f:9e:6e:1d:e6:
0f:f4:95:d9:35:dc:14:03:bb:a1:5c:fe:42:8f:04:
16:0a:86:d9:de:ef:ea:19:6b:d0:12:c5:3f:eb:01:
6a:bb:5a:4f:60:92:4b:d7:2e:fd:c4:ae:c0:1a:06:
b2:13:ca:b4:f6:1d:74:d4:47:99:62:9b:e1:b9:26:
73:8e:4b:00:a3:25:7c:08:ea:95:d5:78:41:ca:61:
fa:b1:03:e4:c6:be:1e:bf:eb:5c:1b:a0:f7:bb:13:
41:9e:51:cf:05:23:a3:72:24:bf:44:1a:c7:9a:56:
fd:fb:d1:7a:cf:ec:e3:2d:19:2d:11:0d:db:5d:b0:
b4:d6:40:08:9f:7d:fa:54:b5:37:b9:83:e0:b0:df:
ac:64:df:f6:f3:08:72:18:e1:ff:b6:40:ad:f1:f7:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:68:A7:F1:6D:F9:07:87:4F:2F:80:0C:4F:68:05:D3:2F:7C:04
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DRJop_Ft-QeHTy-ADE9oBdMvfAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.117.0/24
46.37.120.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8c:76:e5:74:5b:5b:8b:48:5c:00:d7:68:62:d5:4f:40:bf:
06:fc:3c:09:bf:f6:d3:76:00:0c:c2:0f:e2:eb:24:22:45:a2:
0d:31:bd:a5:61:04:36:b7:01:94:1d:24:12:7c:40:26:e1:ec:
0b:95:8c:3c:ef:2e:b4:04:da:97:83:f6:fc:6d:91:6b:1e:5c:
61:2f:3e:3b:8a:59:2a:1d:e1:10:39:70:43:d8:c4:dd:19:24:
79:e4:c8:f5:4b:11:7d:84:55:8a:88:3e:e3:f2:bd:1f:9c:2c:
b1:c3:74:f4:57:d5:40:a2:7d:e2:b0:98:59:ae:8f:c5:11:f2:
7f:42:3d:63:19:eb:3a:8f:8d:b6:a0:5d:01:96:5f:33:5b:db:
8d:41:4a:17:ce:be:3b:36:15:9d:84:bc:90:67:16:34:f9:8a:
55:0d:3d:f0:4e:99:a6:2d:a5:c4:9b:d0:bb:cf:04:ef:43:e4:
50:0a:67:c8:ad:f4:d4:38:0b:62:5b:4a:a3:1f:9b:bd:a8:1e:
18:d7:82:f9:3b:3b:41:ba:21:9c:7b:1f:4d:59:cb:57:b2:e8:
04:66:aa:eb:bf:2d:9b:98:3f:f4:57:8a:91:42:76:07:99:04:
ad:3e:cd:35:7f:76:81:99:7c:ea:6d:92:2e:97:00:ff:35:b1:
b3:92:b6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:38:51 2023 by rpki-client on console-ams.rpki-client.org