Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DU-UHGVmUnipC3Fxn916xf9gg6g.roa
File: DU-UHGVmUnipC3Fxn916xf9gg6g.roa (raw, json)
Hash identifier: maqU/4dtmnRtcxxn8u5HHLHCMJH/DIoC+BOpmUqBEnM=
Subject key identifier: 0D:4F:94:1C:65:66:52:78:A9:0B:71:71:9F:DD:7A:C5:FF:60:83:A8
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01888BD1A3CF6A12AA002CBFE0D04FD97EE4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DU-UHGVmUnipC3Fxn916xf9gg6g.roa
Signing time: Mon 05 Jun 2023 13:49:11 +0000
ROA not before: Mon 05 Jun 2023 13:49:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:d1:a3:cf:6a:12:aa:00:2c:bf:e0:d0:4f:d9:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jun 5 13:49:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d4f941c65665278a90b71719fdd7ac5ff6083a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:fd:ba:99:9e:27:9b:c1:5b:40:70:47:1d:
7a:b6:8d:40:22:1e:d1:83:f0:9b:8e:10:13:ab:24:
6e:c7:0b:ae:9c:7b:e8:7e:46:01:cd:4e:57:2c:e4:
cc:1b:5b:88:07:fd:36:29:43:ec:09:95:08:2d:75:
58:ff:65:32:75:80:d6:d1:8d:19:7a:9b:e6:ce:91:
ec:e3:86:e9:db:7b:1d:2c:6e:ab:59:d1:f7:fa:ea:
e8:12:14:ef:53:90:13:d6:3e:9e:44:69:69:b5:49:
38:34:d3:75:8e:c0:36:3a:c2:c3:b8:1a:87:20:70:
4d:ca:07:28:1b:75:b6:5c:eb:9f:b0:61:86:c3:80:
94:55:1f:b0:83:fc:45:d2:11:64:56:8b:fc:8c:66:
da:31:72:34:73:c9:47:88:35:4f:b3:cc:70:9b:69:
aa:4b:c0:2f:d2:10:9f:e9:dd:15:17:72:c6:3b:fb:
08:7d:31:a9:cc:e5:cb:be:29:b6:31:0a:af:c8:08:
0d:83:f4:97:c3:15:93:e2:18:f2:50:b6:49:cf:40:
c6:c8:a3:2e:77:c9:bf:45:b3:ee:db:b6:15:bb:47:
b9:dc:89:6e:12:e8:f1:56:80:14:35:83:aa:28:c0:
73:5f:c4:74:dc:2a:39:c0:be:36:36:84:96:49:cc:
46:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4F:94:1C:65:66:52:78:A9:0B:71:71:9F:DD:7A:C5:FF:60:83:A8
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DU-UHGVmUnipC3Fxn916xf9gg6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:12:cf:99:c8:5b:02:a7:9e:f8:80:28:5d:cd:4e:67:99:73:
b8:c2:7e:1c:45:6b:1f:bd:67:ee:e1:62:eb:e3:e0:60:32:5f:
b7:da:b5:b3:3c:7b:78:05:b3:8e:65:ba:a8:1a:1e:9e:87:b6:
4d:a0:12:88:86:d9:d8:ed:e5:3a:5c:56:8f:85:a3:39:16:c9:
2b:8c:af:00:f2:eb:03:17:d4:5d:39:73:bf:28:ba:68:c0:8a:
3d:36:d1:36:20:df:0e:ee:5e:75:10:88:84:9d:77:c5:2c:f9:
8e:0c:1f:03:09:12:03:c8:b4:21:42:3f:e2:c6:ff:8a:88:82:
fc:78:8f:54:05:04:26:3e:23:0b:8c:91:c3:35:f8:ca:31:50:
64:bc:3b:aa:2a:a0:b9:f1:5d:26:66:f0:bd:39:18:cb:1d:91:
f8:e0:c3:91:a4:c9:90:9f:55:e0:8a:f9:8c:25:3b:1a:93:6e:
f2:2a:a4:1a:f8:26:bc:7c:f4:c3:13:36:b3:f2:4e:05:f2:b8:
96:0f:19:7a:70:ee:ec:0b:3e:7d:54:7d:33:47:b4:0f:3f:3b:
4b:45:06:7d:ac:00:28:87:99:e4:76:1d:49:12:ca:b0:4c:dc:
a5:ae:b9:38:2a:e5:cb:c5:18:0a:6b:dd:08:36:92:8f:e6:fd:
93:2e:1f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:34 2023 by rpki-client on console-ams.rpki-client.org