Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DYsFEVLvxF7sL1PSbitxEn2VKn4.roa
File: DYsFEVLvxF7sL1PSbitxEn2VKn4.roa (raw, json)
Hash identifier: I58vgm8xd/VDIdo7PdIaxQObGbk1L4TdGwdf+08brJk=
Subject key identifier: 0D:8B:05:11:52:EF:C4:5E:EC:2F:53:D2:6E:2B:71:12:7D:95:2A:7E
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AFA8C5F9CA9BF19161F5E7489A587E497
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DYsFEVLvxF7sL1PSbitxEn2VKn4.roa
Signing time: Wed 04 Oct 2023 11:56:58 +0000
ROA not before: Wed 04 Oct 2023 11:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:8c:5f:9c:a9:bf:19:16:1f:5e:74:89:a5:87:e4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 4 11:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d8b051152efc45eec2f53d26e2b71127d952a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:99:1f:7c:7d:75:04:9e:fc:2a:98:87:92:97:
70:b3:9e:a1:0b:58:65:2d:6b:6b:6f:e2:21:6d:cf:
d3:7c:ee:52:b9:37:18:71:21:90:b6:fd:c6:33:14:
65:e4:c9:10:07:06:cf:4d:5d:f9:35:3a:e8:31:4f:
d9:fb:4e:61:4e:6e:3d:5a:18:e5:b9:03:e1:eb:a5:
ae:58:2b:20:74:9b:6f:d2:43:d6:32:05:06:36:0f:
5b:66:19:57:82:c1:29:ef:40:ae:44:d3:8e:a4:60:
37:81:60:7d:79:d9:bc:ad:15:1d:12:d5:e9:a0:23:
fd:06:a8:e3:f5:eb:97:b9:f4:b4:89:d9:f2:47:d2:
e7:0e:df:03:6d:ac:c4:a5:87:f8:ce:36:ec:e3:59:
51:54:aa:b8:ba:16:21:91:3b:1e:58:74:e7:af:c8:
37:9f:72:d2:2c:38:ba:ff:71:0e:20:ec:69:51:29:
35:98:1f:44:4c:79:8c:cc:65:e5:35:13:e3:4a:3b:
f4:0f:82:b7:04:f3:44:ef:63:af:c3:1b:cf:a7:e8:
31:1a:f8:60:da:5b:d8:8c:ca:9e:b6:a7:ab:9d:09:
b4:92:e5:66:f9:d2:12:32:85:a7:86:2f:4e:eb:d5:
6c:ec:b4:7d:e7:47:21:59:b2:fd:23:ff:79:cc:ce:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8B:05:11:52:EF:C4:5E:EC:2F:53:D2:6E:2B:71:12:7D:95:2A:7E
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/DYsFEVLvxF7sL1PSbitxEn2VKn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:fa:2a:22:58:74:a4:7c:53:6e:10:17:cf:b3:ef:80:09:9e:
29:cf:5b:3b:7e:32:1d:94:7d:d2:09:9d:31:01:1e:5d:18:9b:
f1:75:0e:ac:68:47:4b:d7:d8:d6:3b:ab:93:75:7e:5c:98:36:
23:38:51:a2:86:41:f5:49:e3:18:62:29:7a:3d:23:99:8e:25:
26:93:29:79:60:ff:a5:9c:3d:8e:b3:bd:a4:bf:21:7c:cf:e3:
a5:8e:52:6d:1e:e8:66:e7:4a:c0:60:e1:c6:f0:75:ce:ca:af:
18:71:45:02:7f:1c:e7:ed:38:19:a2:82:ee:d7:c0:fa:00:e3:
86:ab:b2:f0:5b:9b:34:31:d7:b1:2b:58:39:5f:5a:1b:e4:06:
36:ac:b4:90:c0:d2:86:56:d6:fb:32:9d:a6:d2:17:3a:45:d0:
bd:06:97:8a:79:d4:25:69:b7:f9:00:b9:ee:44:92:87:f5:08:
d3:e9:3e:d5:7f:f9:64:56:3f:22:bc:45:cf:51:1a:ee:d9:ba:
22:8e:e3:c6:c2:3a:5f:c2:a7:20:55:ce:68:9e:c5:39:39:d2:
b6:51:a2:c2:24:b1:b7:d6:e0:f5:bc:c9:bc:0d:4b:c6:16:74:
06:bb:ff:60:4b:9d:3d:18:80:00:00:6c:10:7c:d8:9c:eb:30:
60:16:18:24
-----BEGIN CERTIFICATE-----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 at Sun Oct 15 22:00:39 2023 by rpki-client on console-ams.rpki-client.org