Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EGjC80pT0XrY23xgGCoNN89Mr8Q.roa
File: EGjC80pT0XrY23xgGCoNN89Mr8Q.roa (raw, json)
Hash identifier: 6Gn2mkl+S4supsmFhEsHa8FUxHVXKRF96P/dAmtdm/k=
Subject key identifier: 10:68:C2:F3:4A:53:D1:7A:D8:DB:7C:60:18:2A:0D:37:CF:4C:AF:C4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01920B35331AF4FB96932D743D245FE17A61
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EGjC80pT0XrY23xgGCoNN89Mr8Q.roa
Signing time: Thu 19 Sep 2024 16:54:48 +0000
ROA not before: Thu 19 Sep 2024 16:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 18:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0b:35:33:1a:f4:fb:96:93:2d:74:3d:24:5f:e1:7a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 19 16:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1068c2f34a53d17ad8db7c60182a0d37cf4cafc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:c1:4e:c0:e1:39:a2:68:3c:a3:fa:85:cf:
9b:b3:41:bb:1f:d7:bd:ca:c7:9b:19:a0:2a:c6:b0:
cd:cb:a0:f9:3d:b0:fc:4b:44:c4:18:4f:d2:52:34:
91:54:f2:e4:63:1c:a6:f5:ec:cd:dc:7b:91:3c:f5:
bf:46:5a:ec:99:73:66:1d:19:ce:84:74:7a:3a:b7:
18:96:57:35:6c:9f:7f:6a:f8:31:e6:99:32:f9:3c:
ac:1b:db:1e:20:98:67:03:f8:45:ad:c9:58:2e:b2:
fd:71:11:e0:2c:97:bf:d5:d1:c5:7f:c7:c9:81:d8:
06:cd:98:c2:64:ad:82:ad:cb:0c:8c:37:91:8c:34:
d3:d6:aa:9e:ec:b9:66:30:a3:c6:a3:14:f8:c4:dd:
30:33:d0:86:2f:74:82:5a:a8:e0:61:0b:0a:b3:93:
6d:a9:7f:37:25:47:fa:27:9f:44:ef:11:af:d8:48:
ce:8c:51:cf:ff:a5:38:6b:9c:79:9e:ac:51:1a:94:
67:79:ba:d4:47:98:12:12:7a:2c:7d:87:fe:3d:e0:
16:dc:f9:c4:82:ac:7b:6d:5c:3c:04:0e:e9:8a:0f:
ae:f7:d4:78:f3:29:06:1b:de:a2:fa:f5:5c:ab:ed:
8d:4e:d5:7e:7d:92:51:48:50:8c:38:5a:46:9c:3e:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:68:C2:F3:4A:53:D1:7A:D8:DB:7C:60:18:2A:0D:37:CF:4C:AF:C4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/EGjC80pT0XrY23xgGCoNN89Mr8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a9:00:5a:54:bb:d6:d8:0a:fc:68:ca:75:ad:4f:54:43:36:
82:1b:38:f0:05:43:30:06:07:a7:d6:e7:96:ba:ac:ee:bb:46:
93:30:cd:53:44:9d:59:d6:72:a3:33:fb:ba:b6:6f:74:69:a5:
14:fd:c4:37:8f:22:3e:06:d4:b2:5a:6c:84:3f:36:4d:97:01:
bb:d6:b3:31:7a:e5:8f:09:46:92:d8:73:1d:04:87:ba:26:8e:
67:41:6d:4a:f1:c9:38:ac:fa:13:25:42:15:b7:21:cd:d2:bd:
cb:a2:cc:11:f5:f6:5d:52:53:cf:62:c4:b1:85:9a:0e:ba:be:
79:b9:e8:be:a1:34:cd:4a:a8:00:3c:0f:41:e4:70:af:4c:18:
0c:ae:8a:d3:66:8e:13:6e:ea:2b:db:68:6d:74:c4:ed:f1:9b:
4e:c6:0d:28:11:71:0d:c6:3d:03:1c:80:3e:e2:b5:fb:86:a1:
a6:9b:25:a7:d2:50:46:d9:70:12:4f:43:d1:22:6b:64:80:41:
35:03:38:a3:f3:98:9f:dc:57:84:2c:be:f1:d4:b0:67:1d:0e:
7f:4f:45:1e:98:bc:2c:69:9d:4e:50:2f:f9:ad:66:2b:c5:53:
5f:f1:b9:5e:12:df:de:8c:03:b3:ae:71:07:b1:e0:89:e7:63:
19:34:4e:94
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZILNTMa9PuWky10PSRf4XphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjQwOTE5MTY1NDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDY4YzJmMzRhNTNkMTdhZDhkYjdjNjAxODJhMGQzN2NmNGNhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMjBTsDhOaJoPKP6hc+bs0G7H9e9
ysebGaAqxrDNy6D5PbD8S0TEGE/SUjSRVPLkYxym9ezN3HuRPPW/RlrsmXNmHRnO
hHR6OrcYllc1bJ9/avgx5pky+TysG9seIJhnA/hFrclYLrL9cRHgLJe/1dHFf8fJ
gdgGzZjCZK2CrcsMjDeRjDTT1qqe7LlmMKPGoxT4xN0wM9CGL3SCWqjgYQsKs5Nt
qX83JUf6J59E7xGv2EjOjFHP/6U4a5x5nqxRGpRnebrUR5gSEnosfYf+PeAW3PnE
gqx7bVw8BA7pig+u99R48ykGG96i+vVcq+2NTtV+fZJRSFCMOFpGnD6KiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBBowvNKU9F62Nt8YBgqDTfPTK/EMB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvRUdqQzgwcFQwWHJZMjN4Z0dDb05OODlNcjhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiViAwQA
LiVxAwQALiV6MA0GCSqGSIb3DQEBCwUAA4IBAQBdqQBaVLvW2Ar8aMp1rU9UQzaC
GzjwBUMwBgen1ueWuqzuu0aTMM1TRJ1Z1nKjM/u6tm90aaUU/cQ3jyI+BtSyWmyE
PzZNlwG71rMxeuWPCUaS2HMdBIe6Jo5nQW1K8ck4rPoTJUIVtyHN0r3LoswR9fZd
UlPPYsSxhZoOur55uei+oTTNSqgAPA9B5HCvTBgMrorTZo4Tbuor22htdMTt8ZtO
xg0oEXENxj0DHIA+4rX7hqGmmyWn0lBG2XAST0PRImtkgEE1Azij85if3FeELL7x
1LBnHQ5/T0UemLwsaZ1OUC/5rWYrxVNf8bleEt/ejAOzrnEHseCJ52MZNE6U
-----END CERTIFICATE-----
Generated at Mon Sep 23 23:44:30 2024 by rpki-client on console-ams.rpki-client.org