Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa
File: FJ7invGzeD9Tz47JgzX6wE--DeQ.roa (raw, json)
Hash identifier: J8Zmpl9p6DnAYZGOo6j7ar9FkbYknQayjOmG1LUHsdo=
Subject key identifier: 14:9E:E2:9E:F1:B3:78:3F:53:CF:8E:C9:83:35:FA:C0:4F:BE:0D:E4
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01897238B7601C9FE721B66B9A2F63697910
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa
Signing time: Thu 20 Jul 2023 07:34:26 +0000
ROA not before: Thu 20 Jul 2023 07:34:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 46.37.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:38:b7:60:1c:9f:e7:21:b6:6b:9a:2f:63:69:79:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 20 07:34:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=149ee29ef1b3783f53cf8ec98335fac04fbe0de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d2:0e:e1:b1:6b:96:3b:13:78:6a:77:ee:52:
e0:7c:00:c7:51:cf:67:44:9e:7a:15:05:8a:64:cc:
60:91:14:0d:e3:0e:7d:08:d4:77:c1:a7:33:fd:42:
27:e9:94:65:30:b3:6d:c0:a5:71:30:91:c7:47:9a:
98:f7:0e:8e:f8:35:e9:3f:f3:06:1c:47:6b:72:05:
08:33:d6:b7:12:9d:60:4f:93:fb:31:de:c7:6f:0f:
09:ef:e3:02:7f:f3:4e:eb:69:ba:48:e6:f7:e0:4e:
17:3f:16:49:6d:63:ed:9f:b7:b8:2e:06:63:e6:93:
a3:55:9f:d8:cd:80:91:bd:1c:5d:b5:75:58:b8:c7:
dc:8b:a5:30:81:92:c9:e3:20:c5:8c:6b:ca:34:dc:
91:a9:d9:57:be:ea:37:b7:ba:47:05:7c:09:33:8d:
60:21:6b:eb:df:e2:7f:69:90:7a:4b:45:27:9e:ce:
d9:83:cc:97:19:a1:13:fa:a3:2e:9a:2b:f9:24:97:
c5:7b:97:6c:7f:6e:f4:32:b0:66:9b:9c:95:d6:af:
f6:26:6a:d7:28:18:9d:ac:77:ed:4b:be:e1:2a:66:
fb:b9:fd:35:a8:51:cf:d9:0e:37:94:20:7d:62:94:
13:7e:25:7a:2e:57:2c:56:ba:b5:f9:88:a3:cb:03:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9E:E2:9E:F1:B3:78:3F:53:CF:8E:C9:83:35:FA:C0:4F:BE:0D:E4
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FJ7invGzeD9Tz47JgzX6wE--DeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:e5:ef:66:8f:3c:71:f6:5b:29:ca:3e:dc:aa:8a:20:60:e7:
a4:ca:e4:ad:4a:fc:6b:5b:75:b7:fd:88:f4:8d:61:79:89:b7:
ca:62:35:d8:60:de:00:4e:3a:e2:54:3c:da:e9:c8:2a:a5:b1:
dd:64:00:3c:c5:e7:ca:0d:36:4e:e3:14:d9:71:a4:53:71:cc:
33:e3:87:0c:61:db:0b:67:c3:2b:e0:be:29:4b:8f:14:42:3a:
d2:a2:ed:da:24:30:b4:d7:03:b8:17:f2:72:3b:8b:e1:bf:fc:
19:0c:89:6b:c3:ff:77:71:e7:60:98:18:26:8e:84:c4:7a:42:
46:08:43:14:08:80:83:7b:75:f1:c7:57:0d:13:9e:5f:f3:38:
93:bf:1d:f2:28:9f:87:6e:18:cc:fa:af:81:96:38:f6:fa:9b:
0a:ff:5d:6b:fc:71:0d:0b:88:8d:c4:b2:d7:df:17:af:b1:14:
94:64:5b:64:59:0e:7c:07:f2:75:ea:26:2c:66:91:7f:e1:c9:
8c:d9:25:26:70:32:42:68:e2:e2:bb:ab:6c:e6:61:b8:b3:7f:
a0:19:f5:ce:fb:e1:4f:08:f2:ea:9f:8c:ad:5b:c9:c7:3b:e1:
49:78:d2:02:82:77:d1:dd:6f:34:f7:b1:25:32:77:19:b2:03:
59:75:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:54 2024 by rpki-client on console-fra.rpki-client.org