Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FaY793jGLSF5PgAuZSLCIkWshjI.roa
File: FaY793jGLSF5PgAuZSLCIkWshjI.roa (raw, json)
Hash identifier: cIsFSisUSrs010L8pbkPbVc9jSvQmnoDEfFZJl+fD7k=
Subject key identifier: 15:A6:3B:F7:78:C6:2D:21:79:3E:00:2E:65:22:C2:22:45:AC:86:32
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018B4D66ABEDB73DC23611C24E70A1341B50
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FaY793jGLSF5PgAuZSLCIkWshjI.roa
Signing time: Fri 20 Oct 2023 14:04:16 +0000
ROA not before: Fri 20 Oct 2023 14:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 46.37.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:66:ab:ed:b7:3d:c2:36:11:c2:4e:70:a1:34:1b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 20 14:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15a63bf778c62d21793e002e6522c22245ac8632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:36:36:96:39:d9:8c:bc:b7:31:69:33:cc:40:
4f:19:aa:b8:b6:97:02:7b:68:a5:a2:5b:b9:b6:a3:
a2:6e:bd:7e:ca:4a:9e:44:18:2c:ef:17:63:df:7a:
83:7b:e4:13:67:09:0d:bd:18:a4:5f:55:cb:db:d6:
50:eb:07:29:4f:54:39:23:7b:f3:65:bf:36:c4:95:
6d:3d:c6:b0:13:69:6d:61:78:11:7b:d6:0f:42:d1:
c7:dc:f5:98:d1:bb:8a:6a:7c:30:22:6a:24:ad:7a:
75:32:de:3c:63:70:a7:de:6e:2b:2f:2b:93:79:77:
a0:2c:ad:74:f8:5f:f4:b2:b5:d7:66:e1:4c:ee:d5:
b0:11:da:02:d9:43:15:71:59:a1:b0:4e:78:c1:d2:
8b:2d:7d:65:de:9e:cf:73:f6:a0:e5:d2:7f:04:34:
7e:68:23:81:24:29:90:15:bc:f6:4c:ac:b1:a5:01:
08:3a:8b:76:e4:99:70:d9:52:25:40:69:82:d7:06:
5c:e0:ae:2f:9c:ce:1c:8a:b9:7b:29:90:f4:13:64:
da:53:e3:dc:62:6d:85:b3:db:3f:0d:e2:a6:aa:a9:
7f:4c:a0:be:00:28:19:e1:73:0c:4d:39:71:85:29:
81:13:f5:b7:f4:a6:b3:48:69:5a:5a:8d:4b:6e:94:
17:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A6:3B:F7:78:C6:2D:21:79:3E:00:2E:65:22:C2:22:45:AC:86:32
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/FaY793jGLSF5PgAuZSLCIkWshjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.111.0/24
Signature Algorithm: sha256WithRSAEncryption
22:d4:31:cb:c2:f0:cc:46:46:2b:7c:c7:0b:5a:b5:c9:21:2f:
ce:19:13:94:dd:fc:e0:81:57:11:1d:4d:81:0a:10:6d:68:8e:
57:08:90:c0:1f:99:3b:55:84:49:ce:60:f8:6d:74:c0:4b:eb:
45:bc:4e:e9:af:82:31:8a:c5:be:e3:9c:d0:8f:6d:1d:7b:81:
c0:1e:df:c7:51:cd:4b:40:47:62:4e:d2:75:ab:6c:14:3c:6a:
f6:16:ef:6c:af:08:bc:8a:97:db:a4:49:13:de:4d:4e:d4:18:
a1:c1:c2:10:91:3b:f2:8e:b6:32:20:ff:1a:90:78:c7:c2:56:
ac:35:df:fa:5c:ef:46:d6:ec:5f:ba:7c:2c:df:ec:78:92:02:
9a:30:1d:23:67:e1:3f:f2:3d:a7:f3:2d:be:9c:12:32:dd:71:
7a:2a:5f:9f:b3:6d:5e:80:52:08:19:11:0f:25:e9:5c:41:44:
f4:6b:af:17:f0:ad:7e:b0:63:b4:d7:a7:b2:fb:30:2b:48:66:
6e:ee:77:8e:45:da:b5:f8:aa:56:c1:c6:ba:1f:02:86:b9:a5:
20:51:b7:ab:76:da:0b:bd:cd:19:5e:23:6e:72:4c:ea:60:4d:
ff:28:19:b1:c9:50:fa:ab:0a:34:c7:46:2e:3f:3c:8f:42:bf:
21:d8:87:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org