Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/G7FdjomQnrot19MS60VDRHMv0iU.roa
File: G7FdjomQnrot19MS60VDRHMv0iU.roa (raw, json)
Hash identifier: SJSrSVBc7CLm280XID7fFVMBuk2yMj0nWkj8j/NRayQ=
Subject key identifier: 1B:B1:5D:8E:89:90:9E:BA:2D:D7:D3:12:EB:45:43:44:73:2F:D2:25
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AE1E25C9E9CB6C41CC24624748296
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/G7FdjomQnrot19MS60VDRHMv0iU.roa
Signing time: Sun 01 Jan 2023 11:15:07 +0000
ROA not before: Sun 01 Jan 2023 11:15:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142111
IP address blocks: 46.37.112.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e1:e2:5c:9e:9c:b6:c4:1c:c2:46:24:74:82:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bb15d8e89909eba2dd7d312eb454344732fd225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:d0:cc:92:fe:66:c9:c2:57:90:f1:d5:13:
b4:47:32:5f:b2:38:96:36:33:71:31:14:4d:19:ee:
d8:3c:98:c6:a1:5a:c9:46:01:30:ab:3b:c1:51:2c:
10:62:f7:47:47:c1:2c:92:34:12:33:0f:69:f0:8d:
1d:e4:69:ad:99:db:4f:70:b9:e8:8f:dd:b4:51:fc:
da:5d:cd:14:b5:e3:44:bd:fc:49:5a:b5:16:71:ae:
a5:82:9d:e4:10:d0:4c:7b:ca:d5:3a:7d:83:4f:24:
86:91:8e:2e:6e:86:72:c1:21:4a:1f:e9:8a:58:dd:
01:ac:90:7b:6a:f4:4b:24:3b:96:5f:99:50:c5:49:
52:ca:ae:c1:22:b0:09:39:34:6d:32:86:71:6a:09:
69:c1:f4:de:88:c8:f1:8d:3a:e5:6a:85:ff:c1:f8:
e6:6b:85:89:6b:61:d9:7c:93:ae:15:69:ee:87:21:
0f:83:2f:d6:8b:85:f4:01:39:4f:d6:d7:b3:fd:2e:
0f:77:15:85:0f:99:98:bf:aa:e7:26:df:b5:2e:45:
a4:7c:61:69:b1:07:92:35:50:cb:1e:0e:ee:e6:2a:
9b:0f:55:f1:a7:71:9c:97:a7:11:b1:ae:69:f3:ac:
3e:6b:cf:0d:4b:a0:3b:2b:96:cb:de:fd:4e:4e:0e:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B1:5D:8E:89:90:9E:BA:2D:D7:D3:12:EB:45:43:44:73:2F:D2:25
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/G7FdjomQnrot19MS60VDRHMv0iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:5f:99:9e:72:6d:ab:b8:80:b3:cd:54:e8:45:1e:89:21:1f:
60:a9:e9:fe:90:aa:e5:5f:d4:46:56:4c:d2:a1:26:93:c2:18:
69:96:4e:6a:20:33:ad:5d:ad:07:f9:d7:f0:73:46:0b:a5:22:
92:b4:93:ae:ed:99:84:e4:04:e3:f5:7d:34:5a:43:d9:cc:3a:
d7:27:6a:1b:c0:ed:a0:ee:2d:69:da:0d:02:d6:66:dc:b5:fd:
2b:54:bc:78:0e:e0:0e:24:e0:58:ae:18:50:be:1f:87:85:88:
ea:5c:e1:ae:8f:d7:69:81:7e:84:df:32:06:03:06:d9:a1:8a:
80:dc:1c:0f:8e:a6:94:bb:2d:13:7c:7b:a0:2a:99:83:a1:06:
53:21:9e:1a:8a:18:83:ce:2b:e6:a6:ae:1c:15:31:d2:b6:a8:
4b:11:48:ea:b1:a8:21:c7:69:33:ca:30:4e:78:3e:18:0e:25:
80:27:58:03:a2:90:c0:bb:d5:2b:53:2a:70:e5:15:65:ba:d8:
d4:fc:79:47:fb:75:68:cd:5e:0f:45:41:30:25:fd:89:71:cf:
9d:49:97:8b:f0:a8:4d:cc:7f:78:02:c0:dd:40:e0:3e:68:ae:
d8:b4:53:fd:5c:0a:82:1a:26:ff:63:af:a5:f2:c1:f4:6b:c9:
01:c4:14:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org