Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GPnRnCzfrj8agaUgKX-aRFCG0k0.roa
File: GPnRnCzfrj8agaUgKX-aRFCG0k0.roa (raw, json)
Hash identifier: rKN7gtltuOCkCfvUOWyFD3xlIh911WFo0Q3aoG4ci/4=
Subject key identifier: 18:F9:D1:9C:2C:DF:AE:3F:1A:81:A5:20:29:7F:9A:44:50:86:D2:4D
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 01856D0AEB88DB4908A570EDE88DABA00C9D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GPnRnCzfrj8agaUgKX-aRFCG0k0.roa
Signing time: Sun 01 Jan 2023 11:15:10 +0000
ROA not before: Sun 01 Jan 2023 11:15:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400040
IP address blocks: 46.37.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:eb:88:db:49:08:a5:70:ed:e8:8d:ab:a0:0c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jan 1 11:15:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18f9d19c2cdfae3f1a81a520297f9a445086d24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:02:60:86:4f:5b:34:6c:21:a1:03:b3:ab:0f:
13:f7:e8:8d:66:99:38:31:11:e4:b8:2d:fb:b9:af:
f5:fe:b8:c4:15:cb:fa:ec:44:c7:56:8d:0d:b8:8e:
40:0f:c5:2d:2e:b7:12:d3:80:1d:a9:a9:43:da:d1:
e4:e8:0a:fd:ab:54:57:64:d9:02:88:37:40:d8:d0:
be:5d:c7:eb:c9:98:1c:1a:4c:9d:b7:f1:11:89:1e:
9e:5a:4f:15:70:25:1f:6a:55:be:cc:7a:e2:35:7a:
6d:8b:ae:b0:49:dc:ad:f2:a7:94:bc:5e:81:82:04:
93:21:f4:a9:73:3d:8f:0b:9c:5c:0c:59:e5:a8:b8:
a4:6f:f8:e3:d3:24:f5:2a:22:2d:49:30:b3:65:f0:
41:f3:be:a7:46:eb:74:aa:79:88:eb:a3:83:8e:49:
02:63:cd:c2:7f:69:0e:e3:1d:f6:1c:94:43:42:ff:
39:b1:0a:5f:f4:31:6e:4e:70:64:83:1c:9b:7c:83:
68:ca:fb:47:da:74:e1:08:56:8d:19:5d:7c:cb:9d:
71:17:ef:3d:36:fc:e3:79:0d:64:57:48:06:b3:67:
f5:a2:b6:07:03:72:4e:2f:bd:25:3f:22:04:f3:1f:
01:1f:a7:74:68:d6:08:f5:51:a9:3c:c0:93:54:e9:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F9:D1:9C:2C:DF:AE:3F:1A:81:A5:20:29:7F:9A:44:50:86:D2:4D
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/GPnRnCzfrj8agaUgKX-aRFCG0k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.105.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2d:11:79:91:81:1d:9f:26:33:91:d1:52:a0:da:15:3e:74:
ab:b0:ac:87:fa:18:7d:04:4b:71:9b:e9:f5:ed:d1:72:3c:ea:
8c:37:df:71:09:78:69:56:35:81:91:8a:31:92:11:9f:5c:7b:
93:9d:93:26:79:f6:ed:9c:66:77:77:43:51:00:72:27:69:fe:
1c:2d:ff:8c:68:72:3d:f1:d8:68:a4:59:da:84:43:a2:ff:d2:
cb:82:fb:48:98:18:e8:89:f9:0c:8a:cb:c2:ac:4d:14:3e:0d:
87:4d:fa:5a:70:75:88:97:fc:9a:16:59:d0:f6:c0:98:f0:2a:
d3:55:22:e4:86:86:80:45:a1:22:5c:50:a7:1e:6f:57:6e:e2:
a6:a8:3e:ba:32:ce:87:65:e5:36:56:d5:bb:a2:81:f5:e3:e8:
6d:bf:5f:00:b3:0c:f2:02:96:d8:54:ba:b2:75:a5:17:02:d2:
82:a1:b5:1f:9e:2a:ad:81:df:96:92:e2:72:3c:fe:12:e2:78:
6b:cd:2f:c2:27:42:b1:06:4a:d3:cf:23:8e:ca:d8:ad:90:2c:
c2:d3:bd:28:97:cc:4a:eb:65:48:a5:03:62:a1:e5:6b:f1:6d:
88:ad:4e:8f:a1:44:db:65:c6:5c:9f:e3:47:42:34:a9:18:bb:
08:b4:de:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org