Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HB6uyC_H8Nghwqm0m-_sP1cDjDw.roa
File: HB6uyC_H8Nghwqm0m-_sP1cDjDw.roa (raw, json)
Hash identifier: oHq6N++I/gzj/4GUSIeCrEQQ2cCUwCrRQLew350vWpk=
Subject key identifier: 1C:1E:AE:C8:2F:C7:F0:D8:21:C2:A9:B4:9B:EF:EC:3F:57:03:8C:3C
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018AB42B65653A7AF6E9D6AE24824693EDD7
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HB6uyC_H8Nghwqm0m-_sP1cDjDw.roa
Signing time: Wed 20 Sep 2023 19:57:37 +0000
ROA not before: Wed 20 Sep 2023 19:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.100.0/24 maxlen: 24
46.37.105.0/24 maxlen: 24
46.37.102.0/24 maxlen: 24
46.37.101.0/24 maxlen: 24
46.37.109.0/24 maxlen: 24
185.92.44.0/24 maxlen: 24
46.37.106.0/24 maxlen: 24
46.37.118.0/24 maxlen: 24
185.92.46.0/24 maxlen: 24
46.37.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b4:2b:65:65:3a:7a:f6:e9:d6:ae:24:82:46:93:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Sep 20 19:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c1eaec82fc7f0d821c2a9b49befec3f57038c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:d8:1a:e1:bf:14:35:09:8c:a5:e1:56:ae:
a6:30:da:b4:47:4a:8c:7e:21:2e:93:cd:9e:24:60:
6a:9f:d4:2e:d0:df:f2:d8:16:3a:40:de:56:36:9e:
69:ac:ae:19:a9:b5:46:4f:1b:db:58:77:d8:f8:32:
25:7e:0b:95:ee:c7:26:5b:e6:5f:b5:9c:ca:20:13:
40:62:01:65:16:b5:5d:81:e8:52:e5:08:7b:45:e1:
d8:82:6a:12:53:03:66:29:ab:ee:e2:58:95:27:d8:
26:f7:3a:8c:43:4a:cf:8b:44:87:8e:40:a3:0e:f3:
43:d8:ba:f4:b6:18:68:08:a9:ef:fd:e3:84:9e:6c:
ae:d0:86:75:c0:ac:1a:0c:92:10:64:87:20:31:12:
6c:48:eb:e2:1c:81:81:19:c3:73:93:10:ab:d6:38:
30:90:4d:b6:5a:bc:c1:70:bb:5f:3e:2d:94:53:f9:
ce:13:f8:fb:62:61:d8:30:c5:d6:da:eb:4b:13:46:
cb:c4:4f:75:89:dd:8c:ce:e1:fa:38:5f:a5:ef:8d:
e8:b6:77:84:90:76:2c:30:6c:9f:87:3a:70:af:d5:
ce:60:4b:66:18:0b:24:6a:5f:d0:7d:27:b2:e8:49:
91:6c:b3:1a:69:46:46:b9:f6:e5:68:1d:9c:0a:ec:
1c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:AE:C8:2F:C7:F0:D8:21:C2:A9:B4:9B:EF:EC:3F:57:03:8C:3C
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/HB6uyC_H8Nghwqm0m-_sP1cDjDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.100.0-46.37.102.255
46.37.105.0-46.37.106.255
46.37.109.0/24
46.37.118.0/24
46.37.126.0/24
185.92.44.0/24
185.92.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:14:64:bc:61:6b:60:b6:ad:d5:63:f2:fd:bd:57:06:0d:06:
0e:73:91:d1:d0:39:69:fc:c0:80:f9:23:e1:3d:5c:2b:c8:45:
79:48:33:28:3b:98:8c:83:7a:c7:d7:5c:bd:a6:cd:c7:cc:9f:
6d:03:a2:2a:09:ca:aa:3c:23:a8:0f:ad:8f:6c:24:b9:64:79:
c5:c0:eb:7d:86:41:58:b1:c2:4e:17:79:81:2f:38:a6:33:f5:
fe:ae:33:2c:79:9a:47:03:37:a4:d2:2c:cf:8d:27:9c:a2:35:
03:7b:ff:58:ec:8b:00:63:65:47:ba:93:02:82:c4:ba:99:9f:
63:5d:1e:0e:b1:46:f1:f1:8d:41:86:bb:2f:29:6b:d7:5f:a3:
fe:9d:39:1a:76:67:0a:7d:ea:4b:ee:b8:59:4d:82:25:cd:16:
6a:e7:d1:ea:2e:70:ed:28:4e:9b:e4:33:cb:86:fa:1c:21:76:
0a:4e:a6:59:5d:9a:d3:09:07:65:11:84:3b:ea:06:71:86:f8:
3b:44:31:1b:88:1c:bf:87:68:10:98:e9:ee:5a:7c:de:02:36:
73:4d:f8:83:b5:94:77:ac:fd:ba:69:ea:57:45:18:3c:a2:e4:
d8:15:69:b5:b3:58:f0:4b:7b:70:c2:66:7e:0a:2a:c5:f9:47:
25:14:0b:9e
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAYq0K2VlOnr26dauJIJGk+3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh
ZTE5MjkwHhcNMjMwOTIwMTk1NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzFlYWVjODJmYzdmMGQ4MjFjMmE5YjQ5YmVmZWMzZjU3MDM4YzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqevYGuG/FDUJjKXhVq6mMNq0R0qM
fiEuk82eJGBqn9Qu0N/y2BY6QN5WNp5prK4ZqbVGTxvbWHfY+DIlfguV7scmW+Zf
tZzKIBNAYgFlFrVdgehS5Qh7ReHYgmoSUwNmKavu4liVJ9gm9zqMQ0rPi0SHjkCj
DvND2Lr0thhoCKnv/eOEnmyu0IZ1wKwaDJIQZIcgMRJsSOviHIGBGcNzkxCr1jgw
kE22WrzBcLtfPi2UU/nOE/j7YmHYMMXW2utLE0bLxE91id2MzuH6OF+l743otneE
kHYsMGyfhzpwr9XOYEtmGAskal/QfSey6EmRbLMaaUZGufblaB2cCuwcNQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFBwersgvx/DYIcKptJvv7D9XA4w8MB8GA1UdIwQY
MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt
MjMxNTQ5NDA5NzIwLzEvSEI2dXlDX0g4Tmdod3FtMG0tX3NQMWNEakR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw
LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQALiViMAwD
BAIuJWQDBAAuJWYwDAMEAC4laQMEAC4lagMEAC4lbQMEAC4ldgMEAC4lfgMEALlc
LAMEALlcLjANBgkqhkiG9w0BAQsFAAOCAQEAXBRkvGFrYLat1WPy/b1XBg0GDnOR
0dA5afzAgPkj4T1cK8hFeUgzKDuYjIN6x9dcvabNx8yfbQOiKgnKqjwjqA+tj2wk
uWR5xcDrfYZBWLHCThd5gS84pjP1/q4zLHmaRwM3pNIsz40nnKI1A3v/WOyLAGNl
R7qTAoLEupmfY10eDrFG8fGNQYa7Lylr11+j/p05GnZnCn3qS+64WU2CJc0WaufR
6i5w7ShOm+Qzy4b6HCF2Ck6mWV2a0wkHZRGEO+oGcYb4O0QxG4gcv4doEJjp7lp8
3gI2c034g7WUd6z9umnqV0UYPKLk2BVptbNY8Et7cMJmfgoqxflHJRQLng==
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:04 2024 by rpki-client on console-ams.rpki-client.org