Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/H_Iv1nLydoKkO69DqUtZQfSHBlo.roa
File: H_Iv1nLydoKkO69DqUtZQfSHBlo.roa (raw, json)
Hash identifier: 0VuOB1DNlOG6yyjIcWlqwid0RD7Niz297bVSYKQIjL8=
Subject key identifier: 1F:F2:2F:D6:72:F2:76:82:A4:3B:AF:43:A9:4B:59:41:F4:87:06:5A
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 018A0AB98396071F7A82DC0D9DD3DA49D2CC
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/H_Iv1nLydoKkO69DqUtZQfSHBlo.roa
Signing time: Fri 18 Aug 2023 22:17:24 +0000
ROA not before: Fri 18 Aug 2023 22:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.114.0/24 maxlen: 24
46.37.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0a:b9:83:96:07:1f:7a:82:dc:0d:9d:d3:da:49:d2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Aug 18 22:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ff22fd672f27682a43baf43a94b5941f487065a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f2:f5:e7:fa:aa:da:99:98:d5:9f:de:0c:34:
8d:08:00:40:61:1d:a1:cb:f5:17:bf:6e:08:22:88:
1f:9f:9f:0b:c2:06:16:75:f4:af:8c:8b:c7:2d:52:
dc:eb:39:a3:3e:12:f3:ad:cd:e0:95:60:e1:99:a8:
dd:89:7c:57:8d:2f:77:ba:03:bc:4a:d9:38:64:be:
a5:f5:e8:cd:04:cb:43:6e:43:4d:1b:c9:c1:5a:e0:
65:09:f9:73:d6:39:6d:07:39:65:db:fb:ca:45:37:
ef:09:82:47:48:cd:5a:52:cd:53:8d:db:a6:79:03:
31:f8:03:e1:05:41:a8:84:a1:d5:e5:d9:ff:2d:5c:
c7:e0:e5:dc:cc:82:f0:bf:88:4e:c4:32:0b:75:bc:
1c:6b:8b:d8:83:4f:a5:fc:02:95:e3:ab:c0:6d:26:
ec:e5:0b:f7:92:22:76:d8:54:b8:52:5a:f3:ee:a8:
55:ac:65:79:ae:ca:98:32:d2:8b:57:a5:2f:7d:43:
49:03:c2:e7:c8:ee:3e:06:b2:32:7d:1b:67:da:b9:
a6:7c:1f:40:80:d5:d1:e2:d6:64:2f:8f:1b:d1:61:
ad:25:fc:36:8b:28:ce:87:22:de:fe:93:bb:99:dc:
5c:3e:01:3d:8c:97:11:f8:df:37:aa:a7:6d:05:f0:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F2:2F:D6:72:F2:76:82:A4:3B:AF:43:A9:4B:59:41:F4:87:06:5A
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/H_Iv1nLydoKkO69DqUtZQfSHBlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0-46.37.114.255
46.37.127.0/24
Signature Algorithm: sha256WithRSAEncryption
47:16:fa:95:96:39:f1:9e:a1:35:59:fd:9c:44:5b:74:e8:7d:
39:d2:a0:2b:e5:17:d8:bb:9e:a3:4c:59:60:8c:39:12:61:32:
be:06:c4:28:55:78:59:a0:22:a4:6e:01:55:29:df:c3:80:ce:
40:71:af:c9:42:10:aa:d2:34:f7:db:74:a8:eb:98:61:fb:c1:
15:87:56:47:d9:01:b1:fe:fa:96:3b:99:19:63:bb:f7:80:5b:
82:a1:e2:07:44:e3:bb:a3:d3:8e:51:c1:ac:e8:59:91:3e:3d:
44:f1:4c:0d:da:f9:1c:c9:8c:e4:9b:06:ea:ef:aa:30:29:ed:
30:bd:22:21:8f:09:6f:95:58:6f:51:12:cb:2b:df:73:fd:81:
c6:b0:9c:3e:72:a5:b1:9b:9b:8e:45:52:78:d4:ad:70:99:9a:
9e:4c:7c:8e:e1:44:7e:ed:2d:db:93:84:83:57:af:a6:24:8e:
76:1f:c9:c4:cf:32:f5:e0:7c:1c:92:43:ff:b9:24:cc:4f:eb:
c8:8e:39:cd:27:f6:62:9c:e5:ff:5d:3e:12:a4:75:99:4d:0e:
ab:e2:89:d3:ef:ce:ed:bf:df:35:2a:a5:4e:b5:ce:b9:cd:00:
8e:e0:85:41:06:e0:49:29:5a:47:37:b3:d1:34:cb:07:b4:28:
fb:56:e1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 06:59:47 2023 by rpki-client on console-fra.rpki-client.org