Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IcVtd4GVZ3jwG0_QyOhaciT8iu4.roa
File: IcVtd4GVZ3jwG0_QyOhaciT8iu4.roa (raw, json)
Hash identifier: IeDfczH5g91NcC3rqRxIH+VPxklhmHDDssglND9tYA4=
Subject key identifier: 21:C5:6D:77:81:95:67:78:F0:1B:4F:D0:C8:E8:5A:72:24:FC:8A:EE
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 0192522684C594A87D10E24EF3652935547E
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IcVtd4GVZ3jwG0_QyOhaciT8iu4.roa
Signing time: Thu 03 Oct 2024 11:31:48 +0000
ROA not before: Thu 03 Oct 2024 11:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.37.98.0/24 maxlen: 24
46.37.113.0/24 maxlen: 24
46.37.122.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 17:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:26:84:c5:94:a8:7d:10:e2:4e:f3:65:29:35:54:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Oct 3 11:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21c56d7781956778f01b4fd0c8e85a7224fc8aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:10:3d:60:c5:eb:b9:a6:da:91:44:59:b9:
7d:58:b5:91:c2:11:a8:ae:ac:5d:ad:c6:8b:dd:a7:
6e:8b:e4:28:91:45:fa:f6:ed:71:1d:97:35:aa:0a:
f3:ef:25:b1:5a:a2:16:9a:ae:d5:d5:0a:48:ae:4c:
f7:42:a6:b0:a8:23:dc:11:b0:c7:f3:16:55:de:68:
fe:cf:4e:22:eb:f6:d4:cd:25:12:ac:e0:b8:eb:dc:
16:f1:9c:08:a8:d1:5f:72:f2:d0:31:21:32:6e:4e:
e3:5f:de:ea:db:e5:db:13:31:3b:35:51:15:cb:7a:
6a:d6:15:c1:ac:84:f7:7f:93:31:38:80:ec:70:1c:
ce:b9:e3:5a:4f:b4:01:60:01:f4:6b:6d:58:23:44:
aa:83:2a:e0:20:4a:85:cc:96:76:a7:f8:12:74:83:
8b:47:dd:70:4b:de:8f:a1:fa:54:93:6b:bf:ff:d6:
99:d8:d2:d4:28:fc:49:1d:f6:54:d2:e0:20:77:f7:
bc:96:5b:76:d8:97:bf:67:e3:48:1e:1c:0c:76:b9:
fc:2c:a3:17:71:b0:61:3f:85:e9:97:e7:7c:dc:f3:
c6:b2:95:bd:16:f7:2e:3d:a7:82:c3:c3:cf:7d:fc:
aa:6e:6a:7c:30:74:c0:69:93:24:ab:87:b2:26:14:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C5:6D:77:81:95:67:78:F0:1B:4F:D0:C8:E8:5A:72:24:FC:8A:EE
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/IcVtd4GVZ3jwG0_QyOhaciT8iu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.98.0/24
46.37.113.0/24
46.37.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:51:f8:92:01:0d:0c:13:3d:a8:26:2e:70:48:85:ca:e4:92:
76:d7:5f:14:2f:35:21:50:2d:fc:e2:07:4f:c5:46:a0:65:36:
85:c5:8d:b0:20:46:95:26:3d:69:7a:2c:2c:27:d4:b5:57:6a:
c2:d4:2b:23:67:76:79:6c:c1:01:3a:fb:e3:6b:61:07:10:30:
92:16:cb:10:c7:79:b5:b0:17:63:b2:66:d4:f9:83:d4:3c:23:
27:6b:61:28:37:c2:72:3f:a6:63:ca:b6:5a:c7:af:1f:e3:ba:
e6:e7:c3:46:a8:80:78:40:8c:0e:3e:3f:b2:6b:cd:c2:ff:14:
78:dc:5d:5c:f7:a8:7f:37:90:ca:cf:86:72:fb:59:e3:ae:b5:
b6:fc:b9:8d:55:44:a7:52:16:c9:18:f4:4d:74:73:9b:d3:67:
f3:81:73:89:30:17:b8:8c:f4:16:fb:b3:8d:53:63:1a:aa:c9:
9e:9c:b5:cb:8e:ff:f5:ad:36:ef:86:93:ae:cb:b8:13:a2:71:
f4:9a:5f:34:d8:6a:af:40:c4:64:ed:1c:58:a1:4a:94:f8:aa:
68:94:ec:67:41:41:f5:38:14:51:6c:46:be:e6:3c:aa:a6:bb:
a7:ef:9d:bc:a6:d4:23:71:f9:7a:fe:05:e2:b2:3d:c6:48:ee:
cf:d7:3e:71
-----BEGIN CERTIFICATE-----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 at Mon Oct 14 19:24:49 2024 by rpki-client on console-fra.rpki-client.org